https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:36:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06675 bdu:2026-06675 https://cve.radiocsirt.org/vuln/bdu:2026-06675 https://cve.radiocsirt.org/vuln/euvd-2026-336236 EUVD-2026-336236 https://cve.radiocsirt.org/vuln/euvd-2026-336236 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37660 <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37660 https://cve.radiocsirt.org/vuln/ghsa-hmq6-3hm7-3h78 <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> https://cve.radiocsirt.org/vuln/ghsa-hmq6-3hm7-3h78 https://cve.radiocsirt.org/vuln/gsd-2022-37660 gsd-2022-37660 https://cve.radiocsirt.org/vuln/gsd-2022-37660 https://cve.radiocsirt.org/vuln/icsa-26-202-04 <p>SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.</p> <p>Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.</p> <p>SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.</p> <p>Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/icsa-26-202-04 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 NCSC-2026-0229 https://cve.radiocsirt.org/vuln/ncsc-2026-0229 https://cve.radiocsirt.org/vuln/ssa-585531 <p>SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.</p> <p>Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.</p> <p>SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below.</p> <p>Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-585531 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37660 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa</p> <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: wpa, Ubuntu:22.04:LTS: wpa, Ubuntu:24.04:LTS: wpa</p> <p>In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This will result in the public ephemeral key X; the only element required to subvert the PKEX association.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37660 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0355 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in hostapd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in hostapd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0355