Linux Distros Unpatched Vulnerability : CVE-2026-11294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page...

ROS-20260605-73-0062

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility ...

OPENSUSE-SU-2026:10959-1 go1.25-1.25.11-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10960-1 go1.26-1.26.4-1.1 on GA media

These are all security issues fixed in the go1.26-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed...

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Summary Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update

Multicluster Global Hub v1.6.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

OPENSUSE-SU-2026:10955-1 libmozjs-140-0-140.10.1-2.1 on GA media

These are all security issues fixed in the libmozjs-140-0-140.10.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10957-1 perl-HTML-Parser-3.850.0-1.1 on GA media

These are all security issues fixed in the perl-HTML-Parser-3.850.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-118199

Уязвимость функции device pasid table teardown компонента drivers/iommu/intel/pasid.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

PT-2026-46303

Name of the Vulnerable Software and Affected Versions Axios versions prior to 0.32.0 Axios versions prior to 1.16.0 Description Axios constructs a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can...

PT-2026-118215

Уязвимость функции amdgpu amdkfd gpuvm free memory of gpu компонента drivers/gpu/drm/amd/amdgpu/amdgpu amdkfd gpuvm.c ядра операционной системы Linux связана с реализацией некорректного потока управления. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность...

PHPShop SQL Injection

The vulnerability of the PHPShop content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2026:10952-1 sshfs-3.7.6-1.1 on GA media

These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10942-1 7zip-26.01-1.1 on GA media

These are all security issues fixed in the 7zip-26.01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10946-1 assimp-devel-6.0.5-3.1 on GA media

These are all security issues fixed in the assimp-devel-6.0.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10947-1 erlang27-27.1.3-2.1 on GA media

These are all security issues fixed in the erlang27-27.1.3-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-48597

Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13-1.1 Description An issue exists allowing path traversal via the keyhint variable. Recommendations Update to version 17.38.13-1.1...

PT-2026-60337

Уязвимость программного обеспечения для управления пользователями беспроводных сетей NETAMS WNAM связана с подделкой межсайтовых запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

PT-2026-120393

Уязвимость функции mlx5 ib reg user mr компонента drivers/infiniband/hw/mlx5/mr.c ядра операционной системы Linux связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации...

bind-9.20.23-2.1 on GA media (moderate)

bind-9.20.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:10915-1 Rating: moderate Cross-References: CVE-2026-3593 CVSS scores: CVE-2026-3593 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...