ALSA-2026:39547 Important: perl-XML-LibXML security update

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation. Security Fixes:...

CVE-2026-2002

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-15 00:00:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90102...

Chromium: CVE-2026-13819 Out of bounds read in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-61450

creationtimestamp| type| source ---|---|--- 2026-07-10 16:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqclzktvii26 2026-07-10 20:16:59+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqcxq5tkwy25 2026-07-10 23:27:04+00:00| seen|...

CVE-2026-1946

creationtimestamp| type| source ---|---|--- 2026-07-10 11:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k 2026-07-10 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c 2026-07-10 21:14:43+00:00| seen|...

BELL-CVE-2026-10037 CVE-2026-10037 does not affect BellSoft software

Bulletin has no description...

UBUNTU-CVE-2026-44918

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization...

CVE-2026-11827

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u5w5rz72o...

ROOT-OS-DEBIAN-12-CVE-2026-5773 CVE-2026-5773 in rootio-curl - Patched by Root

Root has patched CVE-2026-5773 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...

DEBIAN-CVE-2026-58252

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, an authenticated user could receive messages on denied subjects when a wildcard subscription overlapped with a configured wildcard deny rule but was not a subset...

UBUNTU-CVE-2026-58253

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.0, 2.12.7, and 2.11.16, when noauthuser was configured, a parser fast path intended for ordinary client connections could also apply to route or leafnode listeners, allowing an...

DEBIAN-CVE-2026-53588

Bulletin has no description...

DEBIAN-CVE-2026-45092

Bulletin has no description...

CVE-2026-53131

creationtimestamp| type| source ---|---|--- 2026-07-06 06:48:59+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

SUSE CVE-2026-49825

lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in lxml.html.defs.linkattrs were missing xlink:href, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxmlhtmlclean 0.4...

CVE-2026-14648

creationtimestamp| type| source ---|---|--- 2026-07-05 00:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpubwlkocb2t...

BELL-CVE-2026-47247

Bulletin has no description...

CVE-2026-14607

creationtimestamp| type| source ---|---|--- 2026-07-03 22:14:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprl2pm32s2z...

CVE-2026-40914 vulnerabilities

Vulnerabilities for packages: wildfly...

DEBIAN-CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...