CVE-2026-32647 affecting package nginx for versions less than 1.28.3-1

CVE-2026-32647 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2

CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2. A patched version of the package is available...

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-3119 affecting package bind for versions less than 9.20.21-1

CVE-2026-3119 affecting package bind for versions less than 9.20.21-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32241 affecting package flannel for versions less than 0.24.2-25

CVE-2026-32241 affecting package flannel for versions less than 0.24.2-25. A patched version of the package is available...

CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-71203 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-28753 affecting package nginx for versions less than 1.28.3-1

CVE-2026-28753 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-69720 affecting package ncurses for versions less than 6.4-3

CVE-2025-69720 affecting package ncurses for versions less than 6.4-3. A patched version of the package is available...

CVE-2026-23118 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23118 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-27784 affecting package nginx for versions less than 1.28.3-1

CVE-2026-27784 affecting package nginx for versions less than 1.28.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-25541 affecting package trident for versions less than 0.22.0-1

CVE-2026-25541 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-38426 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3

CVE-2025-39748 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16

CVE-2026-32287 affecting package telegraf for versions less than 1.31.0-16. A patched version of the package is available...

CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4

CVE-2026-25645 affecting package python-requests for versions less than 2.31.0-4. A patched version of the package is available...

Updated vim packages fix security vulnerabilities

Vim modeline bypass via various options affects Vim 9.2.0276. CVE-2026-34982 Path traversal issue with zip.vim in Vim v9.2.0280. CVE-2026-35177...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...

WordPress Perfmatters plugin <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via 'delete' Parameter vulnerability discovered by hoshino in WordPress Plugin Perfmatters versions = 2.5.9.1...

CVE-2026-35386

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in sshconfig...