Oracle Linux 10 : mod_md (ELSA-2026-30845)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30845 advisory. - Resolves: RHEL-175647 - modmd: OCSP response limits CVE-2026-29168 - Resolves: RHEL-134484 - httpd: Apache HTTP Server: modmd ACME, unintended retry interva...

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

K000162300: Apache HTTP Server: mod_proxy_html vulnerability CVE-2026-34355

Security Advisory Description A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue. CVE-2026-34355 Impact There is no impact; F5 products are not affected by...

Exploit for OS Command Injection in Apache Activemq

CVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution...

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework allows a attacker to gain access to read, modify, or delete data.

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

Linux Distros Unpatched Vulnerability : CVE-2026-59083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This...

Linux Distros Unpatched Vulnerability : CVE-2026-59084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly...

mod_md security update

1:2.4.26-5.1 - Resolves: RHEL-175647 - modmd: OCSP response limits CVE-2026-29168 1:2.4.26-5 - Resolves: RHEL-134484 - httpd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-55753 1:2.4.26-3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 1:2.4.26-2 - Bump...

MiracleLinux 9 : httpd-2.4.62-13.el9_8.1 (AXSA:2026-1272:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1272:07 advisory. httpd: modproxyajp: heap-based buffer over-read and memory disclosure in ajpparsedata CVE-2026-34059 httpd: modproxyajp: heap-based buffer over-read...

Linux Distros Unpatched Vulnerability : CVE-2026-26032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is do...

GHSA-VHCH-2WF3-M8RP vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, management-api-for-apache-cassandra-4.0, pinot-fips, thingsboard, hadoop-fips, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips, pinot, trino, seata, tinkerpop, apache-hop...

CVE-2026-44891 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, management-api-for-apache-cassandra-4.0, pinot-fips, thingsboard, hadoop-fips, tez, management-api-for-apache-cassandra-4.1, apache-hop-fips, pinot, trino, seata, tinkerpop, apache-hop...

CVE-2026-26032

The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...

CVE-2026-26032

The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...

UBUNTU-CVE-2026-26032

The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...

CVE-2026-26032 Apache Ivy: PackagerResolver path traversal vulnerability

The PackagerResolver of Apache Ivy is able to download online artifacts and to repackage them in a format defined by a packager.xml file. This repackaging is done by an Ant script, which is stored in a subdirectory of the configured "buildRoot" directory. This subdirectory is calculated based on...

CVE-2026-26032

Summary of CVE-2026-26032 (Apache Ivy): The PackagerResolver can repack downloaded artifacts via an Ant script in a subdirectory of buildRoot. If any Ivy coordinates contain "../" sequences, an attacker who can access a packager repository can escape the buildRoot and overwrite other files. The i...

BIT-TOMCAT-2026-59084 Apache Tomcat: EncryptInterceptor requirements not clearly documented

Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0 through 11.0.23, from 10.1.0 through 10.1.56, from 9.0.13 through 9.0.119, from 8.5.38...

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 The GREENDARK hospi...

CVE-2026-56287

A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API GET /api/v1/clients in versions up to and including 1.14.0. The orderBy and sortOrder request parameters are concatenated into a SQL query without sufficient validation, allowing an authenticated user with...