Oracle Linux 10 : edk2 (ELSA-2026-18465)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18465 advisory. - Resolves: RHEL-134956 CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution rhel-10.2 - Resolves: RHEL-115880 CVE-2025-9230...

Security update for nasm (low)

openSUSE security update: security update for nasm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21333-1 Rating: low References: bsc1261985 bsc1261986 Cross-References: CVE-2026-6067 CVE-2026-6068 CVSS scores: CVE-2026-6067 SUSE : 3.3...

Security update for patch (low)

openSUSE security update: security update for patch ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21332-1 Rating: low References: bsc1271166 bsc1271167 Cross-References: CVE-2026-56288 CVE-2026-56289 CVSS scores: CVE-2026-56288 SUSE : 3.3...

Security update for go1.26-openssl (important)

openSUSE security update: security update for go1.26-openssl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21321-1 Rating: important References: bsc1245878 bsc1255111 bsc1264395 bsc1271014 bsc1271015 Cross-References: CVE-2026-39822 CVE-2026-42505...

CVE-2026-48322

creationtimestamp| type| source ---|---|--- 2026-07-14 23:15:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndlgi7gn24 2026-07-14 23:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndm2hgox2b 2026-07-16 04:37:06+00:00| seen|...

CVE-2026-48319

creationtimestamp| type| source ---|---|--- 2026-07-14 23:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t 2026-07-14 23:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g 2026-07-16 08:07:06+00:00| seen|...

CVE-2026-48325

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27 2026-07-14 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v 2026-07-16 06:07:06+00:00| seen|...

CVE-2026-48284

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndewdlkw2w 2026-07-14 23:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnds5jgt227 2026-07-16 04:07:06+00:00| seen|...

CVE-2026-13001

creationtimestamp| type| source ---|---|--- 2026-07-14 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnd5rawin2v 2026-07-15 00:00:30+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqng36zng626 2026-07-15 06:27:48+00:00| seen|...

CVE-2026-48321

creationtimestamp| type| source ---|---|--- 2026-07-14 23:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnd36x7a725 2026-07-14 23:14:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndikflja2h 2026-07-16 06:37:07+00:00| seen|...

CVE-2026-50130

creationtimestamp| type| source ---|---|--- 2026-07-14 23:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncqrzxsk2a 2026-07-15 00:16:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngxrbyxq2l 2026-07-27 09:04:38+00:00| seen|...

CVE-2026-59733

creationtimestamp| type| source ---|---|--- 2026-07-14 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncqefi572b 2026-07-15 00:34:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnhy5ivbc2q 2026-07-18 05:37:06+00:00| seen|...

CVE-2026-48327

creationtimestamp| type| source ---|---|--- 2026-07-14 22:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnchrpcwo2e 2026-07-14 23:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpo57ko24 2026-07-15 10:30:27+00:00| seen|...

CVE-2026-48318

creationtimestamp| type| source ---|---|--- 2026-07-14 22:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbzueboc2x 2026-07-14 23:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndexprug24 2026-07-15 07:30:28+00:00| seen|...

CVE-2026-15773

creationtimestamp| type| source ---|---|--- 2026-07-14 22:16:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnaaxfcay2b 2026-07-14 23:38:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqneuoukdt2x 2026-07-15 19:46:03+00:00| seen|...

JLSEC-2026-700 Out-of-bounds heap read during SM2/SM3 certificate signature verification

Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65...

JLSEC-2026-701

In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation. The server could incorrectly accept the CertificateVerify message before the ClientKeyExchange message had been received. This issue affects wolfSSL before 5.8.4 wolfSSL 5.8.2 and earlier is...

JLSEC-2026-714

Two potential heap out-of-bounds write locations existed in DecodeObjectId in wolfcrypt/src/asn.c. First, a bounds check only validates one available slot before writing two OID arc values out0 and out1, enabling a 2-byte out-of-bounds write when outSz equals 1. Second, multiple callers pass...

EUVD-2026-44429

A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...

CVE-2026-15749 mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcpC2d. Performing a manipulation of the argument filePath results in path traversal. The attack requires a local...