USN-8604-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

USN-8604-1 linux-azure-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...

CVE-2026-55831 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, hono, cloudwatch-exporter, logstash, conductor-fips, kayenta, pinot, pinot-fips, spark-kubernetes-operator, apache-hop, conductor, camunda, nuxeo, kafbat-ui-fips, celeborn, knative-kafka-broker, kafka-bridge-fips, traccar, seata, logstash-fips,...

CVE-2026-59898 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, hono, cloudwatch-exporter, logstash, conductor-fips, kayenta, pinot, pinot-fips, spark-kubernetes-operator, apache-hop, conductor, camunda, nuxeo, kafbat-ui-fips, celeborn, knative-kafka-broker, kafka-bridge-fips, traccar, seata, logstash-fips,...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, tez, thingsboard...

CVE-2026-56821 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, tez, thingsboard...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, tez, thingsboard...

CVE-2026-56822 vulnerabilities

Vulnerabilities for packages: cassandra, management-api-for-apache-cassandra-5.0, tez, thingsboard...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: spark, akhq, apache-nifi, keycloak, flyway, celeborn, cloudwatch-exporter, thingsboard, strimzi-kafka-operator, druid, wavefront-proxy, kserve-modelmesh, apicurio-registry, logstash, trino, neo4j, opensearch, apache-activemq-artemis, apache-pulsar, infinispan, zipkin...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

SUSE CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

SUSE CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...

CVE-2026-53600 vulnerabilities

Vulnerabilities for packages: zed...

GHSA-89XV-2M56-2M9X vulnerabilities

Vulnerabilities for packages: keep, keep-fips, jitsucom-jitsu, homepage, peerdb-ui, langfuse-fips, langfuse...

PT-2026-64379

Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A double-free issue exists in the sftp open function within src/sftp.c. This occurs when a malicious SSH server responds to SSH FXP OPEN with SSH FXP STATUS containing FX OK, causing the response da...

CVE-2026-61884: Missing Authentication for Critical Function

The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any login. An attacker with network acces...

CVE-2026-55985: Cleartext Storage of Sensitive Information

The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...

CVE-2026-38764

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: spark, akhq, apache-nifi, keycloak, flyway, scala, gradle, apache-tika, cass-config-builder, strimzi-kafka-operator, apache-nifi-registry, wildfly, apicurio-registry, logstash, trino, keycloak-config-cli, opensearch, dependency-track, sonarqube, infinispan,...