CVE-2026-26017

A flaw was found in CoreDNS, a DNS server that uses a chain of plugins. This logical vulnerability allows an attacker to bypass DNS access controls. The issue occurs because security plugins, such as 'acl', are evaluated before the 'rewrite' plugin, creating a Time-of-Check Time-of-Use TOCTOU fla...

RHSA-2026:3928 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2026:3879 Red Hat Security Advisory: grafana security update

Bulletin has no description...

CVE-2026-3633

A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the soupmessagenew function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the method value is not properly...

CVE-2026-3634

A flaw was found in libsoup. An attacker controlling the value used to set the Content-Type header can inject a Carriage Return Line Feed CRLF sequence due to improper input sanitization in the soupmessageheaderssetcontenttype function. This vulnerability allows for the injection of arbitrary...

CVE-2026-28802

A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit this vulnerability by crafting a malicious JSON Web Token JWT with a "none" algorithm and an empty signature. This bypasses the expected signature verification, potentially...

CVE-2026-29068

A flaw was found in PJSIP. A remote attacker could exploit a stack buffer overflow vulnerability in the pjmedia-codec component. This occurs when the component processes a Real-time Transport Protocol RTP payload that contains more frames than it is designed to handle. Successful exploitation of...

CVE-2026-28799

A flaw was found in PJSIP. A remote attacker can exploit a heap use-after-free vulnerability within the event subscription framework by sending a specially crafted message during presence unsubscription. This can lead to a denial of service, making the affected system unavailable. Mitigation...

CVE-2026-28348

A flaw was found in lxmlhtmlclean. The hassneakyjavascript method incorrectly strips backslashes before checking for dangerous CSS keywords. This allows CSS Unicode escape sequences to bypass @import and expression filters. A remote attacker could exploit this to achieve external CSS loading or...

CVE-2026-28350

A flaw was found in lxmlhtmlclean. This vulnerability allows a remote attacker to inject a tag into a web page. Due to improper handling of HTML cleaning configurations, an attacker can hijack relative links on the page, potentially leading to information disclosure or redirection of web traffic...

CVE-2026-26998

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When Traefik is configured to use the ForwardAuth middleware, it reads the authentication server's response body into memory without a size limit. A malicious or misconfigured authentication server could send an excessively lar...

CVE-2026-29054

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit a case sensitivity vulnerability in how Traefik processes HTTP/1.1 requests. By using lowercase tokens in the Connection header, an attacker can bypass security protections, leading t...

CVE-2026-25048

A flaw was found in xgrammar, an open-source library for structured generation. This vulnerability allows an attacker to trigger a segmentation fault, causing the program to crash and resulting in a Denial of Service DoS. The issue occurs due to improper handling of multi-level nested syntax...

CVE-2025-15558

A flaw was found in Docker CLI for Windows. A low-privileged attacker can exploit this vulnerability by creating a specific directory, C:\ProgramData\Docker\cli-plugins, which does not exist by default. By placing malicious plugin binaries in this directory, an attacker can achieve privilege...

CVE-2026-27898

A flaw was found in Vaultwarden, an unofficial Bitwarden compatible server. An authenticated regular user can exploit this by specifying another user’s cipher identifier cipherid and making a partial update request to the API. This action bypasses standard access controls, leading to the exposure...

CVE-2026-3520

A denial of service flaw was found in Multer, a Node.js middleware for handling multipart/form-data. A remote attacker can send specially crafted malformed requests which may induce a stack overflow. This can lead to a Denial of Service DoS making the service unavailable. Mitigation Mitigation fo...

CVE-2025-66168

An integer overflow flaw has been discovered in Apache ActiveMQ. Apache ActiveMQ does not properly validate the remaining length field which may lead to an overflow during the decoding of malformed packets. When this integer overflow occurs, ActiveMQ may incorrectly compute the total Remaining...

CVE-2026-27622

A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An attacker can craft a malicious EXR file that, when processed, causes an integer overflow in the CompositeDeepScanLine::readPixels function. This overflow leads to an undersized buffer allocation, whic...

CVE-2025-71238

A flaw was found in the Linux kernel's qla2xxx block SCSI generic bsg interface. This vulnerability, a double free, occurs because certain vendor-specific handlers incorrectly call the bsgjobdone function on both successful and failed operation paths. A local user could exploit this to trigger...

CVE-2026-23237

In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver, code using the accel object may run before that object's address is stored in the driver data of the input device usi...