Amazon Linux 2 : apr-util, --advisory ALAS2-2026-3892 (ALAS-2026-3892)

The version of apr-util installed on the remote host is prior to 1.6.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3892 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or password...

Linux Distros Unpatched Vulnerability : CVE-2026-80696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add...

CVE-2026-80724

creationtimestamp| type| source ---|---|--- 2026-08-30 18:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-08-31 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100388 2026-09-02 01:00:15+00:00| seen|...

CVE-2026-12513

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100338 2026-09-01 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-79483

creationtimestamp| type| source ---|---|--- 2026-08-30 11:00:06+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-08-31 00:00:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/100341 2026-09-02 01:00:18+00:00| seen|...

CVE-2023-41257

creationtimestamp| type| source ---|---|--- 2026-08-30 09:00:05+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4 2026-08-31 00:00:27+00:00| seen| Telegram/UGgGAoNEue2MyCujvvwdDQWtDO2xEIWXCSv0LD0eAe5covZ4...

CVE-2026-48273

creationtimestamp| type| source ---|---|--- 2026-08-29 20:00:05+00:00| seen| https://t.me/CyberDispatch/2538 2026-08-30 00:00:38+00:00| seen| https://t.me/CyberDispatch/2538 2026-09-08 22:11:18+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j 2026-09-09 11:50:04+00:00...

CVE-2024-32760

creationtimestamp| type| source ---|---|--- 2026-08-29 18:00:05+00:00| seen| https://t.me/angiesoftware/51 2026-08-30 00:00:53+00:00| seen| https://t.me/angiesoftware/51...

CVE-2026-67394

creationtimestamp| type| source ---|---|--- 2026-08-29 00:00:06+00:00| seen| https://t.me/captainsmok3rofficial/502 2026-09-01 04:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mugkfxftig2y 2026-09-01 13:53:24+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-40203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail an...

CVE-2026-55785

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

GHSA-FP46-6VFW-GC9C free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

DEBIAN-CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-82343 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-82343

A flaw in GIMP's file-psd plugin fails to properly validate the channel-count parameter when processing a specially crafted PSD file, resulting in a heap out-of-bounds read and a stack out-of-bounds access . The impact is an application crash leading to denial of service or limited information di...

CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

EUVD-2026-67826

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...