Advisory ROSA-SA-2026-3282

software: libssh 0.9.8 OS: ROSA-CHROME unaffected versions = libssh-0.9.8-5 affected versions libssh-0.9.8-5 CVE-ID: CVE-2026-0965 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in libssh is related to the ability to open arbitrary files during configuration parsing. A local attacker could...

Advisory ROSA-SA-2026-3281

software: libde265 1.0.18 OS: ROSA-CHROME unaffected versions = libde265-1.0.18-1 affected versions libde265-1.0.18-1 CVE-ID: CVE-2025-61147 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in strukturag libde265 commit d9fea9d is related to a segmentation error in the...

CVE-2026-42098 Authorization Bypass in Sparx Enterprise Architect

Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior e.g. using a debugger and log in as any other user or administrator - then it is possible to do every...

EUVD-2026-30930

Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior e.g. using a debugger and log in as any other user or administrator - then it is possible to do every...

WordPress Games Catalog plugin <= 1.2.0 - Cross-Site Request Forgery to Arbitrary Game/Post Deletion vulnerability

Cross-Site Request Forgery to Arbitrary Game/Post Deletion vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Games Catalog versions = 1.2.0...

CVE-2026-44708 affecting package python-mistune for versions less than 3.2.1-1

CVE-2026-44708 affecting package python-mistune for versions less than 3.2.1-1. A patched version of the package is available...

CVE-2026-32936 affecting package coredns for versions less than 1.11.4-16

CVE-2026-32936 affecting package coredns for versions less than 1.11.4-16. A patched version of the package is available...

CVE-2026-35469 affecting package docker-buildx for versions less than 0.14.0-12

CVE-2026-35469 affecting package docker-buildx for versions less than 0.14.0-12. A patched version of the package is available...

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7

CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7. A patched version of the package is available...

CVE-2026-33006 affecting package httpd for versions less than 2.4.67-1

CVE-2026-33006 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-34032 affecting package httpd for versions less than 2.4.67-1

CVE-2026-34032 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29168 affecting package httpd for versions less than 2.4.67-1

CVE-2026-29168 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-42946 affecting package nginx for versions less than 1.28.3-2

CVE-2026-42946 affecting package nginx for versions less than 1.28.3-2. A patched version of the package is available...

CVE-2026-33489 affecting package coredns for versions less than 1.11.4-16

CVE-2026-33489 affecting package coredns for versions less than 1.11.4-16. A patched version of the package is available...

CVE-2026-35469 affecting package kured for versions less than 1.15.0-4

CVE-2026-35469 affecting package kured for versions less than 1.15.0-4. A patched version of the package is available...

CVE-2026-41602 affecting package telegraf for versions less than 1.31.0-20

CVE-2026-41602 affecting package telegraf for versions less than 1.31.0-20. A patched version of the package is available...

CVE-2026-35469 affecting package cri-tools for versions less than 1.32.0-5

CVE-2026-35469 affecting package cri-tools for versions less than 1.32.0-5. A patched version of the package is available...

CVE-2026-42154 affecting package telegraf for versions less than 1.31.0-20

CVE-2026-42154 affecting package telegraf for versions less than 1.31.0-20. A patched version of the package is available...

CVE-2026-33079 affecting package python-mistune for versions less than 3.2.1-1

CVE-2026-33079 affecting package python-mistune for versions less than 3.2.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44896 affecting package python-mistune for versions less than 3.2.1-1

CVE-2026-44896 affecting package python-mistune for versions less than 3.2.1-1. An upgraded version of the package is available that resolves this issue...