PT-2026-23115

Name of the Vulnerable Software and Affected Versions Drupal OpenID Connect / OAuth client versions prior to 1.5.0 Description A flaw exists in the OpenID Connect / OAuth client module that allows for privilege escalation due to improper handling of case sensitivity. The module does not adequatel...

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. The module doesn't sufficiently validate the uniqueness of certain...

Linux Distros Unpatched Vulnerability : CVE-2024-21953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity. CVE-2024-21953...

The vulnerability of the mac_hid_toggle_emumouse() function in the drivers/macintosh/mac_hid.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the machidtoggleemumouse function in the drivers/macintosh/machid.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Security update for python311

This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...

SUSE-SU-2026:0767-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. - CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. - CVE-2025-1528...

Security Bulletin: IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions (CVE-2025-13734)

Summary IBM Engineering Requirements Management DOORS Next could allow an authenticated user to view and edit data beyond their assigned access permissions. This issue occurs due to insufficient authorization enforcement. An attacker with valid credentials could exploit this vulnerability to gain...

The vulnerability of the i40e_vsi_request_irq_msix() function in the drivers/net/ethernet/intel/i40e/i40e_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the setup_callback_client() function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the mptcp_worker() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the rtl8187_rx_cb() function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver developed by Realtek for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl8187rxcb function in the drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless adapter driver module developed by Realtek for the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability could allow ...

The vulnerability of the io_init() function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the opt3001_irq() function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Security update for python311

This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...

SUSE-SU-2026:0693-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. - CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. - CVE-2025-1528...

CVE-2026-1627

An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic...

EUVD-2026-8963

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts

A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts...

PT-2026-22231

Name of the Vulnerable Software and Affected Versions Systems utilizing WebSocket endpoints for Open Charge Point Protocol OCPP communication affected versions not specified Description WebSocket endpoints are missing appropriate authentication, allowing attackers to impersonate charging stations...