CVE-2026-88275: Improper Neutralization of Special Elements used in an OS Command

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled WPA-PSK containing shell syntax to execute arbitrary commands as root when wireless configuration is applied...

erlang: Erlang/OTP: Denial of Service in TLS 1.3 session ticket handling

A flaw was found in Erlang/OTP's SSL Secure Sockets Layer application. An unauthenticated remote attacker can send a specially crafted ClientHello message to a TLS 1.3 server with session tickets enabled. This can permanently disrupt the server's ability to handle session tickets, leading to a...

SUSE CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

PT-2026-79388

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...

CVE-2026-77812: Missing Encryption of Sensitive Data

DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...

Linux Distros Unpatched Vulnerability : CVE-2026-23937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity. CVE-2026-23937...

CVE-2026-66781

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

CVE-2026-66781

The Submariner operator for Kubernetes multi-cluster networking stores the IPsec pre-shared key (PSK) in unencrypted (cleartext) format within the Submariner Custom Resource (CR) spec. This key is critical for securing communication between clusters in the mesh. An attacker with local access to t...

CVE-2026-66781 Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

EUVD-2026-61065

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

CVE-2026-66781

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

DEBIAN-CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

CVE-2026-23937 Host PSK extraction in Zabbix API

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

CVE-2026-23937

The Zabbix API host.get action allows authenticated users to extract a host's PSK key. With low privileges and network access, an attacker can compromise the pre-shared key used for TLS connections, enabling potential data integrity attacks (CVSS 6.0 MEDIUM, VI:H). The Zabbix Jira ticket ZBX-2807...

EUVD-2026-60740

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

CVE-2026-23937: Observable Discrepancy

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

PT-2026-76962

Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description Authenticated users can exploit the 'host.get' API endpoint to extract a host's PSK Pre-Shared Key key, which may result in a loss of data integrity. Recommendations At the moment, there is no...

SUSE-SU-2026:22895-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...