CVE-2026-64378 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64378 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64317 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64317 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64324 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64324 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64551 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64551 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68207 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68207 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53381 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-53381 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73430

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:09+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-5xvq-cp9x-6p6r...

CVE-2026-73489

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:07+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-cqjc-rmpq-xprq...

CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

DEBIAN-CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NetServer

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16858, CVE-2026-16867, CVE-2026-16868, CVE-2026-16853, CVE-2026-17226, CVE-2026-16859, CVE-2026-16878, CVE-2026-16861, CVE-2026-17212, CVE-2026-18020, CVE-2026-17649, CVE-2026-16871, CVE-2026-18671, CVE-2026-18680, CVE-2026-17502 in...

CVE-2026-71469 Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

CVE-2026-71469

CVE-2026-71469 describes a vulnerability in the search-v2-api where an unauthenticated attacker can send requests with unique random bearer tokens. Each token creates a permanent entry in an unbounded tokenReviews cache, which is not cleared properly, leading to memory exhaustion of the search-ap...

CVE-2026-71469

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

EUVD-2026-57642

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-73500

CVE-2026-73500 affects etcd. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can trigger the TLS handshake by opening many TCP connections. In tlsListener.acceptLoop, each connection handled by the loop spawns a goroutine that blocks indefinitely...

CVE-2026-19004

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

CVE-2026-19002

A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...