CVE-2026-39909

creationtimestamp| type| source ---|---|--- 2026-08-21 17:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmdnsier222 2026-08-21 18:08:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtme52infc2p 2026-08-21 23:00:05+00:00| seen|...

ROOT-APP-NPM-CVE-2026-33750 CVE-2026-33750 in brace-expansion - Patched by Root

Root has patched CVE-2026-33750 in the brace-expansion package for Root:npm. Multiple fixed versions available...

Exploit for Improper Access Control in Widgetfactorylimited Jce

JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...

DEBIAN-CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

DEBIAN-CVE-2026-74582

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hardheaderlen in non-ring send paths packetsnd reads dev-hardheaderlen multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through...

DEBIAN-CVE-2026-74580

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

DEBIAN-CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

ROOT-APP-PYPI-CVE-2026-0994 CVE-2026-0994 in protobuf - Patched by Root

Root has patched CVE-2026-0994 in the protobuf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-54789

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmafa7lrx22...

CVE-2026-69502

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmaezbxzk2z 2026-08-21 18:07:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3yxdp7a66pfo7 2026-08-21 18:08:12+00:00| seen|...

CVE-2026-75932

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmaesgokc27 2026-08-21 18:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtme4rxn3l24 2026-08-21 18:14:38+00:00| seen|...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.14-1.hum1 aarch64, x8664 python3.12-debug-3.12.14-1.hum1 aarch64, x8664 python3.12-devel-3.12.14-1.hum1 aarch64, x8664 python3.12-idle-3.12.14-1.hum1 aarch64, x8664...

DEBIAN-CVE-2026-19685

Bulletin has no description...

CVE-2026-74583

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74580

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...

CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

CVE-2026-75501

creationtimestamp| type| source ---|---|--- 2026-08-21 16:25:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/37szlfohrdkph 2026-08-21 16:31:56+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtm6qflhxz26...

DEBIAN-CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

DEBIAN-CVE-2026-49114

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

CVE-2026-77812

creationtimestamp| type| source ---|---|--- 2026-08-21 16:09:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5iryhm525 2026-08-21 16:17:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7fqla4tukg6mz 2026-08-21 18:55:27+00:00| seen|...