[SECURITY] Fedora 43 Update: nss-3.127.0-1.fc43

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

PT-2026-85113

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-55856

A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...

CVE-2026-84775

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

EUVD-2026-69941

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775

CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

OpenSSL pinning bypass

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

K000163170: Mbed TLS vulnerability CVE-2026-34877

Security Advisory Description An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary...

PT-2026-84658

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description When using the wolfSSL backend with CA caching enabled, a flaw exists where the CURLOPT SSL CTX FUNCTION callback can be overridden. If this callback replaces the trust store, libcurl may...

CVE-2026-84775: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

PT-2026-84703

Name of the Vulnerable Software and Affected Versions Really Simple SSL versions prior to 9.8.1 Description An unauthenticated Denial of Service DoS issue exists, which allows an attacker to disrupt the availability of the service without requiring valid credentials. Recommendations Update to a...

Google Chrome Edge Confidential Data Access

The vulnerability of the SSL component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

PT-2026-84655

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where libcurl fails to enforce public key pinning when CURLOPT PINNEDPUBLICKEY is used in conjunction with options that disable standard peer verification, specifically CURLOPT S...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

FortiGate SSL-VPN kit recovered in the wild Research arch...

Important: Red Hat Security Advisory: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...