CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777

WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...

EUVD-2026-70573

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

erlang: Erlang/OTP: Denial of Service in TLS 1.3 session ticket handling

A flaw was found in Erlang/OTP's SSL Secure Sockets Layer application. An unauthenticated remote attacker can send a specially crafted ClientHello message to a TLS 1.3 server with session tickets enabled. This can permanently disrupt the server's ability to handle session tickets, leading to a...

erlang: Erlang SSL: Unauthenticated data injection during TLS handshake

A flaw was found in Erlang's SSL Secure Sockets Layer component. A network-positioned attacker can exploit this vulnerability by injecting unauthenticated plaintext data into a client's TLS Transport Layer Security handshake. The client application may then process this injected data as if it wer...

CVE-2026-77999 Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6

Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN listener's signature check validateIPN accepted UNVERIFIED and any non-INVALID response as valid, made its verificati...

[SECURITY] Fedora 44 Update: nss-3.127.0-1.fc44

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 43 Update: nss-3.127.0-1.fc43

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

CVE-2026-84777: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

PT-2026-85113

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-55856

A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...

CVE-2026-84775

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775

CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

EUVD-2026-69941

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

OpenSSL pinning bypass

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...