Astra Linux – Vulnerability in Thunderbird

The OCSP revocation status of recipient certificates was not checked when sending S/MIME encrypted emails. As a result, revoked certificates were accepted. This bug affected Thunderbird versions from 68 to 102.9.1. This vulnerability affects Thunderbird versions earlier than 102.10...

Astra Linux – Vulnerability in curl

Curl versions 7.41.0 through 7.73.0 are vulnerable to a flaw related to improper checks for certificate revocation, due to insufficient verification of the OCSP response...

WordPress Temporary Login Without Password plugin < 1.9.9 - Authenticated Temporary Access Revocation Bypass vulnerability

Authenticated Temporary Access Revocation Bypass vulnerability discovered by BaptouTatis in WordPress Plugin Temporary Login Without Password versions 1.9.9...

Linux Distros Unpatched Vulnerability : CVE-2026-86231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: strongswan (UTSA-2022-000878)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000878 advisory. strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity and intermediate CA certificate...

echoac-poc

CVE-2023-38817 关于 echo.ac 驱动中发现漏洞的 PoC 与详细分析。 CVE 信息 编号：CVE-2023-38817 厂商：Inspect Element Ltd 13017981，以 Echo 名义运营。 受影响产品：echo.ac 反作弊扫描工具。 受影响版本：echo.ac - 5.2.1.0，echodriver.sys - 所有已发布版本。 受影响操作系统：从 Windows 7 到 Windows 11 的 64 位 Windows 版本。 缓解措施：不要使用该软件，并将驱动签名加入黑名单。 证书已吊销 微软已将 Echo...

CVE-2026-77753 Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753 Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753

The Temporary Login Without Password WordPress plugin versions prior to 1.9.9 contains an authenticated temporary access revocation bypass. The plugin fails to prevent temporary users from creating Application Passwords and does not revoke these credentials once the temporary access expires or is...

EUVD-2026-76810

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

Exploit for Improper Privilege Management in Echo Anti_Cheat_Tool

!image-removebg-preview1https://github.com/kite03/echoac-poc/...

PT-2026-90562

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

Linux Distros Unpatched Vulnerability : CVE-2026-89660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. Th...

CVE-2026-89663

A flaw was found in the Linux kernel's Network File System Daemon nfsd. This vulnerability arises from improper handling of "copy-notify stateids" during their revocation. When a stateid's reference is dropped without unlinking it, the memory can be freed while still in use by a reader, leading t...

CVE-2026-89660

A flaw was found in the Linux kernel's Network File System Daemon NFSD. This vulnerability, a use-after-free, occurs during the revocation of client administrative states. A race condition can allow a client's memory to be freed prematurely while still being referenced, potentially leading to...

CVE-2026-89660

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. The client survives only because destroyclient drains its stateids befo...

DEBIAN-CVE-2026-89660

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. The client survives only because destroyclient drains its stateids befo...

CVE-2026-89660

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. The client survives only because destroyclient drains its stateids befo...

UBUNTU-CVE-2026-89660

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4client; a stateid reference does not pin it. The client survives only because destroyclient drains its stateids befo...

CVE-2026-89764 rust: devres: fix race between concurrent revokers

In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently. The driver core's devresreleaseall calls Revocable::revoke via the release callback, while...