Tag

Web-Application-Firewall

2 briefs RSS

CVE-2026-92749 - Insecure Session Signing Secret Generation in SafeLine

SafeLine versions up to 9.4.1 are vulnerable to unauthorized administrative access due to the derivation of session-signing secrets using a weak time-seeded PRNG.

SafeLine web-application-firewall cryptographic-vulnerability privilege-escalation

2t 1w ago

medium advisory

BIG-IP Advanced WAF/ASM Denial-of-Service Vulnerability (CVE-2026-40060)

2 rules 1 TTP 1 CVE

CVE-2026-40060 describes a vulnerability in F5 BIG-IP Advanced WAF and ASM security policies where undisclosed requests can cause the `bd` process to terminate, leading to a denial-of-service condition.

BIG-IP Advanced WAF +1 denial-of-service web application firewall F5 CVE-2026-40060

2r 1t 1c May 13, 2026