CVE-2008-5082

mediumpriority · track · 24EPSS 0.008 · 56 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.78% (56th) EPSS

CVSS 6 · medium

Is it mine?

25 products

Check your exposure

Who says so?

3 sources

enisa_euvd · nvd · redhat_csaf

EPSS · scored 2026-10-28

The verifyProof function in the Token Processing System (TPS) component in Red Hat Certificate System (RHCS) 7.1 through 7.3 and Dogtag Certificate System 1.0 returns successfully even when token enrollment did not use the hardware key, which allows remote authenticated users with enrollment privileges to bypass intended authentication policies by performing enrollment with a software key.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedpkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedpkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tps-0:7.3.0-23.el4.i386 as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tps-0:7.3.0-23.el4.i386 as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tps-0:7.3.0-23.el4.x86_64 as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-tps-0:7.3.0-23.el4.x86_64 as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-util-0:7.3.0-20.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007
Fixedrhpki-util-0:7.3.0-20.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESredhat_csaf
Users running Red Hat Certificate System on Red Hat Enterprise Linux: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259 Users running Red Hat Certificate System on Sun Solaris: Updated Solaris packages, in .pkg format, are available in the Red Hat Certificate System Solaris channels on the Red Hat Network. This packages should be installed or upgraded using Solaris-native package management tools. For detailed installation instructions, see Chapter 2, "Installation and Configuration", of the Red Hat Certificate System 7.3 Administration Guide: http://redhat.com/docs/manuals/cert-system/7.3/html/Administration_Guide/Administration_Guide-Installation_and_Configuration.html
https://access.redhat.com/errata/RHSA-2009:0007

cvss

Technical severity, 0–10. One row per scoring source.

6.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.06mediumAV:N/AC:M/Au:S/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 6.8 · impact 6.4

v2.05.1mediumAV:N/AC:M/Au:S/C:P/I:P/A:P/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-287USprimary

affected products (25)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
redhat dogtag certificate system= 1.0nvdUScpe:2.3:a:redhat:_dogtag_certificate_system:*:*:*:*:*:*:*:*
redhat certificate system= 7.1nvdUScpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*
redhat certificate system= 7.2nvdUScpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*
redhat certificate system= 7.3nvdUScpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*
pkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
pkisetup-0:7.3.0-14.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-ca-0:7.3.0-17.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-common-0:7.3.0-40.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-kra-0:7.3.0-13.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-ocsp-0:7.3.0-11.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-ra-0:7.3.0-67.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS
rhpki-tks-0:7.3.0-12.el4.noarch as a component of Red Hat Certificate System 7.3 for 4ESall versionsfixedredhat_csafUS
rhpki-tps-0:7.3.0-23.el4.i386 as a component of Red Hat Certificate System 7.3 for 4ASall versionsfixedredhat_csafUS

showing 20 of 25

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2009:0007Red Hat Security Advisory: rhpki security and bug fix update2009-01-29csaf · redhat_csafUS
Updated rhpki-common packages that fix security issues are now available for Red Hat Certificate System 7.3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

published 2009-01-30modified 2026-06-16

related (7,727)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-105133US	high7.3OT critical	79.5% (100th)	KEV	2026-10-04
A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component…
CVE-2026-82329US	—OT critical	14.4% (97th)	KEV	2026-08-28
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileg…
CVE-2026-42018US	—OT critical	9.80% (96th)	KEV	2026-08-12
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-65400US	—OT critical	1.72% (77th)	KEV	2026-08-06
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, ma…
CVE-2026-16232US	critical9.8OT critical	3.52% (89th)	KEV	2026-07-22
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to au…

+7722 more

references (12)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan