PT-2026-96640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Security flaws were identified within the IPv6 networking and Netfilter subsystems, which could potentially allow an attacker to compromise the system. Recommendations At the moment, the...

PT-2026-96112

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Container Platform 4 affected versions not specified Description A flaw in the oc-mirror tool allows for the bypass of PGP Pretty Good Privacy release image signature verification. The tool incorrectly checks for signature...

PT-2026-96093

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description An insecure direct object reference exists in the processModuleResultsData function of the Event model. When processing module results, the system fails to unset the client-supplied id field for...

PT-2026-96079

Name of the Vulnerable Software and Affected Versions Temporal Server versions 1.31.0 through 1.31.2 Description The Worker Service in Temporal Server includes a Worker Controller Instance module that registers a compute provider named subprocess. This provider allows the execution of commands on...

OpenSSL unwrap_key() Heap Buffer Overflow DoS

The vulnerability of the unwrapkey function in the openssl/src/aes.rs module of the OpenSSL library is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

Fortinet Privileged Access Agent Authentication Bypass

The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

OpenSSL ocsp_responders() function Data Compromise

The vulnerability of the ocspresponers function in the openssl/src/x509/mod.rs library of the OpenSSL library is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

PT-2026-95906

Name of the Vulnerable Software and Affected Versions SmartLife app affected versions not specified Description An authentication bypass exists due to the way the application dynamically generates authentication parameters within its runtime process. An attacker can acquire these parameters to...

Malware in internallib_v949

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmapwrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands...

CVE-2026-80441

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

CVE-2026-61817

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...

UBUNTU-CVE-2026-61817

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...

CVE-2026-84083

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. The root cause is insufficient argument validation in the SUID binary, allowing a local attacker with low-privileged access to execute arbitrary comman...

CVE-2026-61820 pg_partman privilege escalation via SQL injection when inheriting template properties

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherittemplateproperties manually surrounds primary-key column names from pgattribute.attname with double quotes without escaping embedded double-quote characters. A partmanuser who owns a template...

CVE-2026-61820

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherittemplateproperties manually surrounds primary-key column names from pgattribute.attname with double quotes without escaping embedded double-quote characters. A partmanuser who owns a template...

CVE-2026-61781

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, createpartitiontime reads the writable partconfig.timeencoder text value and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with the documented...

EUVD-2026-83301

IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker could inject malicious SQL that is subsequently processed by the application, potentially resulting...

MAL-2026-16287 Malicious code in openmct-heatmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10a6524a4d56f0f938712d6cee661457f0685b67ac34345d73794cccfb3dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openmct-heatmap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10a6524a4d56f0f938712d6cee661457f0685b67ac34345d73794cccfb3dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...