https://vulnogram.org/ Most recent CVEs assigned by WIBU-SYSTEMS AG (wibu). https://vulnogram.org/seaview/icons/wibu.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-84854 https://vulnogram.org/CVE-2026-84854 In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system cra… High Tue, 06 Oct 2026 09:59:33 GMT https://vulnogram.org/CVE-2026-81581 https://vulnogram.org/CVE-2026-81581 Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out… High Thu, 27 Aug 2026 07:46:30 GMT https://vulnogram.org/CVE-2026-81579 https://vulnogram.org/CVE-2026-81579 In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leverage… High Thu, 27 Aug 2026 07:42:28 GMT https://vulnogram.org/CVE-2026-81576 https://vulnogram.org/CVE-2026-81576 If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number,… High Thu, 27 Aug 2026 07:14:11 GMT https://vulnogram.org/CVE-2026-81575 https://vulnogram.org/CVE-2026-81575 If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causin… High Network Exploitable Thu, 27 Aug 2026 07:13:19 GMT https://vulnogram.org/CVE-2026-81574 https://vulnogram.org/CVE-2026-81574 In CodeMeter Runtime before versions 8.41a and 9.10, the logger does not sanitize input strings in certain cases, allowing an attacker to inject printf-style format specifiers. This can be used to reliably crash CodeMeter and disclose sensitive infor… High Network Exploitable Thu, 27 Aug 2026 07:11:56 GMT https://vulnogram.org/CVE-2026-81573 https://vulnogram.org/CVE-2026-81573 If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remo… High Network Exploitable Thu, 27 Aug 2026 07:09:09 GMT https://vulnogram.org/CVE-2026-81572 https://vulnogram.org/CVE-2026-81572 In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse poi… High Thu, 27 Aug 2026 07:06:17 GMT