84 matches found
CVE-2026-79551-Tenda
CVE-2026-79551 Tenda 硬编码 TLS 私钥 CNVD ID： CNVD-2026-25884 厂商： 深圳市吉祥腾达科技有限公司 产品： NVR4H 网络录像机（硬件版本 CH3V2.1） 固件： V27.5.58.6 类别： CWE-321 — 使用硬编码加密密钥 概述 NVR4H 固件将其 ECDSA 密钥对存储于只读的 user-x.squashfs 分区中（挂载于 /opt/app/）：私钥位于 /etc/privkey.pem，匹配的自签名证书位于 /etc/cacert.pem。两者均在构建时生成一次并固化到镜像中，因此所有运行 V27.5.58.6...
rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions
A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...
rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions
A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...
The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U, related to bypassing authentication using a user-controlled key, allows a perpetrator to intercept sessions and gain access to the account.
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the ability to bypass authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely intercept sessions and gain control of the user account...
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to the lack of security measures for website structures, allows attackers to intercept sessions and gain access to user accounts.
The vulnerability of the software for secure file sharing and transmission related to SolarWinds Serv-U lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain access to the user account...
Linux Distros Unpatched Vulnerability : CVE-2026-18654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow...
CVE-2026-73809
A cleartext transmission vulnerability in Ebyte gateway products (including the NE2-D11) affects the web management interface , which does not adequately enforce transport-layer encryption . An attacker with network access could intercept authentication or session data, leading to disclosure of s...
CVE-2026-73809 Ebyte NE2-D11 Cleartext Transmission of Sensitive Information
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...
CVE-2026-73809 Ebyte NA111-M Cleartext Transmission of Sensitive Information
A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...
CVE-2026-70454
A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...
SUSE CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the TLS certificate validation process. An attacker can intercept and decrypt or tamper with encrypted sessions by presenting a self-signed or otherwise invalid certificate, exploiting the lack of prop...
AZL-95777 CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
ALPINE-CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
CVE-2026-70454
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
CVE-2026-43910
Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...
CVE-2026-43910 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...
java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
Summary When directConnecttrue is enabled, appium/java-client unconditionally accepts directConnectHost, directConnectPort, and directConnectPath from the server's NEWSESSION response and silently redirects all subsequent session traffic to the attacker-specified endpoint — with no allowlist, no...
The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption and secret management system allows a hacker to intercept the user session.
The vulnerability of the JWT/OIDC authentication method of the OpenBao encryption system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to intercept a user’s session...
