CVE-2024-7383High· 7.4▾ TwilightA flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A flaw was found in libnbd. The client did not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This issue allows a man-in-the-middle attack on NBD traffic.
libnbd >= 1.18.0 < 1.18.5libnbd >= 1.20.0 < 1.20.2virt-devel:rhel (all versions)virt:rhel (all versions)libnbd (all versions)libnbd (all versions)virt:av/libnbd (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96453High· 8.0Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
CVE-2023-5871Medium· 5.3Libnbd: malicious nbd server may crash libnbd
CVE-2025-14946Medium· 4.8A flaw was found in libnbd
CVE-2025-22874High· 7.5crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (CVE-2025-22874)
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
CVE-2026-97174Medium· 6.8Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens