CVE-2026-15804

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

PT-2026-60169

Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-60168

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58556: Undefined Security Weakness

Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability...

OPENSUSE-SU-2026:11278-1 hostapd-2.11-4.1 on GA media

These are all security issues fixed in the hostapd-2.11-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-60129

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-58555: Undefined Security Weakness

Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-60171

DoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-60163

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description A flaw exists in the pam winbind module of samba. When the mkhomedir feature is enabled, pam winbind changes the ownership of the target account's home directory without verifying if the path i...

CVE-2026-58557: Undefined Security Weakness

Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability...

OPENSUSE-SU-2026:11282-1 perl-Mojolicious-9.480.0-1.1 on GA media

These are all security issues fixed in the perl-Mojolicious-9.480.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11276-1 gpsd-3.27.5-3.1 on GA media

These are all security issues fixed in the gpsd-3.27.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11281-1 opennlp-1.9.5-1.1 on GA media

These are all security issues fixed in the opennlp-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11275-1 aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.4.5git0.18a5f6f-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11280-1 nm-configurator-0.3.5-2.1 on GA media

These are all security issues fixed in the nm-configurator-0.3.5-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-47988

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access, causing a limited disruption to availability...

sentinel-core

markdown Sentinel-core: Security Orchestration Engine Sent...

GHSA-8M85-WQG7-C529 SAP Approuter Vulnerable to HTTP Request Smuggling

Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafted HTTP request that leads to request-response desynchronization. This could result in the exposure of user responses and cause the system to become unavailable. This leads to ...

HTTP Request Smuggling

Overview @sap/approuter is a Node.js based application router Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP request handling process. An attacker can gain unauthorized access to sensitive information and disrupt service availability by sending specially...

CVE-2026-0487

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...