com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

com.rabbitmq.jms:rabbitmq-jms (1.10.0), com.smoketurner.dropwizard:zipkin-core (1.3.7-1) +8 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (4.8.1)

com.rabbitmq:amqp-client MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.10.0 - com.smoketurner.dropwizard:zipkin-core 1.3.7-1 -...

slot2 Amazon Linux 2023 UEFI Bootkit

slot2 is a two-stage UEFI GRUB2 bootkit designed to establish a persistent pre-OS implant on Amazon Linux 2023 x8664 EC2 instances. It installs a custom GRUB EFI image and Unified Kernel Image, creates a UEFI NVRAM boot entry ahead of the stock Amazon entry, executes an implant with network and...

Unity Linux 20.1050a Security Update: dracut (UTSA-2026-102611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102611 advisory. A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101986)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101986 advisory. In the Linux kernel, the following vulnerability has been resolved: viawdt: fix critical boot hang due to unnamed resource allocation The VIA watchdog driver uses...

Linux Distros Unpatched Vulnerability : CVE-2026-72238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the syste...

ANT-2026-50T0MN89 · uboot · Out-of-bounds-write

oob-write high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-50T0MN89: U-Boot EFI Image Loader: Out-of-Bounds Write via Unbounded ...

CVE-2026-72238

A flaw was found in the Linux kernel. A local user could cause a system hang during early boot by providing an invalid baud rate for the console=uart8250 parameter. This invalid input leads to a division-by-zero error in the earlyserialinit function, resulting in a Denial of Service DoS. Mitigati...

K000162943: Spring boot vulnerability CVE-2026-40992

Security Advisory Description Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected. Affected versions: Spring Boot 4.0.0 through...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100166 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7drmdecon: add vblank check in IRQ handling If there's support for another...

Security Bulletin: This Power System update is being released to address CVE-2026-17042

Summary Power Systems Firmware is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM image, causing the host firmware boot stage to crash with possible memory corruption. This...

Security Bulletin: This Power System update is being released to address CVE-2026-17093

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level access to the BMC/FSP can supply specially crafted configuration data, compromising the host firmware boot stage and everything subsequently loaded by it, resulting...

Security Bulletin: This Power System update is being released to address CVE-2026-18871

Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...

Security Bulletin: This Power System update is being released to address CVE-2026-17414

Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition performing a network boot can prevent that partition from completing its boot sequence. On partitions where OS secure...

Security Bulletin: This Power System update is being released to address CVE-2026-17028

Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker with access to the same network as a partition undergoing iSCSI SAN network boot can prevent that partition from completing its boot sequence. Other partitions and...

Security Bulletin: This Power System update is being released to address CVE-2026-18821

Summary Power Systems Firmware is affected by a vulnerability in partition firmware during network boot. An unauthenticated attacker on the same network as a partition undergoing network boot can send a malformed packet, allowing arbitrary code to be executed in the partition firmware and...

CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

UBUNTU-CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

EUVD-2026-59137

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...