SUSE CVE-2026-44328

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of that, the DELETE /upi/v1/upNodesLinks/upNodeRef handler unconditionally dereferences upNode.UPF after the type-guarded...

CVE-2026-7260

creationtimestamp| type| source ---|---|--- 2026-07-30 12:19:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ecr6xcbeftyzl 2026-07-30 12:49:14+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mruhzvp5622t 2026-07-30 13:29:27+00:00| seen|...

CVE-2026-17716

Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic. Chromium security severity: High...

CVE-2026-44943

CVE-2026-44943 is a path traversal in open-iscsi up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e, allowing remote MITM attackers to create root-owned files outside the database and inject lines into the record. Affected product: open-iscsi. Root cause: improper limitation of a pathname to a...

CVE-2023-31606

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:26+00:00| seen| https://t.me/CVEhub/14254 2026-07-30 00:00:48+00:00| seen| https://t.me/CVEhub/14254 2026-07-31 00:00:26+00:00| published-proof-of-concept| https://t.me/CVEhub/14254...

CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

CVE-2026-65881

creationtimestamp| type| source ---|---|--- 2026-07-28 15:37:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpqiwsr7d2i...

K000162472: Linux kernel vulnerability CVE-2026-53294

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channel The RX channel can be aliased to the TX channel if it has a different MMIO. This special case needs to be handled when freeing the channels...

CVE-2025-71408

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

CGA-8V7J-55XC-8GF2

Bulletin has no description...

CGA-7C6Q-GHQ6-P6MV

Bulletin has no description...

CVE-2026-34496 victor Web - Priviledge Escalation

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...

CVE-2026-61312

creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:47:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz6rvux532p...

CVE-2026-61224

creationtimestamp| type| source ---|---|--- 2026-07-23 18:17:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61201

creationtimestamp| type| source ---|---|--- 2026-07-23 18:17:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65489

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-56416

In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded domain name as 'datstart + dnamevaliddatstart, ...' and passes it straight to 'querydnametolower'...

CVE-2026-60868

...

CVE-2026-60378

...

CVE-2026-57366

creationtimestamp| type| source ---|---|--- 2026-07-20 18:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3x7e2xlx2e 2026-07-21 04:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4yq7e34e2o 2026-07-21 14:44:09+00:00| seen|...