https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T21:46:40.635992+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109140 CVE-2026-109140 — Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin… 2026-11-05T21:46:40.637005+00:00

Affected: NLnet Labs Krill

The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key, nonce) pair is used again after each restart.