HIGH 8.4 NVD

CVE-2026-109140

The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key

The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key, nonce) pair is used again after each restart.

References

https://www.nlnetlabs.nl/downloads/krill/CVE-2026-109140.txt

Published: 2026-11-02 · Source: NVD · Feed updated: 2026-11-02

This high severity vulnerability with a CVSS score of 8.4 was published on 2026-11-02 via NVD.

vulnfeed aggregates 17991 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.