https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 01:56:31 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45575 <p><strong>Affected:</strong> oviva-ag epa4all-client, com.oviva.telematik epa4all-client</p> <p>epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI network) can substitute a forged discovery document. The forged document redirects uri_puk_idp_enc and uri_puk_idp_sig to attacker-controlled URLs. The client then encrypts the SMC-B-signed challenge response to the attacker&#39;s encryption key and POSTs it to the attacker&#39;s auth endpoint. This captures the signed authentication material. This vulnerability is fixed in 1.2.2.</p> <p><strong>Affected:</strong> oviva-ag epa4all-client, com.oviva.telematik epa4all-client</p> <p>epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.2, an attacker who can MITM the TLS connection between the client and the IDP (within the TI network) can substitute a forged discovery document. The forged document redirects uri_puk_idp_enc and uri_puk_idp_sig to attacker-controlled URLs. The client then encrypts the SMC-B-signed challenge response to the attacker&#39;s encryption key and POSTs it to the attacker&#39;s auth endpoint. This captures the signed authentication material. This vulnerability is fixed in 1.2.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-45575