THREAT OPS › Threat News › [NVD] CVE-2026-92792 (HIGH 7.5) — OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the test_purpose key in
[NVD] CVE-2026-92792 (HIGH 7.5) — OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the test_purpose key in
CVE-2026-92792 CVSS: 7.5 HIGH Published: 2026-09-16T21:17:28.780
OpenNHP through 1.0.2 selects its trusted-execution attestation verifier based on attacker-supplied evidence containing a test_purpose key, causing the FallbackVerifier to execute unconditionally. Attackers can bypass attestation verification by including the test_purpose key in evidence and providing enrolled measure and serial num
Indicators of compromise
- CVE-2026-92792cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-92792