CVE-2026-72816

A flaw was found in the go-chi/chi RealIP middleware. This vulnerability allows a remote attacker to perform IP spoofing by supplying arbitrary IP addresses in client-controlled headers. This can lead to bypassing IP-based access controls, evading rate limiting and geo-IP restrictions, and...

MINI-6VHP-QJHR-W7HM

Bulletin has no description...

PT-2026-77205

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.4 Description Backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The 'admin/controller/content/revisions.php' controller and 'admin/sql/sqlite/pos...

PT-2026-77307

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.3.3 Description FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. The application fails to fully remove role identifiers from the info.roles array of users or the runtime usersMap cache when a rol...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101981 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...

Linux Distros Unpatched Vulnerability : CVE-2026-72455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: apparmor: fix uninitialised pointer passed to auditloguntrustedstring Commit 4a134723f9f1...

PT-2026-77285

Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.3 Description An issue exists in the CertificateExport process where the ownership check for CertificatePermission was incorrectly placed within the plugin.requires key branch for the 'POST...

PT-2026-80219

Summary The CertificateExport handler in lemur/certificates/views.py nests its entire ownership / CertificatePermission check inside an if plugin.requires key: branch. When the selected export plugin advertises requires key = False, the authorization check is skipped entirely and any authenticate...

vcheck v1.6.3

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

MINI-3V2Q-CQ5P-W779

Bulletin has no description...

MINI-3C2G-R424-XFF6

Bulletin has no description...

Improper Output Neutralization for Logs

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

MINI-7JQQ-86PQ-CHFW

Bulletin has no description...

MINI-MJVC-Q92V-QG9F

Bulletin has no description...

PYSEC-2026-3762

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

CVE-2026-74885

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

PYSEC-2026-3762

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

CVE-2026-74885 openssl_encrypt before 1.4.0 Logging Bug and Race Condition

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

CVE-2026-74885 openssl_encrypt before 1.4.0 Logging Bug and Race Condition

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

CVE-2026-74885

The Python package openssl_encrypt before 1.4.0 has a logging bug in restore_hidden_modules() that always reports zero restored modules, corrupting audit trails, and a race condition allowing blocked modules to be re-imported in multi-threaded environments. CVSS 4.0 scores it 9.3 CRITICAL (networ...