CVE-2026-65093

NVIDIA OpenShell for Linux contains a sandbox escape vulnerability that an attacker can exploit over the network with low privileges and no user interaction. A successful exploit may lead to code execution , privilege escalation , data tampering , and information disclosure . The vulnerability ca...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux is affected by a path traversal vulnerability that allows bypassing its L7 REST network policy . An attacker with network access and low privileges can exploit this to achieve information disclosure and data tampering . The CVSS v3.1 base score is 8.5 (HIGH) , w...

EUVD-2026-66091

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65091

NVIDIA OpenShell (all platforms) is affected by an OS command injection vulnerability exploitable through a malicious gateway. A successful exploit could result in code execution, data tampering, and information disclosure . The vendor-assigned CVSS v3.1 score is 8.8 (High) , reflecting a network...

EUVD-2026-66090

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

PT-2026-81509

Name of the Vulnerable Software and Affected Versions NVIDIA OpenShell affected versions not specified Description A flaw exists where a malicious gateway can trigger OS command injection. This could allow an attacker to execute arbitrary code, tamper with data, and disclose sensitive information...

PT-2026-81511

Name of the Vulnerable Software and Affected Versions NVIDIA OpenShell for Linux affected versions not specified Description A flaw in NVIDIA OpenShell for Linux allows an attacker to perform a sandbox escape, which is a process of breaking out of a restricted execution environment to access the...

Astra Linux – Vulnerability in GUPNP

A vulnerability was discovered in GUPnP before versions 1.0.7, 1.1.x, and 1.2.x, as well as before version 1.2.5. This vulnerability allows for DNS rebinding. A remote web server can exploit this vulnerability to trick the victim’s browser into performing actions against local UPnP services...

SUSE CVE-2026-76827

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...

EUVD-2026-62968

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-71125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-76403

Splunk Connect for Kafka versions below 2.2.7 are affected by an improper certificate validation flaw in the Kerberos authentication path . When Kerberos is used with the HTTP Event Collector in Splunk Enterprise, the HTTP client is built without applying the configured certificate validation opt...

CVE-2026-76827

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...

CVE-2026-76827 Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...

CVE-2026-76827

In search-indexer, delta-sync write paths fail to scope UPDATE/DELETE operations to the caller's own cluster, allowing a registered, authenticated managed cluster to tamper with or delete another cluster's indexed search data by crafting UIDs with a different cluster's prefix; CVSS 6.8 (Medium), ...

EUVD-2026-63091

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...

CVE-2026-76827 Search-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)

A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search data. This is possible because the delta-sync write paths in search-indexer do not properly restrict UPDATE/DELETE operations to...