CVE-2026-42946 affecting package nginx for versions less than 1.28.3-2

CVE-2026-42946 affecting package nginx for versions less than 1.28.3-2. A patched version of the package is available...

CVE-2026-6473 affecting package postgresql for versions less than 16.14-1

CVE-2026-6473 affecting package postgresql for versions less than 16.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44898 affecting package python-mistune for versions less than 3.2.1-1

CVE-2026-44898 affecting package python-mistune for versions less than 3.2.1-1. A patched version of the package is available...

Microsoft 365 Copilot < 19.2604.43111.0 Spoofing (CVE-2026-41614)

The Windows 'Microsoft 365 Copilot' app formerly known as 'Microsoft 365 Office' installed on the remote host is prior to 19.2604.43111.0. It is, therefore, affected by a spoofing vulnerability: - Improper access control in Microsoft 365 Copilot for Desktop allows an unauthorized attacker to...

Microsoft Azure Monitor Agent < 1.14.0 Elevation of Privilege (CVE-2026-32204)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.14.0. It is, therefore, affected by an elevation of privilege vulnerability: - External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. An...

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23631 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10. A patched version of the package is available...

NPM: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

NPM: DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetchurl Tool vulnerability discovered by ? in WordPress Npm deepseek-tui versions 0.8.22...

GHSA-WMMV-VVG5-993Q Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading

Summary Amazon Redshift JDBC Driver is a Type 4 JDBC driver that provides database connectivity through the standard JDBC application program interfaces APIs. An issue exists in versions prior to 2.2.2 where the driver could load arbitrary classes when processing certain connection URL parameters...

CVE-2026-43300 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43300 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43058 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43058 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-13763 affecting package opensc for versions less than 0.27.1-1

CVE-2025-13763 affecting package opensc for versions less than 0.27.1-1. A patched version of the package is available...

CVE-2025-38531 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-38531 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

CVE-2026-31699 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31699 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-43237 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43237 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

📄 GUnet OpenEclass E-learning Remote Code Execution

GUnet OpenEclass E-learning versions prior to 4.2 suffer from a remote code execution vulnerability. Exploit Title: GUnet OpenEclass E-learning platform """ def banner: printf'''YELLOW ┏━╸╻ ╻┏━╸ ┏━┓┏━┓┏━┓┏━┓ ┏━┓┏━┓┏━┓╻ ╻╺┓ ┃ ┃┏┛┣╸ ╺━╸┏━┛┃┃┃┏━┛┣━┓╺━╸┏━┛┏━┛┏━┛┗━┫ ┃ ┗━╸┗┛ ┗━╸ ┗━╸┗━┛┗━╸┗━┛ ┗━╸┗━╸┗━╸...

CVE-2026-31648 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31648 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31622 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31622 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31629 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31629 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...