CVE-2026-87499: Incorrect Authorization

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-87447: Incorrect Authorization

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: High...

Security Advisory 0150

Security Advisory 0150 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X...

Security Advisory 0174

Security Advisory 0174 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73453 CVSSv3.1 Base Score: 10.0...

Linux Distros Unpatched Vulnerability : CVE-2026-87613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the...

PT-2026-89193

Name of the Vulnerable Software and Affected Versions eKuiper versions prior to 2.4.0 Description A Server-side request forgery SSRF issue exists where the server does not validate destination IP addresses during external service registrations and HTTP invocations. An attacker with permissions to...

CVE-2026-46460: Incorrect Authorization

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized...

PT-2026-89252

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...

SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-106765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106765 advisory. An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attribut...

RockyLinux 10 : kernel (RLSA-2026:64775)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64775 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: ipv6: add NULL checks for idev in SRv6 paths CVE-2026-23442 kernel: udp:...

python313-idna-3.19-1.1 on GA media (moderate)

python313-idna-3.19-1.1 on GA media Announcement ID: openSUSE-SU-2026:11711-1 Rating: moderate Cross-References: CVE-2024-3651 CVSS scores: CVE-2024-3651 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

perl-Net-DNS-1.570.0-1.1 on GA media (moderate)

perl-Net-DNS-1.570.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11708-1 Rating: moderate Cross-References: CVE-2026-81928 CVSS scores: CVE-2026-81928 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

python313-dnspython-2.8.0-2.1 on GA media (moderate)

python313-dnspython-2.8.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11709-1 Rating: moderate Cross-References: CVE-2023-29483 CVSS scores: CVE-2023-29483 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...

CVE-2026-87058

A flaw was found in olm-operator-konflux-sample. The hermetic build mode is disabled by default, allowing bundle builds to perform live network fetches. This means that external, unverified resources can be pulled during the build process, potentially compromising the integrity and trustworthines...

Aegis aegis-v0.14.1-alpha

AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...

EUVD-2026-56392

Microsoft QUIC: Remote Code Execution Vulnerability...

EUVD-2026-56408

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...