HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-24084 — Weak configuration when UE does not verify the consistency of its additional sec...

·Source: NIST NVD

Updated:

Executive Summary

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

Analysis

Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities. CVSS Score: 7.5. Published: 2026-08-04T16:16:24.370.

Indicators of Compromise (1)

CVE (1)
CVE-2026-24084
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 4, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

The Record
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-69110 — OpenCode Studio before 2.4.4 contains a missing authentication vulnerability tha...

OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthenticated remote attackers to read arbitrary files within the temp and static/music directories by directly accessing the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can retrieve intermediate audio, video artifacts, and subtitles belonging to other users' jobs, and additionall

CVE-2026-69110
NIST NVD
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-69100 — LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains...

LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27, contains a remote code execution vulnerability in GlueFactory that executes unsandboxed Groovy scripts from database template fields without compilation restrictions or whitelisting. Attackers can write or influence the script field via message template endpoints to execute arbitrary Groovy code and OS commands on the backend

CVE-2026-69100
NIST NVD