CVE-2026-57546

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

EUVD-2026-92981

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-57546 Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

PT-2026-106355

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the PyEnvCfg.write method in src/virtualenv/create/pyenvcfg.py, where configuration values containing line boundary characters such as \n, \r, \v, \f, and Unicode line/paragraph separators are written into pyvenv.cfg...

urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override

A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security TLS settings inadvertently overwrite the proxy's TLS configuration, which can disabl...

SUSE CVE-2026-62940

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...

PT-2026-81333

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.161.19 JFrog Artifactory versions prior to 7.146.36 Description An authenticated user with permissions to read an existing remote Version Control System VCS repository can trigger server-side requests. Thi...

CVE-2026-62940

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...

CVE-2026-62940

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides including security-critical keys like security.privileged and raw.lxc are applied without any project restriction enforcemen...

JLSEC-2026-1323 In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

SUSE CVE-2026-63296

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

CVE-2026-63296

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

CVE-2026-63296 Project restriction bypass via instance migration config override

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

CVE-2026-63296 Project restriction bypass via instance migration config override

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

CVE-2026-63296 Project restriction bypass via instance migration config override

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

CVE-2026-63296

CVE-2026-63296 describes an authorization bypass in LXD where, during instance migration to a target project, the system accepts configuration overrides without validating against the target project’s enforced restrictions. This allows an authenticated attacker (network vector, low attack complex...

CVE-2026-63296

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's...

PT-2026-71284

Name of the Vulnerable Software and Affected Versions LXD affected versions not specified Description An authorization bypass allows an authenticated attacker to circumvent target project restrictions during instance migration. The issue occurs because LXD accepts configuration overrides without...

CVE-2026-62354 Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests

Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation...