afot

Automation FOrensics Tool The Automation FOrensics Tool AFOT is an automation tool build in Python and used for Windows Forensics in order to combine the following tools: AnalyzePESig http://didierstevens.com/files/software/AnalyzePESigV0002.zip National Software Reference Library reduced set...

JetBrains PhpStorm < 2025.3.6.2 / 2026.1.x < 2026.1.5.1 / 2026.2.x < 2026.2.4 Improper Certificate Revocation Check

According to its self-reported version, the JetBrains PhpStorm installation on the remote host is prior to 2025.3.6.2, or 2026.1.x prior to 2026.1.5.1, or 2026.2.x prior to 2026.2.4. It is, therefore, affected by an improper certificate revocation check vulnerability. In JetBrains PhpStorm before...

SUSE SLED15: apache-commons-codec / apache-commons-io / apache-commons-logging / etc (SUSE-SU-2026:5017-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5017-1 advisory. This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon- logkit,...

CLEANSTART-2026-DA71131 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-IN28116 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-VJ21059 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

AZL-112406 CVE-2026-118768 affecting package botan2 2.14.0-2

Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the botan ocspcheck command requested an OCSP response from a certificate's Authority Information Access URL without verifying the response signature or authorizing the signer. A malicious responder or on-path attacker could return a...

CLEANSTART-2026-YQ02722 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the argo-cd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CLEANSTART-2026-DO02682 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the etcd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

PT-2026-134708

Security vulnerability affects the etcd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CLEANSTART-2026-BT27510 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Arm Mbed TLS before version 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock...

CLEANSTART-2026-NT44530 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-DM81687 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-OR76615 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-AH42330 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-GL99868 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the consul package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CLEANSTART-2026-KP97729 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the kube-state-metrics-fips package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CLEANSTART-2026-JN22771 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the containerd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

Linux Distros Unpatched Vulnerability : CVE-2026-102269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts...