CVE-2026-44771 Missing Authorization check in SAP S/4HANA (Draft operation)

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of...

EUVD-2026-43594

SAP Create Single Payment does not perform necessary authorization checks for an authenticated user, a restricted user could access specific entity set keys resulting in disclosure of information. This has low impact on confidentiality, with no impact on integrity and availability of the...

EUVD-2026-43593

SAP S/4HANA application Project Management PPM-PRO allows an attacker with high privileges to execute crafted database queries, exposing the backend database. This results in low impact on confidentiality, with no impact on integrity and availability of the application...

CVE-2026-44769

CVE-2026-44769 affects SAP S/4HANA Project Management (PPM-PRO). The connected documents describe a vulnerability where an attacker with high privileges can induce crafted database queries, resulting in exposure of the backend database. The impact is specified as low for confidentiality (C:H) wit...

CVE-2026-44760

Due to a Cross-Site Scripting XSS vulnerability, applications based on Business Server Pages framework in SAP NetWeaver Application Server ABAP reflects unsanitized input into the HTTP response which allows an attacker to inject and execute arbitrary JavaScript code under certain conditions...

PT-2026-60244

Name of the Vulnerable Software and Affected Versions libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information...

PT-2026-60978

Name of the Vulnerable Software and Affected Versions trivy versions prior to 0.72.0-2.1 Description A norm.Iter can enter an infinite loop when processing input that contains invalid UTF-8 bytes. UTF-8 is a character encoding capable of encoding all possible Unicode characters. Recommendations...

OPENSUSE-SU-2026:11264-1 gimp-3.2.4-2.1 on GA media

These are all security issues fixed in the gimp-3.2.4-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-60240

Name of the Vulnerable Software and Affected Versions libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information...

OPENSUSE-SU-2026:11266-1 libpsl-devel-0.23.0-1.1 on GA media

These are all security issues fixed in the libpsl-devel-0.23.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11269-1 php8-8.5.8-1.1 on GA media

These are all security issues fixed in the php8-8.5.8-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-60241

Name of the Vulnerable Software and Affected Versions libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information...

OPENSUSE-SU-2026:11263-1 freerdp-3.28.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-47988: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access, causing a limited disruption to availability...

PT-2026-60242

Name of the Vulnerable Software and Affected Versions libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information...

PT-2026-60239

Name of the Vulnerable Software and Affected Versions libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations At the moment, there is no information...

OPENSUSE-SU-2026:11271-1 python313-django-debug-toolbar-7.0.0-1.1 on GA media

These are all security issues fixed in the python313-django-debug-toolbar-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11272-1 python313-slixmpp-1.16.0-2.1 on GA media

These are all security issues fixed in the python313-slixmpp-1.16.0-2.1 package on the GA media of openSUSE Tumbleweed...

PYSEC-2026-2686 OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints

Affects - Nova: =18.0.0 =32.0.0 =33.0.0 33.0.2 Description Erichen from the Institute of Computing Technology, Chinese Academy of Sciences reported that Nova's server create API does not strip internal scheduler hints. An authenticated user can bypass Placement resource claims and scheduling...

PYSEC-2026-2400 BoxLite has a Timeout Bypass Vulnerability

Summary BoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...