CLSA-2026-1785291685 TuxCare security update for axios (1 CVE)

TuxCare rebuilt axios to address 1 CVE. Fixed in 0.26.1-tuxcare.4...

CLSA-2026-1784943304 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.0-tuxcare.4...

CLSA-2026-1784769607 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.0.3-tuxcare.4...

CLSA-2026-1783991060 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.0.16-tuxcare.4...

CLSA-2026-1783645384 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.4...

CLSA-2026-1782781165 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.4...

CLSA-2026-1781657698 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.31-tuxcare.4...

CLSA-2026-1781052750 TuxCare security update for org.bouncycastle (1 CVE)

TuxCare rebuilt 12 org.bouncycastle packages to address 1 CVE. Fixed in 1.64-tuxcare.4...

CLSA-2026-1780361386 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.112.Final-tuxcare.4...

CLSA-2026-1779410887 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)

TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.4...

CLSA-2026-1778719545 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.4...

CLSA-2026-1776213256 TuxCare security update for 39 packages (3 CVEs)

TuxCare rebuilt 39 packages to address 3 CVEs. Fixed in 9.0.100-tuxcare.4...

CLSA-2026-1774916733 TuxCare security update for node-forge (6 CVEs)

TuxCare rebuilt node-forge to address 6 CVEs. Fixed in 0.10.0-tuxcare.4...

CLSA-2026-1775003157 TuxCare security update for 38 packages (2 CVEs)

TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.90-tuxcare.4...

CLSA-2026-1774052360 TuxCare security update for angular (2 CVEs)

TuxCare rebuilt angular to address 2 CVEs. Fixed in 1.5.11-tuxcare.4...

CLSA-2026-1774052351 TuxCare security update for angular (1 CVE)

TuxCare rebuilt angular to address 1 CVE. Fixed in 1.6.10-tuxcare.4...

CLSA-2025-1743120048 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39.tuxcare.4...

CVE-2026-61514 Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

CVE-2026-8508

The CVE applies to Zyxel WAX650S devices with firmware up to 7.10(ABRM.4)C0, where the social_login.cgi CGI component performs improper authentication. This could allow a WLAN attacker to bypass captive portal authentication, implying an authentication bypass vulnerability in the device’s login f...

CVE-2026-68583

luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML. When an administrator views the AdBlock Fast status page, the injected payload executes in the administrator's browser...