Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

110753 matches found

Tenable Nessus
Tenable Nessus•added 2026/10/14 12:00 a.m.•21 views

Security Updates for Microsoft Office Products C2R (October 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...

9.8CVSS7.7AI score0.01172EPSS
SaveExploits0References37
osv_azl
osv_azl•added 2026/10/13 10:18 p.m.•22 views

AZL-108033 CVE-2026-77207 affecting package libreswan 4.15-3

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/10/13 10:18 p.m.•16 views

DEBIAN-CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/13 10:18 p.m.•14 views

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS0.00463EPSS
SaveExploits0References2
osv_azl
osv_azl•added 2026/10/13 10:18 p.m.•22 views

AZL-108030 CVE-2026-77206 affecting package libreswan 4.15-3

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References1
osv_debian
osv_debian•added 2026/10/13 10:18 p.m.•13 views

DEBIAN-CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/13 10:18 p.m.•13 views

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS0.00658EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu•added 2026/10/13 10:18 p.m.•6 views

UBUNTU-CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/10/13 10:18 p.m.•9 views

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References3
Mend
Mend•added 2026/10/13 9:28 p.m.•13 views

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

8.7CVSS6.1AI score0.00463EPSS
SaveExploits0References3
Debian CVE
Debian CVE•added 2026/10/13 9:28 p.m.•9 views

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0
AlpineLinux
AlpineLinux•added 2026/10/13 9:28 p.m.•21 views

CVE-2026-77207

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0
CVE
CVE•added 2026/10/13 9:28 p.m.•36 views

CVE-2026-77207

The Libreswan VPN software contains a null pointer dereference bug within the PKCS#7 handling code used for IKE certificate authentication. The vulnerability occurs when the software decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509 . Specifically, the system uses two NSS APIs that disa...

7.5CVSS6.1AI score0.00463EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/10/13 9:28 p.m.•35 views

CVE-2026-77207 Null Pointer Dereference in PKCS#7 bundle with no certificates

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

7.5CVSS0.00463EPSS
SaveExploits0References2
Mend
Mend•added 2026/10/13 9:28 p.m.•14 views

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

8.7CVSS6.1AI score0.00658EPSS
SaveExploits0References3
CVE
CVE•added 2026/10/13 9:28 p.m.•37 views

CVE-2026-77206

A null pointer dereference flaw exists in the Libreswan IKEv2 state machine within the EAP handling code for authentication. Due to an inconsistency in the state machine, the software incorrectly dereferences ike->sa.st_eap, which is NULL, and this can be triggered even if EAP is not configure...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/10/13 9:28 p.m.•3 views

CVE-2026-77206 IKEv2 pre-authentication Null Pointer Dereference in EAP code

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/10/13 9:28 p.m.•10 views

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0
AlpineLinux
AlpineLinux•added 2026/10/13 9:28 p.m.•21 views

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS6.1AI score0.00658EPSS
SaveExploits0
Cvelist
Cvelist•added 2026/10/13 9:28 p.m.•27 views

CVE-2026-77206 IKEv2 pre-authentication Null Pointer Dereference in EAP code

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

7.5CVSS0.00658EPSS
SaveExploits0References2
Rows per page
Query Builder