Important: rust-cargo-c

Issue Overview: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell...

CVE-2026-53553: Improper Limitation of a Pathname to a Restricted Directory

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff File Compare, when handling file paths provided by the client. This issue has been patched in version 1.18.0...

CVE-2026-82623: Use After Free

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

PT-2026-83710

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA DataValue backend copyRange of the file plugins/historydata/ua history data backend memory.c of the component History Backend. The manipulation results in use after free. The attack can be...

RHEL 9 : NetworkManager (RHSA-2026:61244)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61244 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

RHEL 9 : NetworkManager (RHSA-2026:61243)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61243 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

MiracleLinux 9 : NetworkManager-1.54.3-5.el9_8.ML.1 (AXSA:2026-1704:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1704:07 advisory. NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backend CVE-2026-10805 Tenable has extracted the preceding...

CVE-2026-82623

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...

RHEL 8 : NetworkManager (RHSA-2026:61580)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61580 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

RHEL 8 : NetworkManager (RHSA-2026:61239)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61239 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

Linux Distros Unpatched Vulnerability : CVE-2026-82623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file...

RHEL 8 : NetworkManager (RHSA-2026:61572)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61572 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

RHEL 9 : NetworkManager (RHSA-2026:61341)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61341 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...

Amazon Linux 2023 : cargo-c (ALAS2023-2026-2113)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2113 advisory. libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USESSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on a...

CVE-2026-82477: Server-Side Request Forgery (SSRF)

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts...

EUVD-2026-67940

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...

Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

Summary The Studio API class definition creation endpoint in pimcore/studio-backend-bundle is guarded by the objects permission instead of the classes permission, allowing any standard editor-level user to create class definitions without admin privileges. Class definition creation is a structura...

GHSA-F97C-PH8J-8VFF Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

Summary The Studio API class definition creation endpoint in pimcore/studio-backend-bundle is guarded by the objects permission instead of the classes permission, allowing any standard editor-level user to create class definitions without admin privileges. Class definition creation is a structura...

CVE-2026-82255

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential validation checks the original URL instead of the effective U...

CVE-2026-82241

Budibase backend-core @budibase/backend-core, as used by @budibase/server omits the shared address space range 100.64.0.0/10 from its default SSRF blacklist DEFAULTBLACKLIST used by REST datasource query previews. When the default blacklist is active i.e., a self-hosted deployment has not defined...