CVE ID :CVE-2026-108267 Published : Oct. 9, 2026, 10:16 p.m. | 1 hour, 13 minutes ago Description :Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108267 - Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

VERWANDTEARTIKEL

CVE-2026-108268 - enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

CVE-2026-108269 - ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

CVE-2026-22061 - CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

CVE-2026-108265 - enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

CVE-2026-108264 - Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)

CVE-2026-62376 - Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access