CERTFR-2026-ACT-037

creationtimestamp| type| source ---|---|--- 2026-08-31 12:55:00+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3muexbpjh2b2r 2026-08-31 12:55:06+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117190223433462408...

CVE-2026-82838

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82838...

CVE-2026-82629

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82629...

CVE-2026-82630

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82630...

CVE-2026-82631

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82631...

CVE-2026-58301

creationtimestamp| type| source ---|---|--- 2026-08-31 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58301...

Linux Distros Unpatched Vulnerability : CVE-2026-80652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to...

RHEL 10 : rhc (RHSA-2026:61313)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:61313 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

CVE-2026-41012

CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...

AZL-98343 CVE-2026-37236 affecting package cert-manager for versions less than 1.12.15-14

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652 crypto: ccp - Treat zero-length cert chain as query for blob lengths

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-80652: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

CVE-2026-56651

creationtimestamp| type| source ---|---|--- 2026-08-27 16:16:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-56651...

SUSE CVE-2026-68569

Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through...

CVE-2026-54614

creationtimestamp| type| source ---|---|--- 2026-08-26 20:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54614...

CVE-2026-48549

creationtimestamp| type| source ---|---|--- 2026-08-26 20:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-48549...

Authentication Bypass by Primary Weakness

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the authentication process when using certain authentication mechanisms such as CLIENT-CERT or SPNEGO. An attacker c...

Authentication Bypass by Primary Weakness

Overview org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the authentication process when using certain...

Authentication Bypass by Primary Weakness

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the authentication process when using certain authentication mechanisms such as...