CVE-2026-47722

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml...

CVE-2026-47722 nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, internal/configgen/generator.go:86,108,119 interpolates the operator-supplied ListenHost and TunDevice fields raw into a text/template that produces the agent's config.yml...

USN-8602-1: libinput vulnerability

It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root...

MAL-2026-11038 Malicious code in svelte-streak-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbfe79dd6fb079811b798a734de0a661605d420454d97a0635dbdaec621efd The package contains no static or traced indicators of exfiltration, install-time remote code execution, silent-relay, credential distribution,...

MINI-825F-JG4F-FGJ9

Bulletin has no description...

MINI-4MPV-646Q-CCWF

Bulletin has no description...

MINI-RGP2-3PRM-G2M2

Bulletin has no description...

MINI-7C88-HF44-3HFR

Bulletin has no description...

MINI-825W-4C52-RFJ9

Bulletin has no description...

MINI-9GMR-X6X6-MC3J

Bulletin has no description...

MINI-4C28-PM55-F938

Bulletin has no description...

MINI-P43R-HCMR-5WWG

Bulletin has no description...

MINI-522C-FW5G-M5X5

Bulletin has no description...

MINI-423G-79RF-4XJ2

Bulletin has no description...

MINI-VCF8-638W-82FM

Bulletin has no description...

MINI-9848-XRHQ-282P

Bulletin has no description...

MINI-6MFC-H745-F78R

Bulletin has no description...

PYSEC-2026-3491 OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...

Astra Linux – Vulnerability in Chromium

The use of after-free in HID in Google Chrome before version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-47973

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...