https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:33:01.189625+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-67923 EUVD-2026-67923 2026-10-10T16:33:01.256885+00:00 EUVD-2026-67923 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16150 fkie_cve-2018-16150 2026-10-10T16:33:01.256925+00:00

In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the hash value. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is a variant of CVE-2006-4340.

 https://cve.radiocsirt.org/vuln/ghsa-wj3m-9v78-x5g4 GHSA-wj3m-9v78-x5g4 2026-10-10T16:33:01.256959+00:00

In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the hash value. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is a variant of CVE-2006-4340.

 https://cve.radiocsirt.org/vuln/gsd-2018-16150 gsd-2018-16150 2026-10-10T16:33:01.256977+00:00 gsd-2018-16150