DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – Обход проверки подписи DKIM дефект канонизации заголовков Код программы имитация разбора электронной почты на Python dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To:...

fast-uri: fast-uri: Host confusion via skipped IDN canonicalization

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names IDN to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo (crlsa-2022_0001)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220001 advisory. golang: net/http: limit growth of header canonicalization cache CVE-2021-44716 Tenable has extracted the preceding description block directly from the CIQ security...

CVE-2026-100895

A flaw was found in OpenARC. A remote attacker can trigger a null pointer dereference by providing specially crafted input handled by the arcparsecanont function during canonicalization parsing. This issue causes the application to terminate unexpectedly, resulting in a Denial of Service DoS...

CVE-2026-8452-check

Citrix NetScaler SAML PrefixList Heap Overflow — cкрипт определения наличия исправления A safe, non-destructive patch-state check for CVE-2026-8452 , the pre-authentication heap overflow in the Citrix NetScaler ADC / NetScaler Gateway SAML signature canonicalizer CTX696604, CVSS 8.8. An oversized...

CVE-2021-41773

CVE-2021-41773 PoC — обход пути в Apache HTTP Server Обзор CVE-2021-41773 — это уязвимость обхода пути, затрагивающая Apache HTTP Server 2.4.49. Уязвимость позволяет атакующему получать доступ к файлам за пределами целевого каталога при определённых конфигурациях, особенно когда каталоги...

BIT-OPENBAO-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-088)

The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS shell environment utilities fail to safely canonicalize paths and can follow symbolic links from a writable user directory to a privileg...

PT-2026-99005

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

Oracle Linux 9 : unbound (ELSA-2026-71487)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71487 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

Oracle Linux 8 : unbound (ELSA-2026-70754)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70754 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

Oracle Linux 10 : unbound (ELSA-2026-71419)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71419 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Preven...

unbound security update

1.24.2-3.8 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-3.7 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...

unbound security update

1.16.2-5.14.4 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.16.2-5.14.3 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Add unit tests for vulnerabilities too...

unbound security update

1.24.2-23 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-22 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 1.24.2-21 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Add unit test for the vulnerability too...

EUVD-2026-84956

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...

CVE-2026-18114

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...

CVE-2026-18114 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...

CVE-2026-18114 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...