CVE-2026-87013

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:38+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-8r35-5x5r-hv74 2026-09-11 15:31:47+00:00| seen| https://gist.github.com/alon710/b936d0e8b1b08a24ad813407363272e8...

CVE-2026-88017

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:23+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77 2026-09-11 11:09:30+00:00| seen| https://gist.github.com/alon710/bdeb340c6c170113e47b6e3cbfb5203b 2026-09-11 16:00:46+00:00|...

CVE-2026-88015

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:16+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-p6m2-r3w9-mpxw...

CVE-2026-88016

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:14+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-f8g7-2xjc-7mfh 2026-09-11 16:00:46+00:00| seen|...

CVE-2026-88014

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:12+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-66hp-wgxq-6f5q...

CVE-2026-88009

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:10+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-f52w-8j3h-j724 2026-09-15 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvk66pn6222v...

CVE-2026-88004

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:05+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-v67p-phpq-fc8x...

CVE-2026-88008

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:03+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-w4v4-9rw7-5326...

EUVD-2026-75763

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

EUVD-2026-75802

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...

EUVD-2026-75800

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner...

EUVD-2026-75801

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

EUVD-2026-75803

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization...

image-builder security update

72.0.0-1.0.2 - Rebuid to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33810, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...

OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media

These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-79395

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

EUVD-2026-76192

An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...

Fedora 43 : libevent (2026-728dd9f704)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-728dd9f704 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

Fedora 45 : libevent (2026-0a83f1b852)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0a83f1b852 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

openSUSE 16: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (openSUSE-SU-2026:21810-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21810-1 advisory. - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Doma...