The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise storage platforms, related to information disclosure during data transmission, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise, platforms for archiving corporate information, lies in the exposure of data during transmission. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

PT-2026-34370

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB I NO DATA INTEGRITY superblock flag for filesystems that cannot guarantee data persistence on sync eg fuse. For superblocks with this flag set...

PT-2026-34517

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the cut utility occurs when the -s only-delimited flag is used in conjunction with the -z null-terminated and -d '' empty delimiter options. The utility incorrectly...

CVE-2026-35381: Incorrect Provision of Specified Functionality

A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s only-delimited flag when using the -z null-terminated and -d '' empty delimiter options together. The implementation incorrectly routes this specific combination through a specialized newline-delimiter code...

DEBIAN-CVE-2026-22008

Vulnerability in Oracle Java SE component: Libraries. The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent allows a attacker to compromise data integrity.

The vulnerability of the command-line interface of Cisco ThousandEyes Enterprise Agent software relates to the improper definition of symbolic links during access to the file. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2026-35554

A flaw was found in the Apache Kafka Java producer client. A race condition in the client's buffer pool management can cause messages to be silently delivered to incorrect topics. This occurs when a message batch expires while its network request is still active, leading to premature buffer...

The vulnerability of the strlen() function in thejq programming language allows attackers to influence the integrity and accessibility of the protected information.

The vulnerability of the strlen function in thejq programming language is related to errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to influence the integrity and accessibility of the protected information...

The vulnerability of the CUPS printing server stems from incorrect restrictions on the path to the directory, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

ROS-20260420-73-0010

A vulnerability in the crypto/modes/ocb128.c component of the OpenSSL TLS and SSL protocols toolkit is related to the lack of a required encryption step. Exploitation of the vulnerability could allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Mattermost instant messaging application, related to synchronization errors when using a shared resource (“Race Situation”), allows a violator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Mattermost instant messaging application is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the graphical user interface of the network access control device FortiNAC-F allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the graphical user interface of the FortiNAC-F network access control device lies in the redirection of URLs to an unreliable website using a specially created CSV file. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the protected...

ruby: XML round-trip vulnerability in REXML

A flaw was found in the way the Ruby REXML library parsed XML documents. Parsing a specially crafted XML document using REXML and writing parsed data back to a new XML document results in creating a document with a different structure. This issue could affect the integrity of processed data in...

The vulnerability of the Google Chrome browser’s FileSystem API allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome browser’s FileSystem API relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260417-73-0026

A vulnerability in the crparserparseanycore function of the cr-parser.c component of the css2 Libcroco cascading tables library is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to compromise data integrity as well as cause a denial of...

SUSE SLES15: terraform-provider-local / terraform-provider-null / etc (SUSE-SU-2026:1411-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1411-1 advisory. This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue...

Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files can lead to the consumption of corrupted files bsc1258097...

CVE-2023-3634 Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability...

The vulnerability of the server for automating work processes in n8n-MCP, related to insufficient validation of requests on the server side, allows attackers to influence the integrity and accessibility of protected information.

The vulnerability of the n8n-MCP server for automating processes is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

The vulnerabilities of SAP S/4HANA and SAP ERP software platforms, related to deficiencies in authentication procedures, allow attackers to influence the integrity and accessibility of protected information.

The vulnerabilities of SAP S/4HANA and SAP ERP software platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers operating remotely to compromise the integrity and accessibility of protected information...