CVE-2026-33534

CVE-2026-33534 - EspoCRM 9.3.3 Authentifiziertes SSRF Authentifizierter SSRF-Proof-of-Concept für EspoCRM 9.3.3 über alternative IPv4-Loopback-Notation im /api/v1/Attachment/fromImageUrl-Endpunkt. Zusammenfassung EspoCRM 9.3.3 blockiert direkte Loopback-URLs wie http://127.0.0.1/..., aber der...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004239 advisory. In the Linux kernel before 5.4.2, the iouring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004194 advisory. In the Linux kernel before 5.4.2, the iouring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to...