CVE-2026-74900

openssl_encrypt before version 1.4.0 has a flaw in pqc.py: when KEM decapsulation fails, it silently falls back to simulation mode, deriving a deterministic shared secret from just 16 bytes of the private key plus public encapsulated key data. An attacker with those 16 private-key bytes can compu...

CVE-2026-51977

Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera v1.0 exposes its RSA private key, enabling a physically proximate attacker to escalate privileges. CVSS 9.1 (critical) reflects high confidentiality and integrity impact. A proof-of-concept exists per CISA SSVC data. No patch version or reme...

CVE-2026-51977

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

CVE-2026-51977

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

PT-2026-76870

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privileges via the RSA private key component...

EUVD-2026-58182

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

CVE-2026-73567 sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

EUVD-2026-57920

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...

CVE-2026-68451 s390/zcrypt: Validate length for CCA ECC private key requests

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field in the key token. Reject the request early if the token length excee...

CVE-2026-68451

The CVE-2026-68451 issue affects the Linux kernel s390 zcrypt module. The cca_ecc2protkey() function derives the CPRB copy length from the key token’s length field and now rejects requests where the token length exceeds the available space in the parameter block, addressing a memory-corruption ri...

Kibana 8.19.20 and 9.4.5 Security Update (ESA-2026-87)

Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet...

CVE-2026-66016

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

EUVD-2026-57259

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016 Rendered Artifactory Helm manifests may contain generated TLS private keys

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

CVE-2026-66016

CVE-2026-66016 concerns rendered Artifactory Helm manifests produced under specific self-hosted Helm configurations, where generated TLS private keys may be retained and become accessible to highly privileged local users. The CVSS-derived metrics in the initial entry indicate local attack vector,...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

EUVD-2026-57209

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-47232

Admidio prior to v5.0.10 exposes a sensitive action (mode=export) that returns a PKCS#12 bundle containing the private key and certificate without requiring CSRF validation. The vulnerability arises because the CSRF check in modules/sso/keys.php is commented out, enabling a forged POST from an au...

CVE-2026-47232

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-47232 Admidio PKCS#12 private key export action lacks CSRF protection

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive mode=export action in modules/sso/keys.php exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...