The vulnerability of the libssh2_publickey_listFetch() function in the libssh2 library allows a hacker to trigger a denial-of-service attack.

The vulnerability of the libssh2publickeylistFetch function in the libssh2 library is related to the use of uninitialized resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the UEFI Secure Boot protection mechanism in Windows operating systems allows a hacker to circumvent security restrictions and execute arbitrary code.

The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to a component that cannot be updated. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary code...

PT-2026-55212

Name of the Vulnerable Software and Affected Versions wetty versions prior to 3.0.4 Description The wetty client improperly handles file-download escape sequences by decoding a base64 filename and interpolating it directly into a Toastify HTML string without escaping. An attacker can deliver a...

CVE-2026-14103

Use after free in SSL in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Accelerating the quantum-safe timeline

The quantum-safe timeline has changed For years, planning for post-quantum cryptography PQC was framed as a future problem: important, inevitable, but distant. That perspective is evolving as technology advances and organizations prepare for the scale and complexity of the transition ahead. At...

CVE-2026-27957 Coolify: Authenticated RCE via command injection in CA certificate management feature

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, an authenticated command injection vulnerability in the CA Certificate management feature allows any authenticated user to execute arbitrary commands as the configured SSH...

CVE-2026-27957

CVE-2026-27957 affects Coolify prior to 4.0.0-beta.464, where an authenticated command-injection in the CA Certificate management feature lets any authenticated user run arbitrary commands as the configured SSH user on the managed host. This typically enables full compromise of the managed server...

ruby/net-imap: ruby: Net::IMAP: Denial of Service via large iteration count in SCRAM authentication

A flaw was found in Net::IMAP, a Ruby library for Internet Message Access Protocol IMAP client functionality. A hostile server can exploit this vulnerability during SCRAM-SHA1 or SCRAM-SHA256 Salted Challenge Response Authentication Mechanism - Secure Hash Algorithm 1 or 256 authentication by...

OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents

Melbourne, Florida, 30th June 2026, CyberNewswire...

SUSE-SU-2026:2715-1 Security update for podman

This update for podman rebuilds it against the current go security release. - CVE-2026-34986: Update github.com/go-jose/go-jose/v3+v4 dependency bsc1262856. - CVE-2026-39829, CVE-2026-39830, CVE-2026-42508, CVE-2026-46598: Update golang.org/x/crypto/ssh dependency bsc1266125...

Security update for buildah

This update for buildah fixes the following issues CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files bsc1267179. CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input...

EUVD-2026-40275

PROMOD V is using insecure HTTP communication instead of HTTPS. The vulnerability is due to the lack of HTTPS support from 3rd party Digipede server...

CVE-2026-10763

PROMOD V uses insecure HTTP due to missing HTTPS support from a 3rd party Digipede server. Concrete details available: the issue is a lack of HTTPS causing exposure over network. CVSS metrics indicate HIGH confidentiality impact and overall HIGH severity (7.0). Exploitation specifics, affected ve...

Security update for podman

This update for podman fixes the following issues CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service bsc1262856. CVE-2026-39829,CVE-2026-39830,CVE-2026-42508,CVE-2026-46598:...

SUSE CVE-2026-58051

libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves libssh2publickeylistfree operating on an uninitialized entry. A malicious SSH server offering the publickey...

Malicious code in polymarket-clob-maths (npm)

Malicious npm package published as part of a coordinated DeFi-themed infostealer campaign targeting Polymarket developers. polymarket-clob-maths uses a dropper technique: a postinstall hook fetches a remote bundle from trabalhos-flax.vercel.app and executes a syncSession function that runs a...

Oracle Linux 9 : perl-Archive-Tar (ELSA-2026-30856)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30856 advisory. - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 8 : perl-Archive-Tar (ELSA-2026-30852)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-30852 advisory. - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Fixes CVE-2018-12015 directory traversal bug 1588761 Tenable has extracted...

The vulnerability of the Remote Access SSL VPN microprogramming-based network interface device from Cisco Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) allows a attacker to cause a service outage.

The vulnerability of the Remote Access SSL VPN microprogramming network interface layer software developed by Cisco Adaptive Security Appliance ASA and Cisco Secure Firewall Threat Defense FTD is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious...

Oracle Linux 9 : nginx:1.24 (ELSA-2026-28212)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28212 advisory. - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Cod...