CVE-2026-64138

A flaw was found in the ksmbd module of the Linux kernel. This vulnerability arises from improper validation of Security Identifiers SIDs within the NT Security Descriptor smbntsd during Access Control List ACL inheritance. An attacker could exploit this to bypass intended security restrictions,...

DEBIAN-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

UBUNTU-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

CVE-2026-63814

A flaw was found in the Linux kernel's Flash-Friendly File System f2fs. A local attacker could exploit improper validation of Access Control List ACL entry sizes to cause a memory corruption, leading to a system crash or denial of service. This occurs when malformed ACL entries cause the system t...

CVE-2026-53390

A flaw was found in the Linux kernel's ksmbd component. An authenticated client can exploit an out-of-bounds read vulnerability in the smbcheckpermdacl function by providing a specially crafted Access Control Entry ACE. This crafted ACE, when processed during an access check on a share that uses...

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

CVE-2026-15812 Kronosnet: kronosnet: access control list bypass via link id spoofing on unencrypted dynamic links

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

CVE-2026-15812

CVE-2026-15812 affects kronosnet (

CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

EUVD-2026-46152

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

Malicious code in chai-as-reddit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eff17b9d2536e662413c5c7090a1611f8c2813033a03960f9d979f23f2f72e7 The npm package [email protected] is a trojaned distribution. Its published metadata and README describe a Chai plugin for Reddit API assertions,...

PT-2026-63268

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing Authorization in Kibana allows for unauthorized cross-space information disclosure. This occurs when user-supplied input is used to circumvent space-level access control, enabling acce...

PT-2026-63263

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An incorrect authorization issue exists in the Machine Learning functionality. A management endpoint performs an insufficient authorization check by validating only a coarse privilege level...

acl security update

2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186106 - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl RHEL-186207...

PT-2026-62387

Name of the Vulnerable Software and Affected Versions Oracle Coherence version 12.2.1.4.0 Oracle Coherence version 14.1.1.0.0 Oracle Coherence version 14.1.2.0.0 Oracle Coherence version 15.1.1.0.0 Description A flaw in the Core component of Oracle Coherence allows a low privileged attacker with...

ALSA-2026:42739 Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations...

Important: acl security update

Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...

Oracle Linux 10 : kernel (ELSA-2026-18134)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18134 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

Oracle Linux 10 : cups (ELSA-2026-39302)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39302 advisory. 1:2.4.10-18 - RHEL-177945 CVE-2026-34980 cups: control character injection in option values Tenable has extracted the preceding description block directly fro...