// security

$ tail -f ./security

Headlines from early disclosure channels, research labs and curated news, each with a short summary.

live updated 23 Oct, 23:14
last 24 h 74 headlines
sources 37

# Yesterday

  1. ZDI published early signals infra

    ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

    OpenSSL CMP has a remote information disclosure vulnerability, tracked as CVE-2026-63073, requiring no authentication.

    zerodayinitiative.com
  2. ZDI published early signals infra

    ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

    OpenSSL contains a vulnerability in CMS AuthEnvelopedData integrity check validation that could allow tampering by network-adjacent attackers.

    zerodayinitiative.com