CLSA-2026-1778745959 libssh2: Fix of CVE-2026-7598

CVE-2026-7598: add usernamelen/passwordlen bounds checks in userauthlist and userauthpassword to prevent integer overflow when allocating the SSH USERAUTHREQUEST packet buffer...

CLSA-2026-1778247114 libssh2: Fix of CVE-2026-7598

CVE-2026-7598: fix integer overflow in userauthpassword CVE-2026-7598...

CVE-2026-7598

creationtimestamp| type| source ---|---|--- 2026-05-06 17:01:17+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3ml76ieixcb2n 2026-05-28 19:39:05+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmwrkm742c2b 2026-05-28 19:39:06+00:00| seen|...

UBUNTU-CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

CVE-2026-7598 libssh2 userauth.c userauth_password integer overflow

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

CVE-2026-7598

A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such manipulation of the argument usernamelen/passwordlen leads to integer overflow. The attack may be launched remotely. The name of the patch is...

CLEANSTART-2026-TO88856 Security fixes for CVE-2023-7256, CVE-2024-7598, CVE-2024-8006, CVE-2025-1767, CVE-2025-47914, CVE-2025-58181, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-67499, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.31.2-r0, 3.31.2-r1, 3.31.2-r2

Multiple security vulnerabilities affect the calico-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

MiracleLinux 7 : rh-nodejs12-nodejs-12.18.2-1.el7 (AXSA:2020-219:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-219:03 advisory. ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 nodejs-minimist:...

RockyLinux 9 : .NET 8.0 (RLSA-2025:7598)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7598 advisory. dotnet: .NET and Visual Studio Spoofing Vulnerability CVE-2025-26646 Tenable has extracted the preceding description block directly from the RockyLinux security...

CVE-2025-7598

creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:37+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

Linux Distros Unpatched Vulnerability : CVE-2024-7598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespa...

Linux Distros Unpatched Vulnerability : CVE-2020-7598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a constructor or proto payload. CVE-2020-7598 Note that...

MAL-2025-7598 Malicious code in @crabas0npm/velit-eveniet-reprehenderit (npm)

The package @crabas0npm/velit-eveniet-reprehenderit was found to contain malicious code...

CVE-2025-7598 Tenda AX1803 setWifiFilterCfg formSetWifiMacFilterCfg stack-based overflow

A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched...

CVE-2025-7598

The CVE-2025-7598 entry concerns Tenda AX1803 1.0.0.1. The vulnerable component is the function formSetWifiMacFilterCfg in the file /goform/setWifiFilterCfg, where manipulation of the deviceList argument leads to a stack-based buffer overflow. This vulnerability can be exploited remotely, and mul...

Oracle Linux 9 : .NET / 8.0 (ELSA-2025-7598)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7598 advisory. 8.0.116-1.0.1 - Add support for Oracle Linux 8.0.116-1 - Update to .NET SDK 8.0.116 and Runtime 8.0.16 - Resolves: RHEL-89448 Tenable has extracted the precedin...

CVE-2017-7598

creationtimestamp| type| source ---|---|--- 2025-04-15 15:50:46+00:00| seen| https://gist.github.com/MANA-Y/0152a79b9c2c6bf11db57c32b2676b0a...

CVE-2024-7598

A flaw was found in Kubernetes. This vulnerability can allow a malicious or compromised pod to bypass network restrictions via the deletion of network policies before pod termination during namespace deletion. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2024-7598

creationtimestamp| type| source ---|---|--- 2025-03-20 17:18:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8238 2025-03-20 19:09:33+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lktfkgalqy2j 2025-03-20 19:54:37+00:00| seen|...