CVE detail
CVE-2026-1709
A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security (TLS) authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing agents, retrieving public Trusted Platform Module (TPM) data, and deleting agents, by connecting without presenting a client certificate.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1709.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comFeb 6, 2026, 8:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2435514bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 6, 2026, 8:16 PM - https://access.redhat.com/security/cve/CVE-2026-1709access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 6, 2026, 8:16 PM - https://access.redhat.com/errata/RHSA-2026:2298access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 6, 2026, 8:16 PM - https://access.redhat.com/errata/RHSA-2026:2225access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 6, 2026, 8:16 PM - https://access.redhat.com/errata/RHSA-2026:2224access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 6, 2026, 8:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-6021CVSS 7.5 · High
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memor…
- CVE-2025-3155CVSS 7.4 · High
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents,…
- CVE-2025-2784CVSS 7.0 · High
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one by…
- CVE-2024-12088CVSS 6.5 · Medium
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another sym…
- CVE-2024-12087CVSS 6.5 · Medium
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled…
- CVE-2024-12085CVSS 7.5 · High
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a compari…