CVE-2026-18668

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18668 Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18668 Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-18668

IBM Sterling File Gateway and IBM Sterling B2B Integrator are vulnerable to a protection mechanism failure (CWE-693) due to a security misconfiguration. This flaw could allow a remote attacker to perform protocol downgrade attacks . Affected versions include IBM Sterling File Gateway 6.2.1.0 thro...

EUVD-2026-119703

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21 and 6.2.2.0 - 6.2.2.11 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-123497

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

CVE-2026-123497 Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

CVE-2026-123497 Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

CVE-2026-123497

Vikunja veans versions prior to 2.7.1 are susceptible to a protocol downgrade vulnerability within the serverCandidates component. This flaw allows an on-path attacker to force the application to use plain HTTP during the veans init and login processes by blocking HTTPS ports. Consequently, the d...

CVE-2026-123497 Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

EUVD-2026-119382

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

PT-2026-139778

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

CVE-2026-123497: go-vikunja vikunja: Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path…

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

PT-2026-140123

IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2 1 and 6.2.2.0 - 6.2.2.1 1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration...

CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-

CVE-2026-11109 – Bluetooth Classic KNOB Attack Key Negotiation of Bluetooth Program Code Python Simulated knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize: Vulnerable: accepts any key siz...

Security Bulletin: Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway (CVE-2026-18668)

Summary IBM Sterling File Gateway has addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-18668 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. CWE:CWE-693:...

Security Bulletin: Protection Mechanism Failure vulnerability affects IBM Sterling B2B Integrator (CVE-2026-18668)

Summary IBM Sterling B2B Integrator has addressed this security vulnerability Vulnerability Details CVEID:CVE-2026-18668 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. CWE:CWE-693:...

Linux Distros Unpatched Vulnerability : CVE-2026-109952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOLRDSTLS or PROTOCOLHYBRIDEX against its enabled protocol set in...

Astra Linux – vulnerability in netty

Netty is an open-source, asynchronous event-driven network application framework designed for rapidly developing high-performance protocol servers and clients. In Netty io.netty:netty-codec-http2 prior to version 4.1.60.Final, there is a vulnerability that allows request smuggling. If a...

SUSE CVE-2026-109952

The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOLRDSTLS or PROTOCOLHYBRIDEX against its enabled protocol set in negoprocessnegotiationresponse, allowing a security protocol downgrade. A malicious server or man-in-the-middle can select RDSTLS to override /sec:nla...