Updated kbd packages fix a security vulnerability

Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login. CVE-2026-72693...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a passwordless zero-knowledge authentication system that proves you're authorized without revealing who you are. Authenticate using only your fingerprint + 24-word recovery...

Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15949 Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit Resumen Existe una vulnerabilidad en Nagios XI = 5.6.5 que permite a un atacante aprovechar un RCE para escalar privilegios a root. El exploit requiere acceso al servidor como el usuario 'nagios', o acceso CCM a través de la interfaz web con permisos para administrar plugins...

SUSE SLED15 / SLES15 Security Update : kbd (SUSE-SU-2026:4211-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4211-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect...

SUSE SLES15 Security Update : kbd (SUSE-SU-2026:4207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4207-1 advisory. This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner...

SUSE-SU-2026:4211-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

EUVD-2026-78402

Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...

CVE-2026-46619

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN value into an LDAP search filter without escaping, while the default empty trusted-gateway list allows all traffic. In a...

CVE-2026-46619

OpenAM Community Edition (through 16.0.6) contains an LDAP injection (CWE-90) in the MSISDN authentication module . The request-supplied MSISDN value is concatenated into an LDAP search filter without escaping, and the default empty trusted-gateway list permits all traffic. An unauthenticated rem...

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

EUVD-2026-72848

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

PT-2026-87114

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

CVE-2026-79577

sso-master v1.0.0 is vulnerable in its /cas/login component, where a crafted POST request allows an attacker to authenticate without a password (credential bypass / improper access control, per Rapid7). CISA's SSVC assessment rates the exploitation level as POC , automatable as yes , and technica...

CVE-2026-79576

The Digital-Infrastructure v9.6.7 software contains a vulnerability in its Single-Sign On (SSO) component. This flaw allows an attacker to bypass authentication and log in as any user, including the Admin , without providing a password. While the impact is significant, specific root cause details...

PT-2026-87101

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...