CVE-2025-68621

CVE-2025-68621 — Trilium Notes Timing Attack on /api/login/sync Severity: HIGH CVSS 7.4 Affected Software: TriliumNext/Trilium 0.101.0 Vulnerability Type: CWE-208 – Observable Timing Discrepancy Fixed In: Trilium 0.101.0 PR 8129 Published: 2026-02-06 | Reserved: 2025-12-19 Table of Contents 1. My...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Observable Timing Discrepancy in cryptography (CVE-2026-69247)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Observable Timing Discrepancy in cryptography due to issues in decryption. Cryptography is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

CVE-2026-87946

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87946 SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87946 SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87946 SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

EUVD-2026-107855

Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87946

The Drupal SAML SSO - Service Provider module, affecting versions 0.0.0 through 3.2.0 , is vulnerable to an Observable Timing Discrepancy . The root cause is the use of non constant-time comparison logic during signature comparisons, which may facilitate brute force attacks . Additionally, the mo...

Linux Distros Unpatched Vulnerability : CVE-2026-109379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timi...

Astra Linux – Vulnerability in Intel Microcode

Observable timing discrepancies in some Intel processors may allow an authenticated user to potentially enable information disclosure through local access...

CVE-2026-24715

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

CVE-2026-24715 Lack of Reproducible Vulnerability Evidence in QNAP Report

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

CVE-2026-24715

The QuRouter software is affected by an observable timing discrepancy vulnerability (CWE-208). If exploited, this flaw could allow remote attackers to obtain sensitive data . The issue has been resolved in QuRouter version 2.7.2.113 and later. No specific exploit details or in-the-wild exploitati...

EUVD-2026-101873

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

CVE-2026-24715 Lack of Reproducible Vulnerability Evidence in QNAP Report

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

PT-2026-114813

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

CVE-2026-24715: Observable Timing Discrepancy

An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130101 advisory. Observable Timing Discrepancy vulnerabilitywhen comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-...

Unity Linux 20.1070a Security Update: pam (UTSA-2026-130124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130124 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...

CVE-2026-49265: Observable Timing Discrepancy

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/granttypes/authorizationcode.py compare attacker-supplied codeverifier values with stored challenges using ordinary string equality in...