{"ok":true,"trend":{"id":377994,"platform":"mastodon","region":"global","key":"cve-2026-15890 zephyr: unsynchronized static nonce counter in the its aead transform. concurrent writes can reuse an aes","title":"CVE-2026-15890 Zephyr: unsynchronized static nonce counter in the ITS AEAD transform. Concurrent writes can reuse an AES","url":"https://mastodon.social/@hugovalters/117355197399260969","first_seen":"2026-09-29T16:21:49.144060Z","last_seen":"2026-09-29T16:21:49.144060Z","last_rank":12,"peak_rank":12,"last_volume":0,"peak_volume":0,"seen_count":1,"score":0.66078125,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"A new vulnerability, CVE-2026-15890, has been disclosed in the Zephyr operating system's ITS AEAD transform. The static nonce counter is not synchronized, so concurrent writes can reuse an AES-GCM or ChaCha20-Poly1305 nonce, potentially compromising data integrity. The flaw carries a CVSS score of 5.3, and a patch is reportedly under review.","why":"Security researchers are highlighting a freshly disclosed CVE in the widely used Zephyr RTOS while its fix is still pending.","tone":"neutral","entities":["Zephyr","CVE-2026-15890","AES-GCM","ChaCha20-Poly1305"],"summarized_at":"2026-09-29T16:22:55.978912Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1233},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Zephyr RTOS vulnerability risks nonce reuse in encrypted storage","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-09-29T16:21:49.144060Z","rank":12,"volume":0}],"posts":[{"platform":"mastodon","url":"https://mastodon.social/@hugovalters/117355197399260969","author":"hugovalters","title":null,"snippet":"CVE-2026-15890 Zephyr: unsynchronized static nonce counter in the ITS AEAD transform. Concurrent writes can reuse an AES-GCM or ChaCha20-Poly1305 nonce, risking data integrity. CVSS 5.3. Patch under review - watch for it and https://www. valtersit.com/cve/CVE-2026-158 90/ # CVE…","posted_at":"2026-09-29T16:10:02.506000Z","likes":0}],"elsewhere":[],"window":"7d"}}