VulnCheck KEV: CVE-2026-41948

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencod...

PT-2026-84467

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A daemon in AOS-CX improperly processes malformed input. An unauthenticated remote attacker can exploit this by sending specially crafted packets to the affected service, potentially leading t...

PT-2026-84454

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A flaw in the SSH daemon allows an unauthenticated remote attacker to gain administrative access to affected hosts. This could enable the execution of arbitrary command...

librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload

A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...

Important: iscsi-initiator-utils

Issue Overview: open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open-iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handling CVE-2026-18725 A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network...

OESA-2026-3528 bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fixes: A flaw was found in BlueZ. Insufficient validation of packet length fields in GetFolderItems responses within the Audio/Video Remote Control...

FreeBSD : NSD -- multiple vulnerabilities (a711b018-a24b-11f1-81e6-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a711b018-a24b-11f1-81e6-3c7c3fba4204 advisory. NLnet Labs reports: Tenable has extracted the preceding description block directly from the...

CVE-2026-80663

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it with fstat before locking/writing. The daemon currently uses a fixed...

SUSE CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

CVE-2026-81851

Fireware OS (WatchGuard) is affected by a heap-based buffer overflow in the iked (IKE daemon) process. An authenticated administrator can crash iked by saving a specially crafted configuration , leading to a denial of service . The CVSS 4.0 score is 6.9 (Medium) , reflecting high availability imp...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

MGASA-2026-0338 Updated avahi packages fix security vulnerabilities

Simple protocol server ignores accepts unlimited connections and logs failures without limit. CVE-2025-59529 Avahi has Uncontrolled Recursion in lookuphandlecname function. CVE-2026-24401 Reachable assertion in transportflagsfromdomain via conflicting publish flags crashes avahi-daemon...

CVE-2026-71401 wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

FreeBSD : net/rsync -- multiple vulnerabilities (fee67ad5-a05e-11f1-ad2b-40b034429ecf)

"The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fee67ad5-a05e-11f1-ad2b-40b034429ecf advisory. rsync project reports: This release fixes 33 security issues found during a focused audit of...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

SUSE-SU-2026:23289-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...

SUSE-SU-2026:23323-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" bsc1269042. - CVE-2026-53785: --relative implied-parent...

CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-59683

The OpenRGB network protocol permits writing attacker-controlled strings into arbitrary file system paths , an extension of CVE-2026-59682. If the OpenRGB daemon runs as root , this enables full system compromise from local or remote (network) vectors; if it runs in user context , it allows full ...