Skip to content

Vendor

tillitis vulnerabilities

2 published CVES affecting tillitis, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0
Atom feed of tillitis alerts

Products

Latest tillitis CVEs

Newest publication first

  1. CVE-2026-32953 Tillitis: TKey Client has an Error in Protocol Implementation

    Published
    MediumCVSS 4.7 EPSS 0.26%

    Tillitis TKey Client package is a Go package for a TKey client. Versions 1.2.0 and below contain a critical bug in the tkeyclient Go module which causes 1 out of every 256 User Supplied Secrets (USS) to be silently ignored, producing the same Compound Device Identifier (CDI)—and...

  2. CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability

    Published
    LowCVSS 2.2 EPSS 0.11%

    The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.