SUSE-SU-2026:20498-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim bsc1256280. - CVE-2025-38321: smb: Log an error when closeallcacheddirs fails bsc1246328. ...

CVE-2025-40540

creationtimestamp| type| source ---|---|--- 2026-02-24 08:19:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mflqacjjx225 2026-02-24 09:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflswhn2qe2z 2026-02-24 13:34:15+00:00| seen|...

CVE-2025-67733

creationtimestamp| type| source ---|---|--- 2026-02-23 20:30:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkimlakdt25 2026-02-23 20:31:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkinnkzsp2c 2026-02-23 21:07:19+00:00| seen|...

CERTFR-2026-ACT-008

creationtimestamp| type| source ---|---|--- 2026-02-23 14:04:04+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116120318282447958 2026-02-23 14:04:06+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mfjsz6k6gz2k...

CVE-2026-27470

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

UBUNTU-CVE-2026-27470

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

CVE-2026-27470 ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

CVE-2026-27470

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

PT-2026-21370

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents function. Event field values specifically Name a...

Linux Distros Unpatched Vulnerability : CVE-2026-27470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a...

CVE-2026-26980

creationtimestamp| type| source ---|---|--- 2026-02-20 02:18:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfb266mz4n2f 2026-02-20 02:18:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfb26hfbr72n 2026-02-20 02:18:46+00:00| seen|...

CVE-2026-26319 OpenClaw has Missing Webhook Authentication in Telnyx Provider Allowing Unauthenticated Requests

OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests when telnyx.publicKey is not configured, enabling unauthenticated callers to forge Telnyx events. Telnyx webhooks are...

CVE-2026-26362

creationtimestamp| type| source ---|---|--- 2026-02-19 16:04:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7xux7eab2s 2026-02-19 16:28:31+00:00| seen| https://bsky.app/profile/potato.software/post/3mf7z7siwjz25 2026-02-19 23:00:18+00:00| seen|...

CVE-2026-1941

The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpevents' shortcode in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-1649

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...

OpenClaw 访问控制错误漏洞

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from an Access Control Error vulnerability that stems from the @openclaw/voice-call plugin Telnyx webhook handler accepting unsigned inbound webhook requests when telnyx.publicKey is not configured, which can b...

UBUNTU-CVE-2026-23217

In the Linux kernel, the following vulnerability has been resolved: riscv: trace: fix snapshot deadlock with sbi ecall If sbiecall.c's functions are traceable, echo "sbiecall:snapshot" /sys/kernel/tracing/setftracefilter may get the kernel into a deadlock. Functions in sbiecall.c are excluded fro...

CVE-2026-2495

creationtimestamp| type| source ---|---|--- 2026-02-18 09:16:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4qn2e2t62x 2026-02-18 09:34:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mf4rnecges2h 2026-02-18 10:30:30+00:00| seen|...

CVE-2026-1941

The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpevents' shortcode in all versions up to, and including, 1.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2026-1649

The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cevenuename' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-lev...