openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

A flaw was found in the OpenSSH GSSAPI Generic Security Service Application Program Interface delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the...

📄 strongSwan 4.5.0 EAP-TTLS Integer Underflow

This Metasploit auxiliary module is designed to detect a vulnerability in strongSwan's EAP-TTLS implementation, identified as CVE-2026-25075. The issue is related to an integer underflow in the handling of AVP Attribute-Value Pair length fields during IKE-related UDP communication...

CVE-2026-8260

creationtimestamp| type| source ---|---|--- 2026-05-10 15:29:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116550988543376529 2026-05-11 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlk4sl6tqq22 2026-05-11 01:30:30+00:00| seen|...

CVE-2026-42350

creationtimestamp| type| source ---|---|--- 2026-05-09 17:03:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116545697527370018 2026-08-27 21:32:59+00:00| seen| https://gist.github.com/alon710/14e4e76cd8061b293a52482e75942e6f...

CVE-2026-8234

creationtimestamp| type| source ---|---|--- 2026-05-09 16:45:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116545626763451374 2026-05-10 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116549106106707429 2026-05-10 07:30:28+00:00| seen|...

CVE-2026-40379

creationtimestamp| type| source ---|---|--- 2026-05-09 08:31:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116543682808822499 2026-05-12 15:53:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142 2026-05-12 16:38:43+00:00| seen|...

CVE-2026-44895

creationtimestamp| type| source ---|---|--- 2026-05-09 00:10:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8jr5-6gvj-rfpf 2026-05-27 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116643596586856381 2026-05-27 00:00:39+00:00| seen|...

CVE-2026-43461

creationtimestamp| type| source ---|---|--- 2026-05-08 16:55:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116540001875370706 2026-05-11 16:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllngctcmo2n...

CVE-2026-43438

creationtimestamp| type| source ---|---|--- 2026-05-08 16:41:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539946775290903...

CVE-2026-43380

creationtimestamp| type| source ---|---|--- 2026-05-08 16:28:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539895668179070 2026-08-03 07:45:11+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

EUVD-2026-28676

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm-processinfo assignment with cmpxchg to prevent race when parent/child processes sharing a drmfile both try to acquire the same VM after fork. cherry picked...

CVE-2026-43370

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm-processinfo assignment with cmpxchg to prevent race when parent/child processes sharing a drmfile both try to acquire the same VM after fork. cherry picked...

UBUNTU-CVE-2026-43370

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm-processinfo assignment with cmpxchg to prevent race when parent/child processes sharing a drmfile both try to acquire the same VM after fork. cherry picked...

CVE-2026-43336

creationtimestamp| type| source ---|---|--- 2026-05-08 15:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539577165562722 2026-08-03 07:01:01+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-43330

creationtimestamp| type| source ---|---|--- 2026-05-08 14:53:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539522176473574 2026-05-08 15:00:14+00:00| seen| https://infosec.exchange/users/adulau/statuses/116539548558362414 2026-05-31 20:00:00+00:00| seen|...

CVE-2026-43318

creationtimestamp| type| source ---|---|--- 2026-05-08 14:40:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539471450878943 2026-07-02 06:18:58+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43322

creationtimestamp| type| source ---|---|--- 2026-05-08 14:26:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539416064005784...

CVE-2026-43303

creationtimestamp| type| source ---|---|--- 2026-05-08 14:13:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539364786934453 2026-07-01 02:35:14+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 05:55:24+00:00|...

CLSA-2026-1778159627 libssh2: Fix of 2 CVEs

CVE-2019-13115: add bounds-checked stringbuf helpers and use them in diffiehellmansha1 to prevent out-of-bounds read on malformed KEX reply - CVE-2019-17498: harden bounds checks in SSHMSGDISCONNECT, SSHMSGDEBUG and SSHMSGGLOBALREQUEST handlers to prevent integer overflow / out-of-bounds read...

CVE-2026-6213

creationtimestamp| type| source ---|---|--- 2026-05-08 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116538489534406589 2026-05-08 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mldjlhz44r2o 2026-05-08 10:55:38+00:00| seen|...