CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

CVE-2026-92917

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters printr, vardump, jsonencode, yamlencode, string: GravExtension::assertSandboxDumpSafe determines sandbox state by calling SandboxExtension::isSandboxed without...

coreutils security update

An update is available for coreutils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

CVE-2026-86801

creationtimestamp| type| source ---|---|--- 2026-09-17 12:01:36+00:00| seen| https://gist.github.com/ichintu/708cde2930dab870a608709053650d91...

CVE-2026-92913

creationtimestamp| type| source ---|---|--- 2026-09-17 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117286268134949990 2026-09-17 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvpm5stbue24 2026-09-17 13:10:04+00:00| seen|...

CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

CVE-2026-24073

creationtimestamp| type| source ---|---|--- 2026-09-17 11:37:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvpkuqmmu22c...

EUVD-2026-81427

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-81438

Dell OpenManage Server Administrator (OMSA) versions prior to 11.1.0.3 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote network access could exploit this flaw, resulting in Information disclosure . The CVSS 3.1 score is 3.7 (LOW) , ...

CVE-2026-81438

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-82092

creationtimestamp| type| source ---|---|--- 2026-09-17 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvphirgzas2r...

CVE-2026-80983

creationtimestamp| type| source ---|---|--- 2026-09-17 10:20:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvpgkaqbwy27 2026-09-17 10:20:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117285873381437064...

CVE-2026-86320

creationtimestamp| type| source ---|---|--- 2026-09-17 09:17:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5idvwgmgu2eje 2026-09-17 11:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvpitqq5p522...

CVE-2026-75553

creationtimestamp| type| source ---|---|--- 2026-09-17 08:45:02+00:00| seen| https://jvn.jp/en/jp/JVN93985674 2026-09-25 08:22:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4e67qevwhtxeq...

CVE-2026-61589

creationtimestamp| type| source ---|---|--- 2026-09-17 08:31:33+00:00| seen| https://gist.github.com/alon710/af16074dda7459d4288c488d29fd9ab0...

kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

CVE-2026-90982

creationtimestamp| type| source ---|---|--- 2026-09-17 07:02:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mvp3jopv5s2t 2026-09-17 09:08:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5dccxdrbg6xcd...

EUVD-2026-81338

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...