PT-2026-45830

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-44421

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwskan22d 2026-07-22 15:02:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mralqohnlq2y...

CVE-2026-45372

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgmyzox52g 2026-05-29 21:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmziti3zcz2h 2026-05-30 10:08:12+00:00| seen|...

CVE-2026-49368

creationtimestamp| type| source ---|---|--- 2026-05-29 20:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdm6qegs25 2026-05-29 22:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjxbuxx72v 2026-06-01 14:37:05+00:00| seen|...

CVE-2026-32905

creationtimestamp| type| source ---|---|--- 2026-05-29 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyzaf633z2v 2026-06-01 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnb72hkvlb25...

CLSA-2026-1780062671 Fix CVE(s): CVE-2026-41035

SECURITY UPDATE: receiver use-after-free in receivexattr via a wire-supplied xattr count passed to qsort: - debian/patches/els/0007-CVE-2026-41035.patch: sort tempxattr.count stored items instead of the untrusted wire count. - CVE-2026-41035...

CVE-2026-49325

The CVE affects the Indian Motorcycle Scout Bobber + Tech 2025 model year, where the Wireless Control Module (WCM) wiring harness controls anti‑theft shutdown. A falling‑edge voltage transition on a dedicated wire pair signals shutdown to a peer ECU, but the receiving ECU cannot distinguish an ac...

CVE-2026-46833

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzicpkh227 2026-05-28 23:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6v6fxgl2j 2026-05-29 14:45:07+00:00| seen|...

CVE-2026-47333

creationtimestamp| type| source ---|---|--- 2026-05-28 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsruwd5o2w 2026-05-28 21:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxp6nfb52r 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-47759

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l 2026-05-28 17:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i 2026-05-28 21:37:06+00:00| seen|...

SUSE CVE-2026-46075

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-46075 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Teste...

CVE-2026-42761

creationtimestamp| type| source ---|---|--- 2026-05-27 12:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkdikrp2n 2026-05-27 12:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmthuwuia32e...

CVE-2026-9642

creationtimestamp| type| source ---|---|--- 2026-05-26 22:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmryk2eogi2k 2026-05-26 22:15:19+00:00| seen| https://bsky.app/profile/potato.software/post/3mmrzeclokg26 2026-05-29 22:07:08+00:00| seen|...

Ubuntu 24.04 LTS : Linux kernel (FIPS) vulnerabilities (USN-8296-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8296-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Linux Distros Unpatched Vulnerability : CVE-2026-46598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. CVE-2026-46598 Note that Nessus...

SUSE CVE-2026-46598

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

CVE-2026-9011

creationtimestamp| type| source ---|---|--- 2026-05-22 10:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgog6mdc42s 2026-05-22 11:32:25+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgtkik63l2h 2026-05-22 13:13:36+00:00| seen|...

Incorrect Type Conversion or Cast

Overview Affected versions of this package are vulnerable to Incorrect Type Conversion or Cast due to the improper handling of crafted input data in the ed25519.PrivateKey component. An attacker can cause the client to panic by supplying malformed wire bytes. Remediation Upgrade...