CVE-2026-7491

creationtimestamp| type| source ---|---|--- 2026-04-30 02:37:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10897-64257-2.html 2026-09-12 10:00:18+00:00| seen| https://t.me/shimiscyberworld/1132 2026-09-13 00:00:08+00:00| seen| https://t.me/shimiscyberworld/1132...

CVE-2026-7489

creationtimestamp| type| source ---|---|--- 2026-04-30 02:20:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html 2026-09-12 10:00:19+00:00| seen| https://t.me/shimiscyberworld/1130 2026-09-13 00:00:08+00:00| seen| https://t.me/shimiscyberworld/1130...

CVE-2026-42249

creationtimestamp| type| source ---|---|--- 2026-04-29 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-42248 2026-04-29 15:16:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknfdxk62b2n 2026-05-10 11:02:26+00:00| seen|...

CVE-2026-7336

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504 2026-05-08...

CVE-2026-7338

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504 2026-05-10...

CVE-2026-7340

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-05-03 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260504...

DEBIAN-CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

CVE-2026-40556

creationtimestamp| type| source ---|---|--- 2026-04-28 06:20:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40556 2026-04-28 16:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl25fsldf2o...

PT-2026-35750

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.2 through 2.33 GNU C Library version 2.34 affected versions not specified Description The deprecated functions ns printrrf, ns printrr, and fp nquery fail to validate RDATA content against the RDATA length in a DNS...

GNU C Library 安全漏洞

The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...

JLSEC-2026-223 openssl-src NULL pointer Dereference in `signature_algorithms` processing

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension where it was present in the initial ClientHello, but includes a signaturealgorithmscert extension then a NU...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, gitlab-rails-ce, neuvector-scanner-fips, podman-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-cognitoidp-fips, crossplane-provider-aws-emrserverless, cri-tools, crossplane-provider-aws-lambda-fips, cloudflared,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager, juicefs, opentofu, kyverno, ratify, rancher-webhook, harbor, nuclei, rclone, cert-manager-csi-driver, rancher, trufflehog, yunikorn-k8shim, zot, openbao, teleport, k6, seaweedfs, gitea, bento, flux-source-controller, frp, kyverno-notation-aws, minio,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, gitea, rancher-agent, rclone-fips, percona-server-mongodb-operator, cert-manager-openshift-routes-fips, sftpgo-plugin-auth, versitygw-fips, rancher-webhook, seaweedfs-rocksdb, cert-manager-google-cas-issuer-fips, zitadel, cert-manager-fips, opentofu,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: yunikorn-k8shim, gitea, rancher-agent, rclone-fips, percona-server-mongodb-operator, cert-manager-openshift-routes-fips, sftpgo-plugin-auth, versitygw-fips, rancher-webhook, seaweedfs-rocksdb, cert-manager-google-cas-issuer-fips, zitadel, cert-manager-fips, opentofu,...

CVE-2026-4313

creationtimestamp| type| source ---|---|--- 2026-04-24 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4313...

CVE-2026-6887

creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116453554799004892 2026-04-23 10:30:31+00:00| seen|...

SUSE SLES16 Security Update : strongswan (SUSE-SU-2026:21203-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21203-1 advisory. Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When...

CVE-2026-6756

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 17:24:29+00:00| seen| Telegram/GWv-rb7UfXBXuTinSPZbLsKECuSpybC90nlKZTm2UKU7Bs...