Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : poppler vulnerability (USN-8950-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8950-1 advisory. It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An...

CVE-2026-76406

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer REST API to expose and decrypt that encrypted credential data. The vulnerabilit...

USN-8950-1 poppler vulnerability

It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service...

CLSA-2026-1778261513 Fix CVE(s): CVE-2026-43284

Miscellaneous Ubuntu changes - Packaging: add tuxcare suffix Miscellaneous upstream changes - xfrm: esp: avoid in-place decrypt on shared skb frags - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present...

PT-2026-120867

In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data to the Representational State Transfer REST API to expose and decrypt that encrypted credential data. The vulnerabilit...

Linux Distros Unpatched Vulnerability : CVE-2026-109976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bou...

CVE-2026-113869 Use-after-free in S/MIME decryption during a security device password prompt

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

CVE-2026-113869

Mozilla Thunderbird versions earlier than 158.0.1 are vulnerable to a use-after-free memory error during S/MIME message decryption. The flaw occurs when a message load finishes or is canceled while an interactive password prompt (e.g., for a smartcard PIN or Primary Password) is still open, causi...

CVE-2026-113869 Use-after-free in S/MIME decryption during a security device password prompt

When Thunderbird asked for a security device password for example a smartcard PIN or the Primary Password while decrypting an S/MIME message, the message load could finish or be cancelled while the prompt was open. This freed the message decoder while it was still in use, causing a use-after-free...

Splunk SOAR side-channel information disclosure vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a side-channel information disclosure vulnerability. This vulnerability arises when Basic authentication values are decrypted prior to completing authentication checks. Unauthenticated users can submit these Basic authentication data to the REST API,...

Decompression Bomb

Apache CXF is vulnerable to a decompression bomb. The vulnerability is due to CompressionUtils.inflate decompressing attacker-controlled DEFLATE data without an output-size limit, where a small KB crafted payload can expand to gigabytes on the heap and attackers can trigger it via JWE decryption...

KLA91360 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass securit...

CVE-2026-3161

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-3161

IBM Cloud Pak System versions 2.3.6.0 and 2.3.6.1 are vulnerable to the use of weaker than expected cryptographic algorithms (CWE-327). This flaw could enable an attacker to decrypt highly sensitive information. Impact is rated as High for confidentiality. To remediate this vulnerability, IBM str...

CVE-2026-3161 IBM Cloud Pak System Risky Cryptographic Algorithm

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-3161 IBM Cloud Pak System Risky Cryptographic Algorithm

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

EUVD-2026-104522

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-6719 IBM Concert Software Use of Insufficiently Random Values

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

EUVD-2026-104528

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-6719 IBM Concert Software Use of Insufficiently Random Values

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...