SUSE CVE-2026-43306

In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIGCFI enabled, the kernel strictly enforces that indirect function calls use a function pointer type that matches the target function. I ran into the following type...

MINI-RWCP-H3MX-44XH

Bulletin has no description...

MINI-64CX-G2CR-3HGW

Bulletin has no description...

EUVD-2026-28639

PraisonAI MCP tools/call path-traversal = RCE via Python .pth injection...

MINI-55HP-76VX-P3VG

Bulletin has no description...

MINI-MV8V-H7FH-CHF8

Bulletin has no description...

MINI-3H6H-XR68-G39C

Bulletin has no description...

MINI-8WJ9-PC6C-9R74

Bulletin has no description...

CVE-2025-9973

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...

MINI-Q23G-86M4-JFJC

Bulletin has no description...

CVE-2025-9973 Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...

CVE-2025-9973

CVE-2025-9973 affects WS O2 Identity Server: failure to validate the organization context during adaptive authentication allows triggering authentication logic in other organizations/sub-organizations. This enables cross-organization authorization bypass, potentially leading to privilege escalati...

CVE-2025-9973

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...

MINI-XJX4-P7M2-JPHG

Bulletin has no description...

MINI-8J5P-4H56-P898

Bulletin has no description...

MINI-C949-W5HQ-R95H

Bulletin has no description...

MINI-JFG6-XXXR-XFG6

Bulletin has no description...

MINI-CFQM-G6RP-5CR6

Bulletin has no description...

MINI-WQPM-3666-MVPV

Bulletin has no description...

CVE-2026-8269 Open5GS SMF smf_nsmf_handle_create_sm_context denial of service

A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function smfnsmfhandlecreatesmcontext of the component SMF. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was...