UBUNTU-CVE-2026-57825

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...

CVE-2026-81644

CVE-2026-81644 is a Denial of Service vulnerability in the preview service module , with impact limited to availability . The CVSS 3.1 score is 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, indicating a network-reachable, low-complexity attack that requires user interaction and no...

CVE-2026-87073

Tanium Comply is affected by an improper access controls vulnerability, as addressed by Tanium and referenced in advisory TAN-2026-029 . The CVSS 3.1 score is 6.5 (MEDIUM) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a network-based attack with low complexity and low privilege...

CVE-2026-87030 Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply...

CVE-2026-83613

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:28+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6...

GHSA-P66X-2CV9-QQ3V vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Astro - Reflected XSS via server islands feature

Astro 5.15.8 contains a reflected XSS caused by improper handling of server islands feature, letting remote attackers execute scripts, exploit requires use of server islands in the application. id: CVE-2025-64764 info: name: Astro - Reflected XSS via server islands feature author: DhiyaneshDk,zhe...

N-central - Authentication Bypass

N-central 3 matchers-condition: and matchers: - type: word words: - "SessionID" - "sessionHelloResponse" condition: and - type: status...

CVE-2026-71374

CVE-2026-71374 is a deserialization of untrusted data vulnerability in Hitachi Cosminexus Component Container , rated CVSS 9.8 (CRITICAL) with a network attack vector requiring no privileges and causing high impact to confidentiality, integrity, and availability. The vulnerable versions span from...

ROOT-OS-DEBIAN-12-CVE-2026-13757 CVE-2026-13757 in p11-kit - Patched by Root

Root has patched CVE-2026-13757 in the p11-kit package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-54121 CVE-2025-54121 in starlette - Patched by Root

Root has patched CVE-2025-54121 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-58014 CVE-2026-58014 in glib2.0 - Patched by Root

Root has patched CVE-2026-58014 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-58012 CVE-2026-58012 in glib2.0 - Patched by Root

Root has patched CVE-2026-58012 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-58013 CVE-2026-58013 in glib2.0 - Patched by Root

Root has patched CVE-2026-58013 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...

BIT-ELASTICSEARCH-2024-23444 Elasticsearch elasticsearch-certutil csr fails to encrypt private key

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command...

CVE-2026-82312

OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

CVE-2026-86268

creationtimestamp| type| source ---|---|--- 2026-09-07 05:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2zui7f45fntkc 2026-09-07 08:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86268...

Slackware Linux 15.0 libxml2 Vulnerability (SSA:2026-249-02)

The version of libxml2 installed on the remote host is prior to 2.11.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-249-02 advisory. New libxml2 packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the preceding description block...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

UBUNTU-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...