Vulnerabilities

TI-2026-78155 CVE-2026-107692 · GHSA-88gv-c4c4-mc5g

Cleartext authentication token in War Thunder game client exposes accounts

LOW 21

The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00135 Published 2026-10-20 Fixed in 2.59.0.9 CWE-319

TI-2026-19997 CVE-2026-24798 · GHSA-23fx-gfqr-cvpx

An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine

MEDIUM 46

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.003 Published 2026-01-27 No fix listed CWE-119

Vulnerabilities

Filters

Cleartext authentication token in War Thunder game client exposes accounts

An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine