EUVD-2026-68923

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

CVE-2026-48932

A flaw in the Node.js HTTP client can cause request desynchronization in Node.js-based forwarding proxies that rebuild outbound headers from visible IncomingMessage headers while piping the original body to a reused backend connection. The root cause is that Node.js may omit headers beyond maxHea...

CVE-2026-19820

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

SUSE CVE-2026-25706

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

EUVD-2026-68916

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820

CVE-2026-19820 affects the Backblaze Client for Windows . The root cause is improper link resolution : a local user can create a link from Backblaze's folder to Windows OS system files during a backup, potentially rendering the system not bootable . Successful exploitation requires an administrat...

CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

PT-2026-84243

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a crafted MQTT message to the cs broker component...

CVE-2026-51763

The TOTOLINK T6 wireless dual-band Mesh router is vulnerable to an incorrect access control flaw in the freeStaClient function (version 4.1.5cu.748_B20211015 ). An unauthenticated attacker can exploit this by sending a specially crafted MQTT message to the cs_broker component, which allows them t...

PT-2026-84253

Name of the Vulnerable Software and Affected Versions Releasit Releasit COD Form & Upsells version 1 Description An issue exists in the OTP Validation component where server-side security is enforced on the client-side. This allows a remote attacker to manipulate the validation process...

CVE-2026-25706: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

PT-2026-84060

Name of the Vulnerable Software and Affected Versions Backblaze Client affected versions not specified Description An issue exists where a local user can render a system unbootable by creating a link from the Backblaze folder to Windows OS system files during a backup process. This occurs due to...

EUVD-2026-69196

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a crafted MQTT message to the csbroker component...

pipewire security update

1.4.11-1.2 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 1.4.11-1.1 - Fix stack exhaustion via unbounded alloca in pulse-server CVE-2026-14330 Resolves: RHEL-249317...

CVE-2026-51763

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to forcibly disconnect wireless clients via sending a crafted MQTT message to the csbroker component...

PT-2026-89981

TuxCare rebuilt league/oauth2-client to address 3 CVEs. Fixed in 1.4.2-p1+tuxcare...

CVE-2026-84361: Improper Neutralization of Special Elements used in an OS Command

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

CVE-2026-48932: Inconsistent Interpretation of HTTP Requests

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

CVE-2026-19820: Improper Link Resolution Before File Access

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...