PT-2026-95292

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description The search functionality contains a Server-Side Request Forgery SSRF flaw. This allows an attacker to compel the application server to transmit requests to internal...

PT-2026-95348

Name of the Vulnerable Software and Affected Versions T-Systems TAO 2.0 affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the profile management functionality. An authenticated user can inject malicious HTML or JavaScript into personal data fields. This...

CVE-2026-67101: Server-Side Request Forgery (SSRF)

HCL BigFix Service Management is affected by a Server-Side Request Forgery SSRF vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet...

CVE-2026-93658: Improper Preservation of Permissions

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with...

UBUNTU-CVE-2026-53534

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...

CVE-2026-53534 JabRef CAYW Sublime Text integration permits operating-system command injection

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...

CVE-2026-54604

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

PT-2026-95135

Name of the Vulnerable Software and Affected Versions JabRef versions prior to 6.0-alpha.6 Description JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. When the built-in HTTP server or jabsrv is enabled, the 'GET /better-bibtex/cayw' endpoint accepts an external command...

SUSE CVE-2026-18938

A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to...

Securing the unpatchable in an age of AI-driven vulnerabilities

AI is accelerating vulnerability discovery, leaving unpatchable operational technology OT systems at risk. Hoping for the best is not a viable anti-exploitation strategy. Deploying next-generation firewalls directly upstream allows for virtual patching through deep packet inspection. These system...

GHSA-M7FF-3HM8-6QXH vulnerabilities

Vulnerabilities for packages: strongswan...

CVE-2026-85478

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...

CVE-2026-81305

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:28+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...

CVE-2026-84398

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...

CVE-2026-62652

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:16+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...

CVE-2026-62650

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:14+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...

CVE-2026-62648

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...

CVE-2026-78225

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:50+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02 2026-09-16 04:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvmbbxn7xj24 2026-09-16 08:10:04+00:00| seen|...

CVE-2026-82567

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03 2026-09-15 20:04:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlgavpft22p...

CVE-2026-73807

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03 2026-09-15 20:04:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlgavpft22p 2026-09-16 00:00:39+00:00| seen|...