Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On June 5, 2026, Fedora released updates for NextCloud addressing two critical vulnerabilities: CVE-2026-42044 and CVE-2026-44167. CVE-2026-42044 involves JSON response tampering via prototype pollution in Axios, while CVE-2026-44167 allows denial of service through untrusted ASN.1 file loading in p...
A denial of service vulnerability (CVE-2026-44167) has been identified in the phpseclib library used in Fedora systems. The flaw allows attackers to exploit untrusted ASN.1 file loading, potentially leading to service disruption. Fedora versions 43 and 44 are affected, prompting an urgent update to...
Multiple vulnerabilities were discovered in phpseclib, a library for arbitrary-precision integer arithmetic. Notably, CVE-2026-32935 involves a lack of constant-time padding validation in AES CBC mode, potentially allowing remote attackers to obtain sensitive information. CVE-2026-40194 highlights a...