Photon OS 5.0: Curl PHSA-2026-5.0-91-0838

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0838. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROOT-OS-DEBIAN-13-CVE-2026-6429 CVE-2026-6429 in rootio-curl - Patched by Root

Root has patched CVE-2026-6429 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-6429 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

TencentOS Server 4: curl (TSSA-2026:0345)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0345 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

MINI-6429-9HCQ-W95V

Bulletin has no description...

CVE-2026-6429 netrc credential leak with reused proxy connection

When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances...

CVE-2026-6429

When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances...

SUSE CVE-2026-6429

When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances...

CVE-2026-6429

creationtimestamp| type| source ---|---|--- 2026-04-29 07:10:54+00:00| seen| https://mastodon.social/users/bagder/statuses/116486743707813679 2026-04-29 07:11:04+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mkmkagqvtir2 2026-04-29 07:16:06+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-6429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When asked to both use a .netrc file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to ho...

MiracleLinux 8 : firefox-128.12.0-1.el8_10.ML.1 (AXSA:2025-10425:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10425:20 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

TencentOS Server 4: firefox (TSSA-2025:0510)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0510 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

RockyLinux 10 : firefox (RLSA-2025:10073)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10073 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.42) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.42)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.50) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.50)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.55) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.55)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.55 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.56) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.56)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.56 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.66) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.66)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.66 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.75) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.75)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...

org.wso2.identity.apps:org.wso2.identity.apps.authentication.portal.server.feature (1.1.83) potentially affected by CVE-2024-6429 via org.wso2.identity.apps:authentication-portal (1.1.83)

org.wso2.identity.apps:authentication-portal MAVEN version 1.1.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.wso2.identity.apps:authentication-portal and may be impacted: -...