CVE-2026-82260

creationtimestamp| type| source ---|---|--- 2026-08-28 13:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu5g6fhgb322 2026-08-28 14:07:41+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5jwtttte2t 2026-08-28 14:07:52+00:00| seen|...

CVE-2026-55583

creationtimestamp| type| source ---|---|--- 2026-08-28 13:00:05+00:00| seen| Telegram/S10hsFVDI82am35mLtrW2Lu7gt-O8uQTUdZrdbSt3B6uU 2026-08-29 00:00:09+00:00| seen| Telegram/S10hsFVDI82am35mLtrW2Lu7gt-O8uQTUdZrdbSt3B6uU...

CVE-2025-46445

creationtimestamp| type| source ---|---|--- 2026-08-28 13:00:05+00:00| seen| Telegram/hQtzv6DL4WYG9-NneOqiV4oOQsP1iV4KS9tubsFUfnleU 2026-08-28 13:00:05+00:00| seen| https://t.me/ProfessorDiscussions/30213 2026-08-29 00:00:08+00:00| seen| https://t.me/ProfessorDiscussions/30213 2026-08-29...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

AZL-98277 CVE-2026-42392 affecting package dovecot 2.3.20-1

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42392

CVE-2026-42392 affects Open-Xchange Dovecot . An attacker with valid credentials can send an invalid IMAP URLFETCH command, causing uninitialized memory to be included in the error response returned to the client. This discloses process memory contents , which may contain sensitive data. The CVSS...

CVE-2026-77236

creationtimestamp| type| source ---|---|--- 2026-08-28 08:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu4xhr2t4c2m...

AZL-98096 CVE-2026-80662 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

UBUNTU-CVE-2026-80602

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

CVE-2026-16279

creationtimestamp| type| source ---|---|--- 2026-08-28 07:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubs6ipz2t...

Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by an unsafe deserialization and exposure of sensitive information (CVE-2026-14512, CVE-2026-14528 )

Summary IBM WebSphere Application Server used by IBM Tivoli System Automation Application Manager is affected by an unsafe deserialization and exposure of sensitive information. Vulnerability Details CVEID:CVE-2026-14512 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 traditional is...

CVE-2026-80717 sctp: validate Adaptation Indication parameter length

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80708

This Linux kernel vulnerability affects the s390/zcrypt subsystem, specifically the cca_clr2cipherkey() function used during clear key to secure key token import. The root cause is that the internal helper _ip_cprb_helper() used internal buffer memory for building and processing CPRBs but never s...

CVE-2026-80662 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80602 perf/x86/amd/lbr: Fix kernel address leakage

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

CVE-2026-82090

creationtimestamp| type| source ---|---|--- 2026-08-28 06:08:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e 2026-08-28 06:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3 2026-08-29 01:10:05+00:00| seen|...

CVE-2026-78238

creationtimestamp| type| source ---|---|--- 2026-08-28 04:45:12+00:00| seen| https://jvn.jp/en/jp/JVN04485476...

CVE-2026-81529

creationtimestamp| type| source ---|---|--- 2026-08-28 01:04:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117170442136115970 2026-08-28 01:04:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu4666u4nh2x 2026-08-28 01:50:42+00:00| seen|...

PT-2026-83070

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...