SUSE CVE-2026-90345

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P device vif is always available. That is not true when userspace sends non-P2P public action frames through the primary...

PT-2026-99825

Multiple security vulnerabilities affect the cert-manager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

CVE-2026-54551

WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket in internal/app/api/v0/handlers/endpointwebsocket.go subscribes to TopicPeerStatsUpdated and TopicInterfaceStatsUpdate...

User Impersonation

Overview @libp2p/peer-store is a Stores information about peers libp2p knows on the network Affected versions of this package are vulnerable to User Impersonation via consumePeerRecord in peer-store/src/index.ts, where the peer ID derived from the envelope's signing public key is compared against...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: SNYK:JS-LIBP2PPEERSTORE-20044965...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: OSV:GHSA-VRF4-MX87-P53W...

GHSA-VRF4-MX87-P53W libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

Summary @libp2p/peer-store accepts a signed PeerRecord whose envelope is signed by one peer but whose payload claims a different peer ID. The vulnerable consumePeerRecord path verifies the envelope signature, but does not verify that the envelope signer is the same peer as the wrapped...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: GHSA-VRF4-MX87-P53W...

GHSA-C3GV-825Q-FVMP libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

Summary @libp2p/gossipsub StrictSign validation does not bind a supplied message public key to the claimed from peer ID when from is an RSA-style peer ID that does not inline its public key. An attacker can set from to a victim RSA peer ID, sign the message with the attacker's own private key,...

libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID

Summary @libp2p/gossipsub StrictSign validation does not bind a supplied message public key to the claimed from peer ID when from is an RSA-style peer ID that does not inline its public key. An attacker can set from to a victim RSA peer ID, sign the message with the attacker's own private key,...

EUVD-2026-82334

WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket in internal/app/api/v0/handlers/endpointwebsocket.go subscribes to TopicPeerStatsUpdated and TopicInterfaceStatsUpdate...

CVE-2026-54551 WireGuard Portal: Authenticated WebSocket /api/v0/ws broadcasts all peers' and interfaces' traffic stats to every user (missing per-user authorization)

WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics WebSocket in internal/app/api/v0/handlers/endpointwebsocket.go subscribes to TopicPeerStatsUpdated and TopicInterfaceStatsUpdate...

CVE-2026-86039

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86039 libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86039

CVE-2026-86039 affects @libp2p/peer-store (part of the JavaScript libp2p networking stack) from versions 8.0.0 through 12.0.24 . The root cause is in consumePeerRecord, which verifies a RecordEnvelope signature but fails to require that PeerRecord.peerId in the signed payload matches the signer p...

@abaxxlabs/agents (>=0.12.5, <=0.42.1), @agent-p2p/cli (>=0.0.1, <=0.0.7) +352 more potentially affected by CVE-2026-86039 via @libp2p/peer-store (>=8.2.1-05abd49f, <=12.0.24-e86b39e5d)

@libp2p/peer-store NPM version =8.2.1-05abd49f, =0.12.5, =0.0.1, =0.0.1, =1.0.0, =0.2.1, =0.3.1, =0.2.1, =0.4.1, =1.3.0, =0.0.2, =1.1.3, =0.2.0, =0.2.5 - @axonsdk/cli 0.1.6 and more Source cves: CVE-2026-86039 Source advisory: MEND:CVE-2026-86039...

CVE-2026-86039 libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86038

CVE-2026-86038 affects the @libp2p/gossipsub package (versions 15.0.0 through 16.0.5) in the JavaScript libp2p networking stack. The vulnerability resides in validateToRawMessage within the default StrictSign policy: when a claimed author is an RSA peer ID that does not inline a public key, the f...

CVE-2026-86038

libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossipsub uses the default StrictSign policy in packages/gossipsub/src/utils/buildRawMessage.ts, where validateToRawMessage verifies a signature with attacker-controlled msg.key but skips bindi...

CVE-2026-93015 BlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds Write

BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP stream endpoint discovery. A bonded peer can send an AVDTP DISCOVER response with more endpoints than the fixed table holds, causing out-of-bounds writes that corrupt adjacent static...