PT-2026-63381

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.6.2 through 1.25.1 Description When configured with the respip module before the validator, along with a response-ip redirect rule or an RPZ file using an RPZ-IP trigger, the rewriting handler fails to verify the...

Flask-Security-Too OAuth Verification Bypass

The vulnerability of the oauthverifyresponse function in the flasksecurity/oauthglue.py file, a part of the Flask-Security-Too security management tool, is related to vulnerabilities in the authentication process. Exploiting this vulnerability could allow an attacker to circumvent security...

Debian dsa-6395 : bind9 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6395 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6395-1 [email protected] https://www.debian.org/securit...

PT-2026-63376

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.13.2 through 1.25.1 Description An off-by-one error exists in the harden-below-nxdomain logic, which is enabled by default. This issue occurs when stub or forward zones are located below an intermediate label that...

PT-2026-63563

Name of the Vulnerable Software and Affected Versions Next.js versions 12.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description A server-side fetch operation involving a request body may return a cached response body from a separate request directed to the same URL but containin...

PT-2026-63382

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description An issue exists where an auth/rpz zone with a configured primary hostname that resolves to BOGUS A/AAAA records is still treated as a potential XFR endpoint. XFR Zone Transfer is a...

PT-2026-68796

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.53 Traefik versions prior to 3.6.24 Traefik versions prior to 3.7.9 Description Traefik's default HTTP reverse proxy forwards HTTP/2 or HTTP/3 CONNECT requests and their bodies to HTTP/1.1 upstreams using a share...

PT-2026-63385

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.25.0 through 1.25.1 Description A memory corruption issue exists when the software is under pressure and configured with an access-control-view and either the respip or rpz modules, alongside a module capable of...

CVE-2026-50243: Use of Less Trusted Source

In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with an RPZ-IP trigger, the rewriting handler does not check the security status of the upstream answer...

CVE-2026-13070: NULL Pointer Dereference

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...

PT-2026-63544

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the OcspServerCertificateValidator where out-of-date OCSP Online Certificate Status Protocol responses are flagged but not stopped from...

PT-2026-63389

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.23.0 through 1.25.1 Description When the dns-error-reporting: yes setting is enabled, the software incorrectly processes the EDNS Report-Channel option code 18 from upstream responses. Specifically, it uses the...

TencentOS Server 3: httpd:2.4 (TSSA-2026:0732)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0732 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

RockyLinux 8 : glibc (RLSA-2026:42733)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42733 advisory. glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings CVE-2026-5928 glibc: glibc:...

attackgen v0.14.0

AttackGen AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK and ATLAS frameworks. The tool generates tailored incident response scenarios based on user-selected threat actor groups, AI attack case...

CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-63975

A flaw was found in the Bluetooth L2CAP Logical Link Control and Adaptation Protocol component of the Linux kernel. When a device receives a connection response with an already-assigned destination Channel Identifier CID, the system may crash. This occurs because the kernel's procedure for...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

Gitea: Webhook Authorization Header Returned in Plaintext via API

Summary The ToHook function in services/webhook/general.go decrypts the webhook's HeaderAuthorizationEncrypted field and returns the plaintext authorization header in the API response. Any repository admin can read the full plaintext value of webhook authorization headers Bearer tokens, Basic aut...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the DeleteIssueLabel function. An attacker can determine the existence of label IDs across repositories, including those they do not have access to, by observing differing HTTP respon...