CVE ID :CVE-2026-108269 Published : Oct. 9, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108269 - ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

VERWANDTEARTIKEL

CVE-2026-108267 - Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

CVE-2026-108268 - enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

CVE-2026-22061 - CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

CVE-2026-108265 - enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

CVE-2026-108264 - Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)

CVE-2026-62376 - Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access