CVE-2026-109140highCWE-323

CVE-2026-109140: fallo de gravedad alta en NLnet Labs Krill

Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

Publicada el

Seguir esta CVE+ Monitorear Krill

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

18Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.4
The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0 on every Krill restart, so the same (key, nonce) pair is used again after each restart.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Productos afectados
NLnet Labs · Krill
CVEs relacionadas — NLnet Labs Krill

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-0158HIGHTriggered crash on direct RRDP accessEPSS 0.7%CVE-2026-109142HIGHKrill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same serverEPSS —CVE-2026-109141HIGHKrill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk importEPSS —