CVE-2026-14620 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

CVE-2026-14631 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

CVE-2026-56876 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

AZL-99413 CVE-2026-80834 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

EUVD-2026-71284

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834 crypto: sun8i-ce - Remove crypto_rng interface

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834

CVE-2026-80834 affects the Linux kernel 's sun8i-ce crypto driver. The vulnerability is a use-after-free in the ->generate() function of the crypto_rng interface, caused by wait_for_completion_interruptible_timeout() failing to shut down the DMA operation when a signal is sent. The fix removes...

CVE-2026-80834 crypto: sun8i-ce - Remove crypto_rng interface

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-80834: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

CVE-2026-38961: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in the RSS Widget of Netgate pfSense Plus versions 26.03, 25.11.1 and pfSense CE version 2.8.1 allows remote authenticated attackers to inject arbitrary JavaScript via malicious content in an RSS feed title. The injected script executes in the browser of any...

CVE-2026-78849: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

PT-2026-85783

Name of the Vulnerable Software and Affected Versions Netgate pfSense Plus versions prior to 26.04 pfSense CE versions prior to 2.8.2 Description A Cross Site Scripting XSS issue exists that allows a remote attacker to execute arbitrary code. The flaw is located in the captive portal...

CVE-2026-78849

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

CVE-2026-38961

Cross-Site Scripting XSS vulnerability in the RSS Widget of Netgate pfSense Plus versions 26.03, 25.11.1 and pfSense CE version 2.8.1 allows remote authenticated attackers to inject arbitrary JavaScript via malicious content in an RSS feed title. The injected script executes in the browser of any...

PT-2026-91302

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypto rng interface Since the crypto rng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...

Linux Distros Unpatched Vulnerability : CVE-2026-80834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sun8i-ce - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG,...

PT-2026-85712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the sun8i-ce driver within the crypto rng interface. The generate function fails to properly shut down the DMA operation when a signal is sent while usin...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, ruby3.2-rails, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby4.0-rails...