ROOT-OS-DEBIAN-12-CVE-2026-6429 CVE-2026-6429 in curl - Patched by Root

Root has patched CVE-2026-6429 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-10966 CVE-2025-10966 in curl - Patched by Root

Root has patched CVE-2025-10966 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-4873 CVE-2026-4873 in curl - Patched by Root

Root has patched CVE-2026-4873 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-8927 CVE-2026-8927 in curl - Patched by Root

Root has patched CVE-2026-8927 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-15079 CVE-2025-15079 in curl - Patched by Root

Root has patched CVE-2025-15079 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-1965 CVE-2026-1965 in curl - Patched by Root

Root has patched CVE-2026-1965 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41007 CVE-2026-41007 in org.springframework.hateoas:spring-hateoas - Patched by Root

Root has patched CVE-2026-41007 in the org.springframework.hateoas:spring-hateoas package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41006 CVE-2026-41006 in org.springframework.hateoas:spring-hateoas - Patched by Root

Root has patched CVE-2026-41006 in the org.springframework.hateoas:spring-hateoas package for Root:Maven. Multiple fixed versions available...

CVE-2026-53555: Improper Neutralization of Input During Web Page Generation

SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, an authenticated uploader can submit an image/svg+xml assistant UI logo through PATCH /api/v1/system/assistant/ui, and SQLBot stores the SVG without sanitizing or validating embedded active content...

Linux Distros Unpatched Vulnerability : CVE-2026-61642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - squid - None Ubuntu Linux - Request Smuggling in HTTP Transfer-Encoding CVE-2026-61642 Note that Nessus relies on the presence of the package as...

SUSE-SU-2026:23791-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

ShieldCrash

ShieldCrash Vulnerabilidad 0day de Windows Defender Microsoft no ha logrado parchear correctamente ShieldBreak CVE-2026-69414; bajo condiciones específicas, todavía es posible desencadenar exactamente el mismo problema que causó ShieldBreak. Aunque Microsoft corrigió varias cosas para evitar...

Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.184 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on devic...

ROOT-OS-DEBIAN-12-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:12. Multiple fixed versions available...

Insufficient Session Expiration

Overview apache-airflow-providers-fab is a Provider package apache-airflow-providers-fab for Apache Airflow Affected versions of this package are vulnerable to Insufficient Session Expiration in the Admin user-edit PATCH process. An attacker can maintain unauthorized access by reusing a previousl...

ROOT-OS-DEBIAN-11-CVE-2026-63384 CVE-2026-63384 in libevent - Patched by Root

Root has patched CVE-2026-63384 in the libevent package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-86462

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie keeps full access as that user after the password change, so th...

CVE-2026-86462

The apache-airflow-providers-fab package is vulnerable to insufficient session expiration when using the FAB auth manager with database-backed sessions. Specifically, updating a user's password via the Admin user-edit PATCH endpoint fails to invalidate existing database-backed sessions. This allo...

CVE-2026-86462 Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie keeps full access as that user after the password change, so th...