Linux Distros Unpatched Vulnerability : CVE-2026-103048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. Thi...

CVE-2026-34493: On-Chip Debug and Test Interface With Improper Access Control

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...

CLEANSTART-2026-WL91519 flaw was found in Ansible Collection community

Security vulnerability affects the ansible package. A flaw was found in Ansible Collection community...

Security Bulletin: Storage Virtualize Ansible Collection is VEX affected by a vulnerability in the crypography package

Summary Storage Virtualize Ansible Collection uses the cryptography package to establish secure communications with managed systems. Due to CVE-2026-34073, certificate validation performed by the cryptography package may incorrectly trust certificates in certain DNS name constraint scenarios...

CVE-2026-103443

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

CVE-2026-103443

The MediaWiki Collection (Book) extension by The Wikimedia Foundation is vulnerable to a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This issue allows for XSS Targeting Non-Script Elements . The vulnerability specifically affects versions 1.46, 1.45, and 1....

CVE-2026-103443 API permits session-seeded javascript URL XSS

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

EUVD-2026-90079

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

CVE-2026-103443 API permits session-seeded javascript URL XSS

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Collection Book extension allows XSS Targeting Non-Script Elements. This issue affects MediaWiki Collection Book extension: 1.46, 1.45, and 1.43...

EUVD-2026-85003

jackson-databind quadratic forward-reference completion...

MAL-2026-17415 Malicious code in com.epi.e2e_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0c1068af335818f2b9d905f2d39ebe594f84a6c63e470877692554bc95103b package.json declares a preinstall script that runs index.js on npm install. index.js collects host identifiers os.homedir, os.hostname,...

CVE-2026-103239

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

CVE-2026-103239 MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

EUVD-2026-89761

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

CVE-2026-103239

The MISP platform is vulnerable to a privilege escalation flaw in the tag collection creation and editing functionality (versions

CVE-2026-103239 MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection

MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the intended tag collection record but also any...

EUVD-2026-89487

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-103048

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...

CVE-2026-103048

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...

UBUNTU-CVE-2026-103048

URL redirection to untrusted site 'open redirect' vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10...