Skip to content
OpenAdvisories

Archive

2 August 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.4

    PSA key-slot leak in Bluetooth Mesh subnet deletion leading to resource-exhaustion DoS

    Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by def…

  • Low 2.7

    Simple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST API

    The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permission check on the REST API the way it does on the front end, relying there on a generic capability check instead of the Simple Restrict WordPress plugin before 1.…