SUSE CVE-2026-72100

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of limits If dmintegritychecklimits fails, the code would exit with DMMAPIOKILL. However, the range would be already locked at this point, and it wouldn't be unlocked, resulting in a...

CVE-2026-54754 Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...

CVE-2026-81341

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

EUVD-2026-67738

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-80675 libbpf: Reject non-exclusive metadata maps in the signed loader

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

SUSE CVE-2026-12261

A vulnerability in nltk.downloader in nltk/nltk versions = 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as corpora/ and taggers/ instead of package-isolated roots, and validates package integrity only after the...

SUSE CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

ROS-20260828-73-0017

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 on GA media (moderate)

OpenRGB-1.0rc3.1+git0.g5e81e26f-1.1 on GA media Announcement ID: openSUSE-SU-2026:11602-1 Rating: moderate Cross-References: CVE-2026-59682 CVSS scores: CVE-2026-59682 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2026-59682 SUSE : 8.8...

ROS-20260828-73-0009

The vulnerability of the vtitunnelxmit function in the net/ipv4/ipvti.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260828-73-0003

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

CVE-2026-54746: Authorization Bypass Through User-Controlled Key

Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale. From 0.40.0 until 0.91.1, the Dispatcher gRPC service does not verify that a request's worker ID belongs to the tenant identified by the bearer-token context in Dispatcher/UpsertWorkerLabels and...

CVE-2026-81341: Reusing a Nonce, Key Pair in Encryption

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-55867: Authorization Bypass Through User-Controlled Key

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/userId/tokens/idOrToken endpoint implemented by UsersResource.revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERSTOKENREMOVE...

The vulnerability of the QuerySet.order_by() function in the Django web application framework allows a hacker to gain access to confidential data and influence the integrity of the data.

The vulnerability of the QuerySet.orderby function in the Django web application framework relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to gain access to sensitive data and compromise data integrity...

The vulnerability of the OpenSSH cryptographic protection mechanism, which arises from performing operations in the wrong order, allows attackers to gain access to confidential data and compromise the integrity of that data.

The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in the fact that information is stored in an open manner, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to the storage of information in an open manner. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the uvc_start_streaming_video() function in the drivers/media/usb/uvc/uvc_queue.c file of the Linux operating system’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the uvcstartstreamingvideo function in the drivers/media/usb/uvc/uvcqueue.c file of the Linux operating system’s multimedia device driver relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the MapServer geographic data rendering system, related to deficiencies in path name restriction, allows attackers to compromise the integrity of the data.

The vulnerability of the MapServer geographic data rendering system is related to deficiencies in path name restriction. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...