CVE-2026-101771

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101770

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

CVE-2026-101679

A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact...

poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

CVE-2026-95712

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability o...

CVE-2026-79894

An unauthenticated Denial-of-Service DoS vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the availability of the affected interface...

CVE-2026-95712

Technical details for CVE-2026-95712 are not publicly available in the provided documents. Please monitor for further updates.

CVE-2026-79894

CVE-2026-79894 involves an unauthenticated Denial-of-Service (DoS) vulnerability within the PAPI Protocol of AOS-8 . While the provided documents do not specify the exact root cause or specific affected versions, the CVSS 3.1 metrics indicate a High severity (7.5) with a Network attack vector and...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

VulnCheck KEV: CVE-2026-114625

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-76291

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedulesearch capability could bypass the expected safeguards in the scheduled search workflow. The user could then run risky Search Processing Language SPL commands that disclose or alter...

CVE-2026-105945

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and...

CVE-2026-105945 Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and...

EUVD-2026-107480

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and...

CVE-2026-105945

The Apache Pulsar Packages Management Service is vulnerable to a path traversal issue when using the filesystem storage provider . The service fails to validate the version component of package names, allowing it to contain URL-encoded path separators and parent directory references. This enables...

OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs

Summary The OpenChoreo API server authorized PUT .../workflowruns/runName against ownership metadata taken from the request body, while the object it actually mutated was selected by the URL path. Nothing forced the two to agree. A WorkflowRun's membership in a project and component is carried...

GHSA-46R4-Q7WV-32FC OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs

Summary The OpenChoreo API server authorized PUT .../workflowruns/runName against ownership metadata taken from the request body, while the object it actually mutated was selected by the URL path. Nothing forced the two to agree. A WorkflowRun's membership in a project and component is carried...

Vulnerabilities found in Oracle Communications

Oracle has identified 110 vulnerabilities in various Oracle Communications products, including Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications Service Catalog and Design, and Oracle Communications Operations...

Linux Distros Unpatched Vulnerability : CVE-2026-109261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization...

bouncycastle-1.86-1.1 on GA media (moderate)

bouncycastle-1.86-1.1 on GA media Announcement ID: openSUSE-SU-2026:12090-1 Rating: moderate Cross-References: CVE-2026-17507 CVE-2026-17508 CVE-2026-18036 CVE-2026-18040 CVE-2026-71885 CVE-2026-71886 CVE-2026-71887 CVE-2026-71888 CVE-2026-71889 CVE-2026-71890 CVE-2026-71891 CVE-2026-71892...