Threats tagged 'ghsa-7mpx-94gm-vm7j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.4	CVE-2026-109140The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to High8.42026-11-02GCVE DatabaseCVE-2026-109140 Krill has a vulnerability where it encrypts login-session tokens using a nonce derived from a counter that resets to zero on every restart. This causes reuse of the same (key, nonce) pair after each restart, undermining the security of the encryption. Report on CVE-2026-109140 Vulnerability CWE-323 #ghsa-7mpx-94gm-vm7j	GCVE Database	2026-11-02

Page 1 of 1