| CVE-2026-109142 |
When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-109141 |
The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2026-109140 |
The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to…
|
8.4
High
|
Nov 2, 2026 |
| CVE-2023-0158 |
NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp"…
|
7.5
High
|
Jan 17, 2023 |