kernel update

4.18.0-553.143.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

RockyLinux 9 : kernel (RLSA-2026:38491)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38491 advisory. kernel: Linux kernel: Memory leak in networking due to incorrect GRO packet handling CVE-2026-22979 kernel: rtmutex: Use waiter::task instead of current...

de.codecentric:spring-boot-admin-sample-consul (>=4.0.0-m1, <=4.1.1), de.codecentric:spring-boot-admin-sample-eureka (>=4.0.0-m1, <=4.1.1) +14 more potentially affected by CVE-2026-62242 via de.codecentric:spring-boot-admin-server (>=4.0.0-m1, <=4.1.1)

de.codecentric:spring-boot-admin-server MAVEN version =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =8.0.0-rc2, =12.94.0, =12.94.0, =14.0.0 and more Source cves: CVE-2026-62242 Source advisory:...

CVE-2026-62242

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can...

CVE-2026-62242 Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can...

CVE-2026-62242 Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled healthUrl and managementUrl parameters without validation against private IP ranges or metadata endpoints. Attackers can...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.24), cn.dreamfame:df-core-boot (>=1.0.0, <=1.0.20) +81 more potentially affected by CVE-2026-62242 via de.codecentric:spring-boot-admin-server (>=1.0.2, <=4.1.1)

de.codecentric:spring-boot-admin-server MAVEN version =1.0.2, =0.5.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6.oss, =0.0.2, =1.2.3-release, =3.0.3.release, =1.0.0, =1.1.3, =1.1.5 - com.github.jchanghong:parent 3.0.11 and more Source cves: CVE-2026-62242 Source advisory:...

CVE-2026-62242

CVE-2026-62242 affects Spring Boot Admin Server prior to 4.1.2. The vulnerability is a server-side request forgery in the unauthenticated instance registration flow, where attacker-controlled healthUrl and managementUrl are not validated against private IP ranges or metadata endpoints. This allow...

Exploit for Improper Input Validation in Snakeyaml_Project Snakeyaml

Seal Security — Java Maven Example A minimal, intentionally...

poc2

OWASP Vulnerability Learning Lab Spring Boot 3 ⚠️ WARNIN...

PYSEC-2026-3079 OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."...

OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-29008

A flaw was found in U-Boot. A network-adjacent attacker can exploit an integer underflow vulnerability in the tcprxstatemachine function by sending a specially crafted TCP SYN+ACK packet. This can cause the bootloader to crash, leading to a Denial of Service DoS and preventing the device from...

Boot2Root

Boot2Root A cybersecurity challenge focused on penetration...

EUVD-2026-43297

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an...

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an...

CVE-2026-4769 Unauthenticated Access to Internal Diagnostic Interface

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an...

CVE-2026-4769

The affected product family is WAGO System I/O Field series devices. The CVE describes an undocumented internal diagnostic capability that activates during the initial startup sequence and remains accessible without authentication for a brief window in the early boot phase. During this window, an...

CVE-2026-4769

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an...