CVE-2026-96740

A vulnerability exists in the StreamsHub Console for Apache Kafka where tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient configuration without filtering security-sensitive keys. This flaw allows a Console CR author to set config....

ROS-20260928-73-0014

The vulnerability of the kssarnginit function in the drivers/char/hwrandom/ks-sa-rng.c file of the Linux kernel is related to zero-division errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-102407

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.1 Description The software fails to validate the sysType field within sa-token sessions. This allows storefront customers to authenticate as back-office users by reusing their session tokens. An attacker can register...

Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-76460 Please see the included Cisco BIDs and Cisco Security Adviso...

PT-2026-94954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...

Astra Linux – Vulnerability in sysstat

Before version 12.1.6, sysstat experienced memory corruption due to an integer overflow in the remapstruct function within sacommon.c...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...

HPESBHF05102 rev.1 - HPE ProLiant DL/ML, Alletra, MicroServer, Edgeline and Synergy Server Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4140 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4120 - Prior to BIOS v3.0008-20-2026 HPE Alletra 4110 - Prior to BIOS v3.0008-20-2026 HP...

UBUNTU-CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

PT-2026-89742

Name of the Vulnerable Software and Affected Versions strongSwan versions 5.9.7 through 6.0.7 Description The libcharon component mishandles the behavioral workflow within the IKEv2 state machine. This improper handling of CREATE CHILD SA requests can lead to an authentication bypass...

MAL-2026-15934 Malicious code in dbt-sa-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a setup.py defines rcepoc and invokes it at module top level, so the code runs unconditionally during pip install dbt-sa-cli. The function collects...

Malicious code in dbt-sa-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3fc52d1baa65bd51dd9659641f0df237ea2a595358cd91b19fd8988ba3236a setup.py defines rcepoc and invokes it at module top level, so the code runs unconditionally during pip install dbt-sa-cli. The function collects...

EUVD-2026-71295

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then acquires x-lock, which conflicts with the delete path taking the same loc...

Malicious Package

Overview dbt-sa-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Linux Distros Unpatched Vulnerability : CVE-2026-80845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: avoid lock inversion in nat keepalive work natkeepalivework walks the state table while xfrmstatewalk holds net-xfrm.xfrmstatelock. Its callback then...

HPESBHF05109 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01437, Intel Intel UEFI Firmware Advisory, Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Storage File Controller - Prior to BIOS v3.7008-19-2026 U32 ROM Family HPE Storage Performance File Controller - Prior to BIOS v3.7008-19-2026 U32 ROM Family HPE StoreEa...

CVE-2026-76757

A security issue exists in Drupal Gammu SMS Daemon versions .*. , which has been identified as Improper Restriction of Operations within the Bounds of a Memory Buffer . The project is currently marked as unsupported , and the vulnerability remains unaddressed by the maintainer. There is no inform...

CVE-2026-65931

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...