CVE-2026-33534

CVE-2026-33534 - SSRF autenticado en EspoCRM 9.3.3 Prueba de concepto de SSRF autenticado para EspoCRM 9.3.3 mediante notación alternativa de IPv4 loopback en el endpoint /api/v1/Attachment/fromImageUrl. Resumen EspoCRM 9.3.3 bloquea URLs loopback directas como http://127.0.0.1/..., pero la ruta ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004239 advisory. In the Linux kernel before 5.4.2, the iouring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004194 advisory. In the Linux kernel before 5.4.2, the iouring feature leads to requests that inadvertently have UID 0 and full capabilities, aka CID-181e448d8709. This is related to...