Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-06 | 1 | General1 |
| 2026-02-08 | 1 | General1 |
| 2026-02-09 | 1 | Disclosure1 |
| 2026-02-12 | 1 | General1 |
CVE-2026-25793 Certificate Fingerprint Bypass Vulnerability in NebUla Overlayays 1.7.0-10.2 Human Human title https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25793
Post summary
The text mentions CVE-2026-25793, a certificate fingerprint bypass vulnerability in NebUla Overlayays 1.7.0-10.2, but offers only minimal technical details without further context or actionable information.
🚨 New CVE Discovered! CVE-2026-25793 assigned for a Blocklist Bypass in @SlackHQ's Nebula overlay network. 🛡️ By exploiting ECDSA Signature Malleability, it was possible to evade security controls on affected versions. 📉 Severity: High (8.1) 🔴 Fixed in v1.10.3. Update now! 🔗 Advisory: https://github.com/slackhq/nebula/security/advisories/GHSA-69x3-g4r3-p962 #BugBounty #InfoSec #Cryptography #NetworkSecurity #Slack
Post summary
A newly discovered CVE (CVE‑2026‑25793) exposes a blocklist bypass in Slack’s Nebula through ECDSA malleability; it is rated high severity (8.1) and is fixed in version 1.10.3 with a public advisory available.
CVE-2026-25793: Doppelgänger Certificates: Bypassing Nebula Blocklists with ECDSA Magic In the world of cryptography, two things can be mathematically identical yet look completely different to a computer. CVE-2026-25793 is a fascinating logic flaw in... https://cvereports.com/reports/CVE-2026-25793
Post summary
The brief post mentions CVE-2026-25793 as a cryptographic logic flaw, but provides no specific exploit details, patches, or evidence of active exploitation.
CVE-2026-25793 Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible … https://www.cve.org/CVERecord?id=CVE-2026-25793
Post summary
The text briefly references CVE-2026-25793, noting a potential issue when using P256 certificates in certain Nebula versions, but offers no detailed technical or remedial information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | slack | nebula | - | - | - |