CVE-2026-92120: Apache Allura: Oauth1 Replay Attack
Apache Allura is affected by a low-severity OAuth1 replay attack tracked as CVE-2026-92120.
Stories per day · 30 days
1 RSS
5 stories, newest first · one card per story
Stories tagged #replay-attack
CVE-2026-92899: Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
Apache WSS4J stores UsernameToken nonces as raw base64, so re-encoded nonces bypass replay protection; versions before 2.4.4, 3.0.6, and 4.0.2 affected.
CVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayed
Apache Roller 6.1.5 lets attackers replay captured WSSE digest headers to bypass AtomPub authentication.
NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces
Researchers characterize NERVE, five attack dimensions against AI-powered brain-computer interfaces, and release the EEGle framework uncovering 17 attack instances.
CVE-2026-86219: Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step
Authen::SASL::Perl::DIGEST_MD5 before 2.2100 for Perl accepts replayed DIGEST-MD5 authentication responses via unverified nonce handling (CVE-2026-86219).