Four Security Findings in dcm4che and the dcm4chee Imaging Archive
A storage-status operation that purged a synthetic image, two infinite-loop parser inputs, and costly multipart boundary scanning in dcm4che 5.34.3.
Abhinav Agarwal
An Inverted If and a Stale Length: Apache PLC4X's OPC UA Client Accepted Forged Secure-Channel Signatures
Apache PLC4X's OPC UA client checked OPN signatures with an inverted branch over a misaligned byte range, and by default trusted whatever certificate discovery returned. An impersonating server could capture credentials and rewrite writes. Plus three pre-authentication allocation bugs. CVE-2026-102508 (9.2) and CVE-2026-102509 (8.7), fixed in 1.0.0.
Four Authorization and Availability Findings in HAPI FHIR
A transaction-bundle extension that overrides a trusted tenant partition, a conditional create that returns a resource the caller cannot read, subscription delivery detached from the creator's read scope, and unbounded inbound gzip decompression before authorization. Tested on HAPI FHIR 8.10.0.
Universal Hard-Coded Keys in SCADAPack x70 Secure Lock
Schneider Electric's SCADAPack x70 'Secure Lock' feature protects device lock, unlock and password-change messages with an AES-128 key-wrap KEK and an HMAC-SHA256 key derived from compiled-in constants, with no per-device or per-session input. I extracted both from the tested Windows DTM and the tested RTU firmware image, where they are byte-identical. CVE-2026-81861.
Exporting Mirth's Database and Reading Server Files: Three Flaws in NextGen Connect
Three network-reachable flaws in NextGen Mirth Connect: authenticated SQL injection that exports the configuration database and freezes bundled Derby until restart, plus two unauthenticated XXE paths. Tested on 4.5.2; CISA recommends 4.7.2 or later.
No Password, No Association, No Fix: Four Bugs in the Wi-Fi Daemon SteamOS Ships by Default
A nearby attacker can knock a Linux machine off Wi-Fi with one spoofed frame — no password, no association. iwd writes 31 bytes per visible access point into a 512-byte stack buffer and never checks; seventeen APs in range overflows it. SteamOS ships iwd as its default backend, where the impact is a crash rather than code execution. Reported in May, confirmed, patches sent. Still unfixed.
Security Flaws in a Major OPC UA Library Used in Critical Infrastructure
Two memory-safety bugs I reported in open62541: an integer underflow in PubSub signature verification and a use-after-free in TransferSubscriptions. Fixed in v1.3.19, v1.4.18 and v1.5.6.
A Captured Login and a Padding Oracle: Recovering OPC UA Passwords in Eclipse Milo, the Stack Behind Industrial IoT
A CVSS 4.0 9.1 padding oracle in Eclipse Milo — the open-source OPC UA stack embedded across industrial IoT — lets an on-path attacker recover a user's OPC UA password from a single captured token. It is the sharpest of six server-side flaws, alongside an unauthenticated remote crash and an RBAC bypass. Fixed in 1.1.5.
Patched in Public, Disclosed 76 Days Later: Four Unauthenticated Flaws in libIEC61850
Four unauthenticated flaws in libIEC61850, the IEC 61850 stack behind substation MMS and GOOSE — one chained to RCE in a lab, three reliable crashes. Their fixes remained on a public development branch for 76 days before the coordinated CISA advisory (ICSA-26-204-06). Fixed in v1.6.2.
OpenSSL's ARM64 SM2 Path Leaks a Private-Key Timing Fingerprint
OpenSSL's optimized SM2 scalar multiplication has data-dependent branches on the private key. Direct measurement of the EC_POINT_mul call used by SM2 decrypt shows r = -0.9828 between runtime and zero-nibble count, with a slope of -389 ns per zero nibble. This leaks a stable aggregate private-key fingerprint (~3 bits) and the same non-constant-time branch pattern may expose richer traces to cache-based attacks. ARM64 and RISC-V only. SM2 is required for systems subject to Chinese commercial cryptography regulations.