Universal Hard-Coded Keys in SCADAPack x70 Secure Lock

Schneider Electric's SCADAPack x70 'Secure Lock' feature protects device lock, unlock and password-change messages with an AES-128 key-wrap KEK and an HMAC-SHA256 key derived from compiled-in constants, with no per-device or per-session input. I extracted both from the tested Windows DTM and the tested RTU firmware image, where they are byte-identical. CVE-2026-81861.

Sep 10, 2026 Security, Advisory

Exporting Mirth's Database and Reading Server Files: Three Flaws in NextGen Connect

Three network-reachable flaws in NextGen Mirth Connect: authenticated SQL injection that exports the configuration database and freezes bundled Derby until restart, plus two unauthenticated XXE paths. Tested on 4.5.2; CISA recommends 4.7.2 or later.

Sep 10, 2026 Security, Advisory

No Password, No Association, No Fix: Four Bugs in the Wi-Fi Daemon SteamOS Ships by Default

A nearby attacker can knock a Linux machine off Wi-Fi with one spoofed frame — no password, no association. iwd writes 31 bytes per visible access point into a 512-byte stack buffer and never checks; seventeen APs in range overflows it. SteamOS ships iwd as its default backend, where the impact is a crash rather than code execution. Reported in May, confirmed, patches sent. Still unfixed.

Aug 1, 2026 Security, Advisory

Security Flaws in a Major OPC UA Library Used in Critical Infrastructure

Two memory-safety bugs I reported in open62541: an integer underflow in PubSub signature verification and a use-after-free in TransferSubscriptions. Fixed in v1.3.19, v1.4.18 and v1.5.6.

Jul 30, 2026 Security, Advisory

A Captured Login and a Padding Oracle: Recovering OPC UA Passwords in Eclipse Milo, the Stack Behind Industrial IoT

A CVSS 4.0 9.1 padding oracle in Eclipse Milo — the open-source OPC UA stack embedded across industrial IoT — lets an on-path attacker recover a user's OPC UA password from a single captured token. It is the sharpest of six server-side flaws, alongside an unauthenticated remote crash and an RBAC bypass. Fixed in 1.1.5.

Jul 28, 2026 Security, Advisory

Patched in Public, Disclosed 76 Days Later: Four Unauthenticated Flaws in libIEC61850

Four unauthenticated flaws in libIEC61850, the IEC 61850 stack behind substation MMS and GOOSE — one chained to RCE in a lab, three reliable crashes. Their fixes remained on a public development branch for 76 days before the coordinated CISA advisory (ICSA-26-204-06). Fixed in v1.6.2.

Jul 23, 2026 Security, Advisory

OpenSSL's ARM64 SM2 Path Leaks a Private-Key Timing Fingerprint

OpenSSL's optimized SM2 scalar multiplication has data-dependent branches on the private key. Direct measurement of the EC_POINT_mul call used by SM2 decrypt shows r = -0.9828 between runtime and zero-nibble count, with a slope of -389 ns per zero nibble. This leaks a stable aggregate private-key fingerprint (~3 bits) and the same non-constant-time branch pattern may expose richer traces to cache-based attacks. ARM64 and RISC-V only. SM2 is required for systems subject to Chinese commercial cryptography regulations.

May 9, 2026 Security, Advisory

ML-DSA Forgery, Part 2: Off-Process Key Recovery in wolfSSL

The same wolfSSL ML-DSA heap-zeroization bug is exploitable from off-process: via crash-reporter core ingest, and via cross-process /proc/$pid/mem. Both verified end-to-end against installed libwolfssl.

Apr 17, 2026 Security, Advisory

A 992-Byte PDF That Crashes Poppler (and an lcms2 Bug That Also Hits OpenJDK and Friends)

lcms2's CubeSize() does a check-after-multiply on a uint32. A crafted ICC profile with ≥5 CLUT channels makes it return a wrapped value, the caller undersizes the CLUT buffer, and the interpolator reads past the end. A 992-byte PDF crashes Poppler; a one-line Java call crashes OpenJDK 21; lcms2's own transicc -l crashes. CVE-2026-41254 published at 7.5 High (NVD); fix landed in lcms2.19rc1 pre-release.