CVE-2026-64000

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR module. This vulnerability allows an attacker to cause an out-of-bounds OOB access by sending a specially crafted, truncated supervision frame. The issue arises because the system does not ensure the entire TLV...

Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

Summary Vulnerabilities in Apache Tomcat affect the product's management GUI could cause confidentiality, integrity and availability impacts. The CLI is unaffected. CVE-2025-48976 CVE-2025-48988 CVE-2025-49125 CVE-2025-53506 CVE-2025-52434 CVE-2025-55752 CVE-2025-61795. Vulnerability Details...

Security Bulletin: Vulnerabilities in multiple components affect IBM SAN Volume Controller, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in openssh, libssh, kernel and gnutls components affect IBM Storage Virtualize products and could cause confidentiality, integrity and availability impacts. CVE-2026-35387 CVE-2026-35414 CVE-2025-5372 CVE-2022-50865 CVE-2025-39971 CVE-2025-14831. Vulnerability Details...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update

Multicluster Global Hub v1.5.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

SUSE CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb through hsrgetnextnode and hsrgetnodedata, but RTMDELLINK teardown remov...

PT-2026-63314

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated user with package publishing permissions can cause resource amplification by uploading a specially crafted Arch package archive. The system records non-dot regular file entries...

The vulnerability of the mlx5_irq_alloc() function in the drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

PT-2026-62224

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

acl-2.4.0-1.1 on GA media (moderate)

acl-2.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11312-1 Rating: moderate Cross-References: CVE-2026-54369 CVE-2026-54370 CVE-2026-54371 CVSS scores: CVE-2026-54369 SUSE : 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-54369 SUSE : 8.8...

OPENSUSE-SU-2026:11319-1 7zip-26.02-1.1 on GA media

These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-15811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memor...

OPENSUSE-SU-2026:11323-1 python313-bleach-6.4.0-1.1 on GA media

These are all security issues fixed in the python313-bleach-6.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11322-1 python313-Js2Py-0.74-6.1 on GA media

These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2026-39180

shell-quote: Quadratic-complexity Denial of Service in parse CWE-407...

CVE-2026-16277

A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind service with rpcinfo -l, address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could use this...

CVE-2026-14448

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the systemcertificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity...

CVE-2026-14448 Authenticated RCE in system_certificates view

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the systemcertificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity...

CVE-2026-14448

An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the systemcertificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity...

CVE-2026-14448

CVE-2026-14448 describes an authenticated remote command-injection vulnerability in the system_certificates view. The root cause is improper neutralization of special elements in an OS command, enabling high-privilege attackers to execute arbitrary commands. Impact per sources includes total loss...