CVE-2026-105648

The Ghost Node.js content management system is vulnerable to a validation issue in versions 6.0.9 through 6.65.0 . An unauthenticated user can abuse certain functionalities, such as Webmentions , to perform limited HTTP requests to hosts within the server's internal network on specific network co...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-90077

A flaw was found in the Linux kernel's network net subsystem. An issue in the copynetns error handling path allows for resources allocated during network namespace creation to leak. This occurs because the preinitnet function returns prematurely, preventing proper resource deallocation. A local...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

CVE-2026-93319

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...

USN-8851-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...

Astra Linux – Vulnerability in Chromium

The information leak in the Network component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nbd: The function genlunregisterfamily is called first in nbdcleanup. Otherwise, there may be a race between the removal of the module and the handling of the netlink command, which can lead to an oops as shown below: BUG: Kernel...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can result in the callback being fired later, thereby causing a use-after-free when using the channel. This vulnerability can be exploited by a malicious...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: NFS: Fixed potential buffer overflows in nfssysfslinkrpcclient. The name field is a char64 type, and the size of clnt-clprogram-name remains unknown. Invoking strcat directly will also lead to potential buffer overflows...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in many places, such as commit b117e1e8a86d “net: dsa: delete dsalegacyfdbadd and dsalegacyfdbdel”, DSA is written under the assumption that higher layers perform...

Astra Linux – Vulnerability in NTP

In the mstolfp.c file within NTP 4.2.8p15, there is a buffer overflow vulnerability when a \0' character is added. An adversary may be able to attack a client ntpq process, but they cannot attack the ntpd process...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net/sched: actife: avoided possible NULL derefrence tcfifeencode must ensure that ifeencode does not return NULL. syzbot reported: Oops: general protection fault, likely for a non-canonical address 0xdffffc0000000000: 0000 1 S...