ECHO-79D4-B3D1-2520

Bulletin has no description...

ECHO-1353-FD70-BD79

Bulletin has no description...

ECHO-C210-992E-640A

Bulletin has no description...

ECHO-37EC-7E98-5F4F

Bulletin has no description...

ECHO-9D99-9ED1-60B7

Bulletin has no description...

ECHO-DB00-4309-1170

Bulletin has no description...

ECHO-F836-71CF-434B

Bulletin has no description...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

ECHO-8A36-8D53-BF0C

Bulletin has no description...

ECHO-EF47-70D2-ABED

Bulletin has no description...

ECHO-38C1-1304-759B

Bulletin has no description...

ECHO-02EA-72A4-FE7A

Bulletin has no description...

ECHO-E7FA-7050-0A91

Bulletin has no description...

ECHO-9151-32E7-325F

Bulletin has no description...

ECHO-6F2B-D2B2-D50C

Bulletin has no description...

ECHO-29A6-7992-DF6D

Bulletin has no description...

PT-2026-77235

MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node helper.js passes every inbound object payload through replaceSecretPlaceholder in js/server functions.js before invoking...

ECHO-B963-92F2-CBC3

Bulletin has no description...

ECHO-D43E-4B7E-6CC8

Bulletin has no description...

UBUNTU-CVE-2026-72398

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...