CVE-2026-102719

MediumCVSS 6.3/10Last modified Sep 29, 2026

Description

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure

Metrics

CVSS 4.0 6.3/10CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-330

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 29, 2026
Last modified
Sep 29, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-102726.5A vulnerability has been found in a4m4 Student-Management-System up to f0c5f6842c5e8c431ff02b5260a565ca844df3a0. The impacted element is an CVE-2026-1027205.3A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received CVE-2026-1027216.9A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive patCVE-2026-1027226.9In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and thCVE-2026-1027236.0NULL Pointer Dereference on MSRP Attribute Table ExhaustionCVE-2026-1027246.0NULL Pointer Dereference When Evicting the Sole MSRP AttributeCVE-2026-1027256.0Out-of-bounds Read from Unvalidated MSRP Attribute List LengthCVE-2026-1027266.0Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadCVE-2026-1027276.0FTP Passive Data Connection Not Bound to the Authenticated Control PeerCVE-2026-1027287.5Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is lCVE-2026-1027295.9`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with CVE-2026-102737.3A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the compon
CVE-2026-102719: Medium severity, CVSS 6.3 | Vulnix