118036 matches found
CVE-2026-54404
creationtimestamp| type| source ---|---|--- 2026-07-02 18:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponbkeuld2v 2026-07-03 19:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprczq72g72f 2026-07-08 11:01:21+00:00| seen|...
AZL-95660 CVE-2026-54887 affecting package erlang for versions less than 26.2.5.21-6
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
UBUNTU-CVE-2026-54887
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
CVE-2026-54887
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
CVE-2026-38057
creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:11+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01 2026-07-10 21:54:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd56jbznv2f 2026-07-12 11:00:54+00:00| seen|...
CVE-2025-58902
creationtimestamp| type| source ---|---|--- 2026-07-02 17:05:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpojbp3e6w2v 2026-07-03 03:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplzmqmgt2k 2026-07-03 11:39:39+00:00| seen|...
CVE-2026-56004
creationtimestamp| type| source ---|---|--- 2026-07-02 17:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpoj4u4vxb2v 2026-07-02 19:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoqdaf76u2v 2026-07-03 07:19:31+00:00| seen|...
GHSA-VRM6-8VPV-QV8Q
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:17+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
GHSA-2MJP-6Q6P-2QXM
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:16+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
GHSA-V9P9-HFJ2-HCW8
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:12+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
GHSA-G8M3-5G58-FQ7M
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:09+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
GHSA-4992-7RV2-5PVQ
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:06+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
GHSA-P88M-4JFJ-68FV
creationtimestamp| type| source ---|---|--- 2026-07-02 16:42:05+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
CVE-2026-54887
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
EUVD-2026-41411
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
EEF-CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret
Summary Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtls\server\connection:initial\hello/3 initializes previous\cookie\secret...
CVE-2026-54887 DTLS server cookie bypass during startup window due to empty initial cookie secret
Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...
CVE-2026-54887
CVE-2026-54887 concerns Erlang/OTP's DTLS server in ssl, where during startup the cookie secret is initialized to an empty binary instead of a random value. This makes DTLS cookie computation deterministic for the first 0–15 seconds, allowing an observer of plaintext ClientHello to forge a valid ...