Linux Distros Unpatched Vulnerability : CVE-2026-67237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or...

PT-2026-99084

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description Unsanitized option labels are rendered as raw HTML without escaping in the configuration dialogs of AI Agents within the admin UI. An attacker can inject arbitrary HTML and JavaScript by controlling a...

PT-2026-98926

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.18 RabbitMQ versions 4.0.x prior to 4.0.24 RabbitMQ versions 4.1.x prior to 4.1.15 RabbitMQ versions 4.2.x prior to 4.2.10 RabbitMQ versions 4.3.x prior to 4.3.5 Description RabbitMQ Management renders an...

Linux Distros Unpatched Vulnerability : CVE-2026-67421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP...

Linux Distros Unpatched Vulnerability : CVE-2026-67239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in...

SUSE CVE-2026-66077

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6, The management UI uses EJS 1.0 in which does NOT HTML-escape. connection.ejs:135 renders and peercertissuer directly into the page. The same pattern appears in streamConnection.ejs:102,106,110. The...

SUSE CVE-2026-88804

An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI, in SUSE Rancher 2.15 before 2.15.2, 2.14 before 2.14.6, 2.13 before 2.13.10, 2.12 before 2.12.14 and 2.11 before 2.11.18...

@ossph/temple-ui (0.1.7), @pinnacle0/web-ui (>=0.1.102, <=0.1.104) +5 more potentially affected by CVE-2026-59167 via suneditor (>=2.34.3, <=2.47.0)

suneditor NPM version =2.34.3, =0.1.102, =1.0.3-rc.1, =0.1.0, =0.1.0, =0.1.8, =0.1.1, =0.1.12 Source cves: CVE-2026-59167 Source advisory: GHSA-6RF4-V2FH-M6P4...

MAL-2026-17156 Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

Malicious code in aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61479316af4cfc0884dfe88744a0ed14fa64e052471cc216667c80502689860 postinstall.js runs automatically on npm install and reads os.hostname and os.userInfo.username, then issues an https.get to a hardcoded webhook.site...

MAL-2026-17153 Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

Malicious code in @birbalo/aliftech-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6392dad6c7467b1d2b75c329d517982f061f3ca0792b8879b72127813d26aa8 The npm package @birbalo/[email protected] ships a postinstall.js lifecycle script that runs automatically on npm install. The script imports the...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in passwords in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in passwords in Google Chrome before version 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in passwords in Google Chrome before version 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...