Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kprobes: The posthandler of aggrprobe is cleared in the case where kprobe-on-ftrace is used. In unregisterkprobetop, if the currently unregistered probe has a posthandler, but other child probes of aggrprobe do not have a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...

Astra Linux – Vulnerability in PHP 7.3, PHP 8.1

In PHP versions 8.1. before 8.1.30, and 8.2. before 8.2.24, as well as 8.3. before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could result in legitimate data not being processed. This could allow malicious attackers to control a portion of the submitted dat...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed the issue of waiting for block writeback in the postread case. If the inode is compressed but not encrypted, the function f2fswaitonblockwriteback was not called properly, resulting in waiting for the page writebac...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: espintcp: A race condition in espintcpclose has been fixed. This issue was discovered during a code audit. After espintcpclose is called, espintcptxwork can still be scheduled using functions like the Delayed ACK handler or...

Astra Linux – Vulnerability in Tomcat9

An incorrect authorization vulnerability in Apache Tomcat’s FORM authentication process allows for bypassing a security constraint that restricts users’ access to resources via POST requests, but not via GET requests. This issue affects Apache Tomcat versions from 11.0.0-M1 through 11.0.24, from...

CVE-2026-90895

creationtimestamp| type| source ---|---|--- 2026-09-14 10:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gnucz5ojyf4fj...

WordPress MDJM Event Management plugin < 1.7.8.5 - Unauthenticated Arbitrary Post Deletion vulnerability

Unauthenticated Arbitrary Post Deletion vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile DJ Manager versions 1.7.8.5...

CVE-2026-90692

creationtimestamp| type| source ---|---|--- 2026-09-14 08:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhndce6h72w 2026-09-14 08:07:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvhnq6sty52f...

CVE-2026-89711

creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjzafa762p...

CVE-2026-89709

creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjyyvchj23...

CVE-2026-90618

creationtimestamp| type| source ---|---|--- 2026-09-14 04:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e5xqgx62uyt2x...

CVE-2026-74933

creationtimestamp| type| source ---|---|--- 2026-09-14 04:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvh7xgp6nf2b...

CVE-2026-88802

creationtimestamp| type| source ---|---|--- 2026-09-14 04:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvh7wy357f2s...

CVE-2026-16693

creationtimestamp| type| source ---|---|--- 2026-09-14 01:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117266763143792683 2026-09-14 01:20:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvgwygqgus2x...

CVE-2026-90603

creationtimestamp| type| source ---|---|--- 2026-09-14 00:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ghodfwgv6plhu...

CVE-2026-15891

creationtimestamp| type| source ---|---|--- 2026-09-14 00:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgsixcvrl23 2026-09-14 04:40:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvhc4pj35523...

VulnCheck KEV: CVE-2026-23536

A security issue was discovered in the Feast Feature Server's /read-document endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a specially crafted HTTP POST request, an attacker can bypass intended access restrictions to...

PT-2026-91238

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

TencentOS Server 4: util-linux (TSSA-2026:0999)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0999 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...