Month: July 2026

Information published. Continue reading CVE-2026-55964 Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)→

Information published. Continue reading CVE-2026-55960 Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation→

Information published. Continue reading CVE-2026-6450 CRL critical extension bypass in ParseCRL_Extensions→

Information published. Continue reading CVE-2026-7532 iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined→

Information published. Continue reading CVE-2026-6291 Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption→

Information published. Continue reading CVE-2026-57918 libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker.→

Information published. Continue reading CVE-2026-57231 Podman: Malformed Image can trick podman run into leaking host environment variables into the container→

Information published. Continue reading CVE-2026-13325 Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces→