CLSA-2026-1775739369 pki-servlet-engine: Fix of 3 CVEs

CVE-2024-52316: fix JASPIC authentication bypass on ServerAuthContext exception - CVE-2025-55754: fix ANSI escape sequence injection in log messages - CVE-2025-46701: fix CGI servlet case sensitivity bypass of security constraints...

CVE-2026-25430

creationtimestamp| type| source ---|---|--- 2026-04-09 11:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2pfe25hm2c...

CVE-2026-5853

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cifymxh2s 2026-04-09 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2evtxrk32i 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

SUSE CVE-2026-31842

Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The ischunkedtransfer function uses strcmp to compare the header value against "chunked", even though RFC 7230 specifies that...

SUSE CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CLSA-2026-1775688216 augeas: Fix of CVE-2025-2588

CVE-2025-2588: fix null pointer dereference in recaseexpand...

CVE-2026-33461

creationtimestamp| type| source ---|---|--- 2026-04-08 18:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miywwtrvw623 2026-04-08 23:32:47+00:00| seen| Telegram/ZztUGlJiiCH0mZAuu7v3RF9KN1NNH1hWH4kt4dDN5ep1QI 2026-04-09 09:08:48+00:00| seen|...

CVE-2026-32540

creationtimestamp| type| source ---|---|--- 2026-04-08 13:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miyfmzazry2h...

Timeshare owners warned to watch out for cartel-linked scams

If you own a timeshare and have been searching for a way out, you need to know who may be targeting you. In February, the US Treasury Department announced sanctions against a timeshare fraud network linked to a major Mexican drug cartel, the Jalisco New Generation Cartel CJNG. These aren’t your...

CVE-2026-39709

creationtimestamp| type| source ---|---|--- 2026-04-08 10:22:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miy35mhi732d...

CVE-2026-2988

creationtimestamp| type| source ---|---|--- 2026-04-08 07:29:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixri3fpdc2z 2026-04-21 07:44:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjyieagyql2s...

AZL-82328 CVE-2026-33810 affecting package golang for versions less than 1.25.9-1

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

AZL-82397 CVE-2026-33810 affecting package golang for versions less than 1.26.2-1

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

DEBIAN-CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-33810

CVE-2026-33810 affects the Go crypto/x509 certificate chain validation. The issue occurs when verifying a chain with excluded DNS constraints: constraints are not consistently applied to wildcard DNS SANs if the SANs’ case differs from the constraint, which can affect validation of otherwise trus...

CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...