CVE-2026-104201
No scoreFix available
[GHSA-wj29-mxmc-q98c: Heap OOB read/write in MS-MPPE key re-encryption]
What each source reports
OSVUBUNTU-CVE-2026-104201 No score
[GHSA-wj29-mxmc-q98c: Heap OOB read/write in MS-MPPE key re-encryption]
- Record
UBUNTU-CVE-2026-104201- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
radsecproxyDebian:12 |
All versions, plus listed versions 1.10.0-11.10.0-21.10.0-2~bpo12+11.10.1-11.11.0-1 Show 8 moreShow less1.11.0-1~bpo12+11.11.1-11.11.1-1~bpo12+11.11.2-11.11.2-1~bpo12+11.11.3-11.11.4-11.9.2-2 |
None known |
radsecproxyDebian:13 |
before 1.11.2-1+deb13u1, plus listed versions 1.11.2-1 |
1.11.2-1+deb13u1 |
radsecproxyDebian:14 |
before 1.11.4-1, plus listed versions 1.11.2-11.11.3-1 |
1.11.4-1 |
radsecproxyUbuntu:16.04:LTS |
All versions, plus listed versions 1.6.5-1build1 |
None known |
radsecproxyUbuntu:18.04:LTS |
All versions, plus listed versions 1.6.9-1 |
None known |
radsecproxyUbuntu:20.04:LTS |
All versions, plus listed versions 1.7.2-11.8.1-1 |
None known |
radsecproxyUbuntu:22.04:LTS |
All versions, plus listed versions 1.8.2-41.9.1-11.9.1-1build1 |
None known |
radsecproxyUbuntu:24.04:LTS |
All versions, plus listed versions 1.9.2-21.10.0-11.10.0-21.10.0-2build11.10.0-2build2 |
None known |
radsecproxyUbuntu:26.10 |
All versions, plus listed versions 1.11.2-1build11.11.3-11.11.3-1build1 |
None known |
radsecproxyUbuntu:26.04:LTS |
All versions, plus listed versions 1.11.2-11.11.2-1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-104201 is a vulnerability with no CVSS score yet in radsecproxy, published October 2, 2026. No source lists public exploit code. Fixed in radsecproxy 1.11.2-1+deb13u1.