EUVD-2026-49579

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-16812

CVE-2026-16812 affects VeloCloud Orchestrator (VCO) On-Prem. The vulnerability is an OS command injection that could allow a remote attacker to access privileged internal functionality and impact the VCO host, compromising confidentiality, integrity, and availability of the orchestrator and manag...

CVE-2026-12991

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...

EUVD-2026-49181

The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...

PT-2026-65673

These are all security issues fixed in the ffmpeg-7-7.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

mcphost-0.34.0-9.1 on GA media (moderate)

mcphost-0.34.0-9.1 on GA media Announcement ID: openSUSE-SU-2026:11366-1 Rating: moderate Cross-References: CVE-2026-5160 CVE-2026-56852 CVSS scores: CVE-2026-5160 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H...

PT-2026-65107

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description A deserialization weakness exists in the way JFrog Artifactory handles packages. This flaw could allow a low-privileged user to compromise confidentiality, integrity, and availabili...

opennlp-1.9.5-2.1 on GA media (moderate)

opennlp-1.9.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:11369-1 Rating: moderate Cross-References: CVE-2026-63317 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the opennlp-1.9.5-2.1...

SUSE CVE-2025-3770

EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability...

PT-2026-65072

These are all security issues fixed in the python313-CherryPy-18.10.0-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65086

This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL bsc1272443. - CVE-2026-63639: corrupt stream RDB files containing a shared NACK across consume...

OPENSUSE-SU-2026:11380-1 libunbound8-1.25.2-1.1 on GA media

These are all security issues fixed in the libunbound8-1.25.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65074

These are all security issues fixed in the libunbound8-1.25.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65068

These are all security issues fixed in the apptainer-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65076

These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11382-1 yq-4.53.3-1.2 on GA media

These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed...

PT-2026-65088

This update for valkey fixes the following issues: - CVE-2026-56684: use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL bsc1272443. - CVE-2026-63639: corrupt stream RDB files containing a shared NACK across consume...

Denial Of Service (DoS)

Next.js is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of requests targeting App Router applications with Server Actions running on the Edge runtime, allowing attackers to trigger excessive memory consumption and degrade application availability...