Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fixed the programming of HCIUTRLNEXUSTYPE. On the Google gs101, the number of UTP transfer request slots is 32. In this case, the driver incorrectly programs UTRLNEXUSTYPE as 0. This occurs because the left sid...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000919)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000919 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000810)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000810 advisory. Buffer overflow in the picolcdrawevent function in devices/hid/hid-picolcdcore.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000682 advisory. The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to th...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000731 advisory. drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certai...

CVE-2026-0601

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...

CVE-2026-0600

Server-Side Request Forgery SSRF vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network...

UAT-8837 targets critical infrastructure sectors in North America

Cisco Talos is closely tracking UAT-8837, a threat actor we assess with medium confidence is a China-nexus advanced persistent threat APT actor based on overlaps in tactics, techniques, and procedures TTPs with those of other known China-nexus threat actors. Based on UAT-8837's TTPs and...

EUVD-2026-2665

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001898 advisory. Buffer overflow in the picolcdrawevent function in devices/hid/hid-picolcdcore.c in the PicoLCD HID device driver in the Linux kernel through 3.16.3, as used in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002743)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002743 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002249 advisory. arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not prevent...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003293 advisory. The kernel in Android before 2016-08-05 on Nexus 7 2013 devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518. Tenable has...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002175 advisory. arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not prevent...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002364 advisory. The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to th...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001899 advisory. drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certai...

CVE-2026-0600

Server-Side Request Forgery SSRF vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network...

org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.81.0-08 <=3.87.2-01), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-selfhosted (>=3.81.0-08 <=3.87.2-01) +49 more potentially affected by CVE-2026-0601 via org.sonatype.nexus:nexus-extdirect (>=3.10.0-04 <=3.87.2-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.10.0-04, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.4.0-02, =3.60.0-02, =3.4.0-02, =3.21.0-01, =3.12.0-01, =3.4.0-02, =3.12.0-01, =3.4.0-02, =3.57.0-01, =3.23.0-01, =3.87.2-01 and more Source cves: CVE-2026-0601https://vulners.com/cve/C...

Cross-site Scripting (XSS)

Overview org.sonatype.nexus:nexus-extdirect is a Repository Manager. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the request process. An attacker can execute arbitrary JavaScript in the context of a victim's browser by enticing the user to interact with a...

org.sonatype.nexus.api.rest:nexus-api-rest-selfhosted (>=3.81.0-08 <=3.87.2-01), org.sonatype.nexus.assemblies:nexus-base-overlay (>=3.60.0-02 <=3.77.2-02) +49 more potentially affected by CVE-2026-0600 via org.sonatype.nexus:nexus-repository-services (>=3.22.0-01 <=3.87.2-01)

org.sonatype.nexus:nexus-repository-services MAVEN version =3.22.0-01, =3.81.0-08, =3.60.0-02, =3.22.0-01, =3.22.0-01, =3.22.0-01, =3.22.0-01, =3.23.0-01, =3.77.0-08, =0.0.8, =3.22.0-01, =0.0.5, =0.0.2, =3.22.0-01, =0.0.7, =1.0.0, =3.31.1-01 and more Source cves:...