org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta5), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta5) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (19.0.0.beta5)

org.wildfly.core:wildfly-elytron-integration MAVEN version 19.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta5 -...

org.wildfly.core:wildfly-core-dist-legacy (14.0.1.final), org.wildfly.core:wildfly-core-feature-pack (14.0.1.final) +3 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (14.0.1.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 14.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 14.0.1.final -...

org.wildfly.core:wildfly-core-dist-legacy (13.0.0.final), org.wildfly.core:wildfly-core-feature-pack (13.0.0.final) +3 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (13.0.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 13.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 13.0.0.final -...

CVE-2026-23112

creationtimestamp| type| source ---|---|--- 2026-02-13 14:21:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116063764118245130 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

GHSA-2XF7-HMF6-P64J Mattermost doesn't properly validate channel membership at the time of data retrieval

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via a race condition in the /commonteams API endpoint. An attacker can gain unauthorized access to team names by exploiting the timing of channel membership validation during data retrieva...

Mattermost doesn't properly validate channel membership at the time of data retrieval

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: CVE-2026-0861: Fixed that inadequate size check in the memalign suite may result in an integer overflow bsc1256913 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

CVE-2026-20796

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796

Mattermost CVE-2026-20796 affects version 10.11.x up to 10.11.9, due to improper validation of channel membership at data retrieval. A race condition in the /common_teams API endpoint can allow a deactivated user to learn team names they should not access. Root cause: insufficient validation duri...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

CVE-2026-20796 Time-of-check time-of-use vulnerability in common teams API

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (NVIDIA Tegra) vulnerabilities (USN-8034-1)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8034-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

openSUSE Security Advisory (SUSE-SU-2026:0439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Introducing AI Cyber Model Arena: A Real-World Benchmark for AI Agents in Cybersecurity

Wiz Research’s AI Cyber Model Arena benchmarks offensive AI security on 257 real-world challenges zero-days, CVEs, API/web, and cloud across AWS/Azure/GCP/K8s demonstrating what AI models and agents can really do...

83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure

A significant chunk of the exploitation attempts targeting a newly disclosed security flaw in Ivanti Endpoint Manager Mobile EPMM can be traced back to a single IP address on bulletproof hosting infrastructure offered by PROSPERO. Threat intelligence firm GreyNoise said it recorded 417 exploitati...

CVE-2026-2035

creationtimestamp| type| source ---|---|--- 2026-02-12 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-078/...

CVE-2026-21326

creationtimestamp| type| source ---|---|--- 2026-02-11 11:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meld74lshb2v...

no-cloud (0.0.8), nxviz (>=0.2.0, <=0.2.7) +4 more potentially affected by CVE-2026-26007 via cryptography (1.7.1)

cryptography PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - no-cloud 0.0.8 - nxviz =0.2.0, =0.7.0, =1.6.0, =2.1.1rc5, =0.3.3, =0.6.0 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-214...