CVE-2025-50187

creationtimestamp| type| source ---|---|--- 2026-03-02 16:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3mrteptp2k 2026-03-02 18:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3udbmqow2u 2026-03-03 20:00:16+00:00| seen|...

SIP Service Providers – Possible Impersonation of Poly Voice Device

An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate. Service...

ATLAS: AI-Assisted Threat-To-Assertion Learning for System-On-Chip Security Verification

This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip SoC security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration CWE, ATLAS identifies SoC-specific assets, maps...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-28351 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-28351 Source advisory: OSV:GHSA-F2V5-7JQ9-H8CG...

CVE-2026-28351

creationtimestamp| type| source ---|---|--- 2026-02-27 23:22:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu3dkef724 2026-02-28 07:10:10+00:00| seen| https://gist.github.com/alon710/8c701e4c3b2c6c36535c668dab067b3c 2026-02-28 07:29:32+00:00| seen|...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Thunderbird 140.7.2 CVE-2026-2447: Fixed a heap buffer overflow in libvpx. bsc1258231 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-1059 Malicious code in nuget-task-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711e93cd10681dc29d8c8eea7b459d982383f7b78d0c5fdc73e9398aff953a90 The package nuget-task-common was found to contain malicious code. Source: ossf-package-analysis...

de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-common (3.1.0.final) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.3.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr1 -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-authz-policy-common (4.1.0.final) +10 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-authz-policy-common (4.5.0.final) +10 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

org.keycloak:keycloak-authz-policy-common (8.0.0), org.keycloak:keycloak-authz-policy-drools (8.0.0) +14 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (8.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 8.0.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +38 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (18.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...

net.micedre.keycloak:keycloak-mail-whitelisting (1.5), org.keycloak:keycloak-authz-policy-common (19.0.0) +26 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (19.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-authz-policy-common (4.3.0.final) +10 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.3.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

org.keycloak:keycloak-authz-policy-common (7.0.1), org.keycloak:keycloak-authz-policy-drools (7.0.1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (7.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 7.0.1 -...

org.keycloak:keycloak-authz-policy-common (10.0.0), org.keycloak:keycloak-dependencies-server-all (10.0.0) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (10.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 10.0.0 -...

org.keycloak:keycloak-authz-policy-common (2.5.1.final), org.keycloak:keycloak-authz-policy-drools (2.5.1.final) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (2.5.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.1.final -...

org.keycloak:keycloak-authz-policy-common (2.5.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (2.5.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.cr1 -...