ROOT-OS-DEBIAN-13-CVE-2025-61147 CVE-2025-61147 in libde265 - Patched by Root

Root has patched CVE-2025-61147 in the libde265 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34502 CVE-2026-34502 in apr-util - Patched by Root

Root has patched CVE-2026-34502 in the apr-util package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-34501 CVE-2026-34501 in apr-util - Patched by Root

Root has patched CVE-2026-34501 in the apr-util package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root

Root has patched CVE-2026-58050 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-7598 CVE-2026-7598 in libssh2 - Patched by Root

Root has patched CVE-2026-7598 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...

DEBIAN-CVE-2026-77014

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...

WordPress Link Library plugin < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability

Unauthenticated SQL Injection via the Front-End Link Submission Form vulnerability discovered by Abdullah Kareem cyberkareem in WordPress Plugin Link Library versions 7.9.3...

ECHO-37B9-2184-9E46

Bulletin has no description...

ECHO-95FC-7DA4-DF04

Bulletin has no description...

ECHO-D43D-3438-B69F

Bulletin has no description...

ECHO-EF47-70D2-ABED

Bulletin has no description...

ECHO-38C1-1304-759B

Bulletin has no description...

ROOT-APP-NPM-AIKIDO-2026-10820 AIKIDO-2026-10820 in axios - Patched by Root

Root has patched AIKIDO-2026-10820 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10819 AIKIDO-2026-10819 in axios - Patched by Root

Root has patched AIKIDO-2026-10819 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-10509 AIKIDO-2026-10509 in axios - Patched by Root

Root has patched AIKIDO-2026-10509 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-27152 CVE-2025-27152 in axios - Patched by Root

Root has patched CVE-2025-27152 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-58754 CVE-2025-58754 in axios - Patched by Root

Root has patched CVE-2025-58754 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59869 CVE-2026-59869 in js-yaml - Patched by Root

Root has patched CVE-2026-59869 in the js-yaml package for Root:npm. Multiple fixed versions available...

CVE-2026-17153

The AI Agent by SiteGround plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to upload images...