77 matches found
CVE-2026-73636
A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...
openSUSE 16 Security Update : perl-Authen-SASL (openSUSE-SU-2026:21946-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21946-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in...
OPENSUSE-SU-2026:21946-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
SUSE-SU-2026:23913-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
SUSE SLED15 / SLES15 Security Update : perl-Authen-SASL (SUSE-SU-2026:4302-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4302-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepte...
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
SUSE SLES12 Security Update : perl-Authen-SASL (SUSE-SU-2026:4280-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4280-1 advisory. This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified...
Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
SUSE-SU-2026:4280-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
CVE-2026-86219
The Authen::SASL::Perl::DIGEST_MD5 component in Perl (versions before 2.2100 ) is vulnerable to a replay attack due to an unverified nonce in the server_step function. While server_start generates a fresh nonce, the system fails to compare the returned value against the original challenge. Conseq...
PT-2026-86414
Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description A path traversal issue exists in the 'notify.ffmpeg.json.php' endpoint. Unauthenticated attackers can write files to arbitrary locations within the application root and subdirectories by...
CVE-2025-61479
An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...
CVE-2026-15239 Simple CAPTCHA with Cloudflare Turnstile < 1.42.0 - Unauthenticated Turnstile Protection Bypass via Reusable Forminator Cache Key
The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.42.0 does not bind its Turnstile validation cache to the single-use challenge token in its Forminator integration, instead keying it to an attacker-controlled, reusable request value, allowing unauthenticated attackers to solv...
CVE-2026-24084
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
EUVD-2026-52735
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities...
CVE-2026-24084
Technical details about CVE-2026-24084 are not publicly available in the provided documents. Monitor for updates from the listed sources; current entries only state a weak configuration related to UE security capability replay verification.