RADIUS networking protocol blasted into submission through MD5-based flaw

Blast RADIUS (CVE-2024-3596) is a protocol vulnerability in RADIUS (CVSS 7.5) that enables an attacker who can intercept RADIUS traffic to manipulate Access-Request/Response exchanges and, via MD5 chosen-prefix collision techniques, forge Access-Accept responses to authenticate without valid credentials; exploitation is non-trivial (requires MITM access and rapid cryptographic work), affects deployments using PAP/CHAP/MS-CHAPv2 and other non-EAP methods, and is mitigated by applying vendor patches and moving RADIUS to TLS (RadSec).