https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:27:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375377 EUVD-2026-375377 https://cve.radiocsirt.org/vuln/euvd-2026-375377 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73064 <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73064 https://cve.radiocsirt.org/vuln/ghsa-crc8-r3c8-83vw <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> https://cve.radiocsirt.org/vuln/ghsa-crc8-r3c8-83vw https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73064 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls, Ubuntu:Pro:22.04:LTS: mbedtls, Ubuntu:Pro:24.04:LTS: mbedtls, Ubuntu:26.04:LTS: mbedtls</p> <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls, Ubuntu:Pro:22.04:LTS: mbedtls, Ubuntu:Pro:24.04:LTS: mbedtls, Ubuntu:26.04:LTS: mbedtls</p> <p>In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-73064