Security update for libidn

This update for libidn fixes the following issue: CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...

SUSE-SU-2026:4081-1 Security update for libidn

This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...

Security update for libidn (moderate)

openSUSE security update: security update for libidn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21758-1 Rating: moderate References: bsc1268965 Cross-References: CVE-2026-57053 CVSS scores: CVE-2026-57053 SUSE : 4...

EulerOS 2.0 SP12 : libidn (EulerOS-SA-2026-3350)

According to the versions of the libidn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in...

SUSE-SU-2026:4000-1 Security update for libidn

This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...

EUVD-2026-72036

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...

CVE-2026-86206

A vulnerability in the N-able N-central internal API access control filter allows unauthorized access to internal APIs due to an access control bypass involving path confusion and forwarded header spoofing . The flaw arises because the Envoy proxy and Jetty web server interpret URIs with semicolo...

CVE-2026-86206 Access control filter bypass allows unauthorised access to APIs

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...

CVE-2026-86207

An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...

EUVD-2026-72022

An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...

CVE-2026-86207 Authentication bypass leads to unauthorised access to N-central

An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...

CVE-2026-86207

A high-severity authentication bypass exists in N-able N-central versions prior to 2026.3 HF 3 (version 2026.3.1.13). The flaw resides in the UserTwoFactorLogin function, where a RemoteException during legacy two-factor authentication fails to clear a session binding. By chaining this with a path...

CVE-2026-86207 Authentication bypass leads to unauthorised access to N-central

An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in internal only APIs...

SUSE CVE-2026-25699

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...

OPENSUSE-SU-2026:21758-1 Security update for libidn

This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...

SUSE CVE-2026-81726

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths. Attackers can read or write files outside allowed sandbox roots through TransitionParser, AveragedPerceptron, PerceptronTagge...

GHSA-QH9R-J7RP-4X2M OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Summary The OpenChoreo control-plane cluster-gateway served its caller-facing management APIs on the same network listener that accepts data-plane agent connections. In the multi-cluster topology that listener is published outside the cluster, and the management APIs did not authenticate the...

EUVD-2026-67076

NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots...

GHSA-8MGP-746C-J5XP NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots

Summary Several model-artifact APIs still treat caller-controlled model paths as ordinary filenames even when NLTK path security is enforced. The same outside-root paths are rejected by guarded helpers, but these public read and write flows still use raw file APIs. Details - Vulnerability type:...