https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:31:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338633 EUVD-2026-338633 https://cve.radiocsirt.org/vuln/euvd-2026-338633 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63089 <p>WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate candidate tokens against the unauthenticated /cnf/:oneTimeLink route, which lacks rate limiting and does not validate token expiration, to obtain a peer&#39;s PrivateKey and PresharedKey and impersonate that peer on the VPN network.</p> <p>WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate candidate tokens against the unauthenticated /cnf/:oneTimeLink route, which lacks rate limiting and does not validate token expiration, to obtain a peer&#39;s PrivateKey and PresharedKey and impersonate that peer on the VPN network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63089 https://cve.radiocsirt.org/vuln/ghsa-m894-wgpg-hwpv <p>WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate candidate tokens against the unauthenticated /cnf/:oneTimeLink route, which lacks rate limiting and does not validate token expiration, to obtain a peer&#39;s PrivateKey and PresharedKey and impersonate that peer on the VPN network.</p> <p>WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attackers to recover WireGuard peer credentials by brute-forcing a keyspace of at most 1000 candidate tokens per client ID, as the token is computed using CRC32 over a random value constrained to 0-999. Attackers can enumerate candidate tokens against the unauthenticated /cnf/:oneTimeLink route, which lacks rate limiting and does not validate token expiration, to obtain a peer&#39;s PrivateKey and PresharedKey and impersonate that peer on the VPN network.</p> https://cve.radiocsirt.org/vuln/ghsa-m894-wgpg-hwpv