RHSA-2026:3402

creationtimestamp| type| source ---|---|--- 2026-03-30 14:35:01+00:00| seen| https://gist.github.com/fao89/0ef4daafb58f204bb3f4b9361f75d68c 2026-03-30 14:50:35+00:00| seen| https://gist.github.com/fao89/ce009677a07abdc70b85a5ec1d9a9b85...

CERTFR-2026-ACT-013

creationtimestamp| type| source ---|---|--- 2026-03-30 14:17:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mibu44vvge2o 2026-03-30 14:18:00+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116318553525388674 2026-03-31 05:40:09+00:00| seen|...

CVE-2026-4415

creationtimestamp| type| source ---|---|--- 2026-03-30 07:21:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html 2026-03-30 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7z567dw2t 2026-03-30 09:00:30+00:00| seen|...

CVE-2026-3124

creationtimestamp| type| source ---|---|--- 2026-03-30 02:20:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mialzmanvq2c 2026-03-30 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116315889917405260 2026-03-30 03:00:31+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-33748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient...

Public dashboards discloses all direct mode datasources

When using public dashboards and direct data-sources, all direct data-sources’ passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve...

CVE-2026-4176

creationtimestamp| type| source ---|---|--- 2026-03-29 22:10:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mia6244dht22 2026-03-29 22:30:13+00:00| seen| https://infosec.exchange/users/offseq/statuses/116314827160786387 2026-03-29 22:30:15+00:00| seen|...

CVE-2026-0562

creationtimestamp| type| source ---|---|--- 2026-03-29 18:38:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7s7tv2dm2m 2026-03-29 18:40:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7scblyqk24 2026-03-29 19:15:55+00:00| published-proof-of-concept|...

CVE-2026-0560

creationtimestamp| type| source ---|---|--- 2026-03-29 18:35:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi7ryzibeh2n 2026-03-29 18:38:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7s7mjdba2x 2026-03-29 19:15:55+00:00|...

CVE-2026-5035

creationtimestamp| type| source ---|---|--- 2026-03-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116311289174971513 2026-03-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi6mupgw222y 2026-03-29 09:15:18+00:00| seen|...

CVE-2026-5018

creationtimestamp| type| source ---|---|--- 2026-03-29 00:34:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5vn3bhid2s 2026-03-29 01:15:46+00:00| published-proof-of-concept| Telegram/2ZCZ0X-UsuKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY 2026-03-29 01:53:25+00:00| seen|...

CVE-2026-5019

creationtimestamp| type| source ---|---|--- 2026-03-29 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi5tqe2i6u2s 2026-03-29 00:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5tyngws42s 2026-03-29 01:15:46+00:00| published-proof-of-concept|...

CVE-2026-5016

creationtimestamp| type| source ---|---|--- 2026-03-28 23:15:16+00:00| published-proof-of-concept| Telegram/OEmB6HaBO0fT2xWNNxRYZpXvzEjDJ8zEr2b6XyKSAW6N8RA 2026-03-29 00:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5uacyx2q2i 2026-03-29 01:51:50+00:00| seen|...

SUSE CVE-2026-33062

free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The EncodeGroupId function attempts to access array indices 0, 1, 2...

Linux Distros Unpatched Vulnerability : CVE-2026-27877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxi...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0036)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. CVE-2025-61985 - ssh ...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the jwk2key process. An attacker can cause unexpected behavior or application crashes by providing a specially crafted JWK file containing integers where JSON string values are expected. Workaround This...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

DEBIAN-CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...