EUVD-2026-62659

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values without an allowlist or confinement to the input directory. Processing an attacker-controlled OpenAPI description can cau...

CVE-2026-74532

A flaw was found in the Bluetooth btintel driver of the Linux kernel. The btinteldiagnostics function fails to validate the length of a diagnostics Vendor Specific Event VSE before accessing its data. This oversight allows an attacker to potentially read data beyond the intended memory boundary,...

CVE-2026-72444

A flaw was found in the Linux kernel's flowdissector component. When processing network packets on non-Ethernet devices, such as a TUN device in L3 mode, with specific traffic control filters, the flowdissector can attempt to read Ethernet header information that does not exist. This leads to the...

CVE-2026-74501

A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...

CVE-2026-72351

A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE implementation. A remote attacker could exploit a missing length validation for the remote checksum offload REMCSUM private option. By sending a specially crafted GUE packet, an attacker can cause the kernel to read beyond the...

CVE-2026-66794 Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route

A flaw was found in the cluster-proxy-addon component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy...

EUVD-2026-62598

A flaw was found in the cluster-proxy-addon component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

MINI-88FH-89X6-QC92

Bulletin has no description...

CVE-2026-58440

A flaw was found in Gitea. Webhooks created by a collaborator continue to function even after their repository access is revoked. This incomplete revocation allows for the ongoing, real-time exfiltration of private repository content, leading to information disclosure. Mitigation To mitigate this...

CVE-2026-60955

creationtimestamp| type| source ---|---|--- 2026-08-19 17:16:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70814

creationtimestamp| type| source ---|---|--- 2026-08-19 16:50:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71101

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:53+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70932

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70845

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70835

creationtimestamp| type| source ---|---|--- 2026-08-19 16:48:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71022

creationtimestamp| type| source ---|---|--- 2026-08-19 16:46:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

USN-8651-1 curl vulnerability

It was discovered that curl incorrectly handled reusing connections when the origin changed between transfers. A remote attacker could possibly use this issue to obtain sensitive information...