CVE-2026-13067 tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

CVE-2026-13067

Technical details for CVE-2026-13067 are not publicly available in the provided documents; monitor for updates.

tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

EUVD-2026-47768

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request...

CVE-2026-3482 IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request...

CVE-2026-59886

creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...

CVE-2026-49499

creationtimestamp| type| source ---|---|--- 2026-07-22 17:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrasdwoxi72x 2026-07-22 17:13:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrat3ihjvi2q 2026-07-23 15:19:43+00:00| seen|...

CVE-2026-13321

creationtimestamp| type| source ---|---|--- 2026-07-22 16:47:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u 2026-07-22 16:49:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrarpynzcg2x 2026-07-22 19:01:40+00:00| seen|...

CVE-2026-16606

creationtimestamp| type| source ---|---|--- 2026-07-22 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrark2prqu2z 2026-07-22 17:34:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraub43hdv2a 2026-07-23 04:00:57+00:00| seen|...

CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in...

CVE-2026-13181

creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b 2026-09-08 22:20:02+00:00| seen|...

SUSE CVE-2026-55851

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to but not including 4.2.16.Final, and 4.1.0.Final up to but not including 4.1.135, the HAProxyMessageDecoder in Netty's codec-haproxy module performs protocol version detection by...

CVE-2026-7328

CVE-2026-7328 concerns Caliptra Core Runtime Firmware (2.1.0) and reports missing authorization in subsystem mode for INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, and EXTERNAL_MAILBOX_CMD commands. This allows a privileged local attacker to trigger a denial-of-service via mailbox commands that con...

MINI-JHCX-7R22-5CP6

Bulletin has no description...

CVE-2026-40712

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-14985

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script...

CVE-2026-60785

creationtimestamp| type| source ---|---|--- 2026-07-22 15:05:10+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mralvna2i52l 2026-07-22 15:05:12+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116964242921793174 2026-07-23 17:47:02+00:00| seen|...

CVE-2026-14985

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script...

CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

ALPINE-CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...