VYPR

CVE-2026-107692

by Thewhatdohe

CVEs (1)

  • CVE-2026-107692MedOct 20, 2026
    risk 0.31cvss 4.8epss —

    The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encryption. An attacker positioned on the network path can passively intercept and decompress this…