CVE-2026-12852

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation,...

Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)

Summary IBM Informix versions 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary commands with...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc – fixed an off-by-one error in the wireorder validation. The current validation wireorderi ARRAYSIZEconfig pins allows wireorderi to equal ARRAYSIZEconfig pins, which causes out-of-bounds access when used as an...

SUSE CVE-2026-64589

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...

CVE-2026-15459

creationtimestamp| type| source ---|---|--- 2026-08-06 07:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfht3a2s72a 2026-08-07 00:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshbmttlqh2t...

CVE-2026-17632

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2gben5g2z 2026-08-07 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msijfxmoaz2r...

CVE-2026-69111

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegc7qffv2n...

CVE-2026-17614

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

UBUNTU-CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

CVE-2026-12852 affects Bouncy Castle for Java prior to 1.85, where the MLS wire decoder allocates an attacker-declared opaque length before performing bounds checks. This is a vulnerability in the decoder component that could impact availability (per CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/S...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

PT-2026-67019

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-67304

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oihufp22b 2026-08-02 17:09:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117027006957378264...

CVE-2026-67322

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3pco2k2x...

CVE-2026-16144

creationtimestamp| type| source ---|---|--- 2026-08-01 11:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwkxawn2n 2026-08-01 18:01:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22fgopyh2v 2026-08-01 23:03:24+00:00| seen|...

CVE-2026-66415

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva57i7jh2o 2026-07-30 20:22:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbe4xv6v2d...

CVE-2026-14981

creationtimestamp| type| source ---|---|--- 2026-07-28 22:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqfvprcuj2f 2026-07-30 04:48:22+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...