CVE-2026-93964 NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

CVE-2026-93964: Missing Authentication for Critical Function

A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1. This impacts the function internalCertificate.validate of the file backend/internal/certificate.js of the component Validate Route. The manipulation results in missing authentication. The attack can be launched...

PT-2026-95911

Name of the Vulnerable Software and Affected Versions nginx-proxy-manager versions prior to 2.15.2 Description Missing authentication in the Validate Route component allows remote attackers to manipulate the internalCertificate.validate function within the backend/internal/certificate.js file. Th...

sslscan v2.2.3

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

CVE-2026-84975 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...

CVE-2026-84975

PJSIP versions 2.17 and earlier are affected by a TLS server identity verification bypass in the OpenSSL and GnuTLS backends. The vulnerable code in ssl_sock_ossl.c and ssl_sock_gtls.c copies DNS SubjectAltName values using string functions that recalculate length and truncate an embedded NUL byt...

CVE-2026-84975 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...

CLEANSTART-2026-AD31349 Security fix for CVE-2018-0734 applied in: nodejs 10.14.0-r0, openssl 1.1.1a-r0

CVE-2018-0734 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JO42932 Security fix for CVE-2018-0735 applied in: nodejs 10.14.0-r0, openssl 1.1.1a-r0

CVE-2018-0735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PY31996 Security fix for CVE-2022-3786 applied in: nodejs 18.12.1-r0, openssl 3.0.7-r0

CVE-2022-3786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HF71338 Security fix for CVE-2022-3602 applied in: nodejs 18.12.1-r0, openssl 3.0.7-r0

CVE-2022-3602 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH90619 Security fix for CVE-2019-1543 applied in: openssl 1.1.1b-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TP50755 Security fix for CVE-2019-1547 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RI18304 Security fix for CVE-2019-1563 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WP77838 Security fix for CVE-2019-1549 applied in: openssl 1.1.1d-r1

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY20850 Security fix for CVE-2021-3450 applied in: openssl 1.1.1k-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG73322 Security fix for CVE-2020-1967 applied in: openssl 1.1.1g-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JO98331 Security fix for CVE-2019-1551 applied in: openssl 1.1.1d-r3

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JE67710 Security fix for CVE-2020-1971 applied in: openssl 1.1.1i-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AD83127 Security fix for CVE-2021-23840 applied in: openssl 1.1.1j-r0

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...