Threats Tagged 'cwe-308'

CVE-2026-58240 is a critical vulnerability in SAP NetWeaver Message Server versions 9.18, 9.19, and 9.20. The issue arises from insufficient validation of internal application server components during registration, allowing an unauthenticated attacker with network access to register unauthorized components. This can lead to unauthorized actions within the application environment, severely impacting confidentiality, integrity, and availability.

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /users/totp/disable` and `POST /users/totp/backup-codes` endpoints in Termix prior to version 2.3.2 accept the account password as a sole authentication factor for MFA-critical operations. An attacker who obtains a user's password (phishing, credential stuffing, the passwordHash leak in GHSA-xxxx) can disable TOTP entirely or regenerate backup codes, without ever possessing the TOTP device or knowing a valid TOTP code. This renders two-factor authentication ineffective. Version 2.3.2 patches the issue.

CVE-2026-33550 is a low-severity vulnerability in Alinto's SOGo email and collaboration platform versions before 5.12.5. The issue involves improper handling of one-time passwords (OTPs) used for multi-factor authentication (MFA). Specifically, when a user disables and then re-enables OTP-based MFA, the system fails to renew the OTP secret, and the OTP length is only 12 digits instead of the recommended 20 digits. This weakness effectively reduces the strength of the second authentication factor, increasing the risk of unauthorized access through OTP guessing or replay attacks. Exploitation requires high privileges and user interaction, and no known exploits exist in the wild. Organizations using vulnerable SOGo versions should upgrade to 5.12.5 or later and enforce stronger OTP configurations to mitigate this risk.

LowVulnerabilityUnited StatesFranceGermany+7#cve#cve-2026-33550#cwe-308

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code (HMAC) credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation could result in complete system compromise, affecting confidentiality, integrity, and availability.

HighVulnerabilityUnited StatesGermanyIndia+10#cve#cve-2025-42959#cwe-308