rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

CVE-2026-78359

OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LDAP, are configured, the uniqueness check for customer user email addresses is performed only within the selected backend...

CLEANSTART-2026-AH42330 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CLEANSTART-2026-KP97729 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the kube-state-metrics-fips package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

Linux Distros Unpatched Vulnerability : CVE-2026-102269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts...

AZL-104985 CVE-2026-102269 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

EUVD-2026-88536

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

CVE-2026-102269

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

PT-2026-108326

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

CVE-2026-102269: Incorrect Behavior Order: Validate Before Canonicalize

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

PT-2026-102361

Name of the Vulnerable Software and Affected Versions PyJWT versions prior to 2.14.0 Description PyJWT is a Python implementation of JSON Web Token standards. The signature segment decoding process accepts characters outside the canonical Base64URL representation when non-Base64URL characters are...

CLEANSTART-2026-ZW28198 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the loki package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CVE-2026-98146

The Linux kernel contains a vulnerability in the accel/amdxdna component. The struct amdxdna_cmd_chain utilizes a flexible array annotated with __counted_by(command_count). Because this structure resides in shared AMDXDNA_BO_SHARE memory, userspace can concurrently modify command_count. If an att...

Linux Distros Unpatched Vulnerability : CVE-2026-98146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the...

EUVD-2026-85045

The Post Grid Gutenberg Blocks WordPress plugin before 5.0.41 does not perform an authorization or post-visibility check on a REST API route that returns the custom field keys of a given post, allowing unauthenticated users to disclose the custom field key names of arbitrary posts, including...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in the Linux kernel through version 5.16-rc6. The function malidpcrtcreset in the file drivers/gpu/drm/arm/malidpcrtc.c lacks a check on the return value of kzalloc. This could lead to a null pointer dereferencing...

CVE-2026-54174: Improper Validation of Integrity Check Value

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files tha...

ASB-A-505452999

In descramble of DescramblerImpl.cpp, there is a possible arbitrary memory access due to a precondition check failure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

PT-2026-71009

Name of the Vulnerable Software and Affected Versions Cookie Consent WordPress plugin versions prior to 0.0.10 Description Insufficient capability checks on the 'consent-settings' REST routes allow any authenticated user, including those with subscriber-level privileges, to modify the plugin...