CVE-2026-18358

Affects gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon runs in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP...

EUVD-2026-51528

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication...

CVE-2026-18358 Gnome-remote-desktop: gnome-remote-desktop system-mode rdp server missing connection throttling allows unauthenticated denial of service

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication...

CVE-2026-18217

CVE-2026-18217 affects Keycloak’s SAML protocol implementation, specifically when handling SAML authentication requests via HTTP-Redirect binding with wildcard redirect URLs. The root cause is a query-string handling flaw that allows an attacker to craft a request whose parameters are preserved a...

TLS-Attacker v7.0.0-rtc

TLS-Attacker TLS-Attacker is a Java-based framework for analyzing TLS libraries. It is able to send arbitrary protocol messages in an arbitrary order to the TLS peer, and define their modifications using a provided interface. This gives the developer an opportunity to easily define a custom TLS...

CVE-2026-62323 Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does not enforce the requested viewer action, allowing a malicious or compromised WOPI viewer with a view session to forge the token...

CVE-2026-6889

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

EUVD-2026-51382

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the connection handler process when processing BER-encoded request data. An attacker can cause the service process to terminate by sending a specially crafted MMS confirmed request PDU containing an extended BER ta...

SUSE CVE-2026-11719

An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol...

SUSE CVE-2026-17733

Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-51362

A crafted IEC 60870-5-104 I-frame with TypeID 104 CTSNA1 and an inflated object count causes TestCommandgetFromBuffer to read one byte past the end of the heap-allocated message buffer...

EUVD-2026-51339

The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer...

PT-2026-66770

Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrementing the IPv6 hop limit. Both routing branches of ipv6 route packet subsys/net/ip were affected: the explicit-route path net route packet and the on-link cross-interface path net route packet if. Each set the packet...

PT-2026-66725

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the keycloak-services component of Keycloak regarding OpenID Connect OIDC authentication flows. The security check intended to prevent HTTP parameter pollution—a technique...

PT-2026-66669

A denial of service vulnerability in the Advantech ECU-1251D allows a network-adjacent attacker to send a DNP3 signal to the Digital Output address of the device, causing the DNP3Daemon to invoke a non-existent system file and enter an indefinite restart loop. While the device remains partially...

SUSE SLES15 Security Update : kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3393-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3393-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: -...

Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module and Ethernet module Improper Resource Shutdown or Release (CVE-2026-1876)

Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a remote attacker to cause a denial- of-service DoS condition on the products by continuously sending UDP packets to the products. ...

ALSA-2026:49212 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 kernel: tipc: fix double-free in tipcbufappend CVE-2026-52993 kernel: net: sched: UAF via missing handler for TCACTCONSUM...

PT-2026-66781

Name of the Vulnerable Software and Affected Versions LightFTP version 2.3.1 Description A race condition exists in the worker thread cleanup function of ftpserv.c. This occurs when remote unauthenticated attackers trigger unsynchronized access to shared per-connection state without the required...