com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +34 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (17.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0,...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=1.1.0-22.0.1, <=1.3.2-22.0.1), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=1.1.0-22.0.1, <=1.3.2-22.0.1) +73 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (22.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =1.1.0-22.0.1,...

org.fintrace:keycloak-event-receiver-common (0.0.1), org.fintrace:keycloak-event-receiver-http (0.0.1) +11 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.0.0.beta1)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.fintrace:keycloak-event-receiver-common 0.0.1 -...

org.keycloak:keycloak-authz-policy-common (4.0.0.beta2), org.keycloak:keycloak-dependencies-server-min (4.0.0.beta2) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.0.0.beta2)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.0.0.beta2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.3-23.0, <=2.5.5-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.3-23.0, <=2.5.5-23.0) +66 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.7)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.3-23.0, =2.5.3-23.0,...

fr.cnieg.keycloak:attribute-login-provider (1.4.1), org.keycloak:keycloak-adapter-core (23.0.5) +46 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.1 -...

org.keycloak:keycloak-authz-policy-common (2.5.0.final), org.keycloak:keycloak-authz-policy-drools (2.5.0.final) +12 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (2.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.final -...

com.charlyghislain.keycloak:keycloak-importexport (23.0.1), fr.cnieg.keycloak:attribute-login-provider (1.3.13) +62 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 23.0.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +35 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (25.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0,...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +37 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (15.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12,...

KMW CCTV Security Cameras

ADVISORY SUMMARY Successful exploitation of this vulnerability may grant full unauthorized access to camera feeds and settings. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeuphttps://heyitsas.im/post...

SUSE CVE-2025-71312

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix ntfsmountoptions leak in ntfsfillsuper In ntfsfillsuper, the fc-fsprivate pointer is set to NULL without first freeing the memory it points to. This causes the subsequent call to ntfsfsfree to skip freeing the...

Incorrect Authorization

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Incorrect Authorization via the user-facing APIs when the Organizations feature is disabled. An...

kernel: mm/page_alloc: clear page->private in free_pages_prepare()

A flaw was found in the Linux kernel's memory management subsystem. When pages are freed, the page-private field is not properly cleared. If these pages are later reallocated as high-order pages and split, the tail pages can retain stale page-private values. This can lead to a use-after-free...

kernel: mm/page_alloc: clear page->private in free_pages_prepare()

A flaw was found in the Linux kernel's memory management subsystem. When pages are freed, the page-private field is not properly cleared. If these pages are later reallocated as high-order pages and split, the tail pages can retain stale page-private values. This can lead to a use-after-free...

cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification ECDSA and...

Malicious code in @cloudplatform-single-spa/ml-foundation-models (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

PT-2026-44406

Name of the Vulnerable Software and Affected Versions InHand Networks IR302 versions prior to V3.5.108 InHand Networks IR305 versions prior to V1.0.118 InHand Networks IR315 versions prior to V1.0.118 InHand Networks IR615 versions prior to V1.0.118 Description A command injection issue exists in...

MAL-2026-4946 Malicious code in @cloudplatform-single-spa/ml-inference-marketplace (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...