PT-2026-71815

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

PT-2026-71405

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS1 v1.5 decrypt operations...

PT-2026-71773

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An internal data retrieval capability used by Elastic Defend endpoint response actions fails to enforce required Security Solution and endpoint privileges. This occurs because the system...

PT-2026-71751

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass occurs due to a user-controlled key, allowing unauthorized cross-space access because functionality is not properly constrained by Access Control Lists ACLs. This issue...

PT-2026-71776

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization allows a user capable of authoring and evaluating Elastic Security detection rules to execute Osquery and Elastic Defend response actions on managed hosts. This occurs...

CVE-2026-63803 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-63803 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68397 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68397 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64323 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64323 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64275 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64275 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68315 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68333 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68333 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68277 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68277 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64580 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64548 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64548 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64444 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64298 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-65370

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65...

CVE-2026-65370

The CVE-2026-65370 issue affects ServiceTalk HTTP/1.x where malformed Transfer-Encoding is not handled correctly, enabling request smuggling as described across multiple sources. The vulnerability is addressed in ServiceTalk release 0.42.65. Affected component: ServiceTalk HTTP/1.x parsing of Tra...

CVE-2026-65370

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65...

EUVD-2026-57604

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65...