Security Advisory 0175

Security Advisory 0175 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73468 CVSSv3.1 Base Score: 6.5...

nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

Summary When OIDC is enabled, GET /ui/oidc/login is reachable without authentication and is registered outside the Web UI rate-limited auth routes. Every request creates a fresh random OIDC state value and stores it in an in-memory map for 10m. Expired states are swept lazily, but there is no rat...

PT-2024-14626

Name of the Vulnerable Software and Affected Versions OpenBSD version 7.4 before errata 009 Description A race condition exists between pf4's processing of packets and expiration of packet states, which may cause a kernel panic. Recommendations For OpenBSD version 7.4 before errata 009, apply...