23776 matches found
CVE-2026-13379
The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...
CVE-2026-50046
A use-after-free flaw was found in Unbound's DNS-over-TLS DoT forwarded query handling. A remote attacker can exploit a timing error during TLS handshake failures on a server under load to trigger a daemon crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, avoid...
EUVD-2026-50489
MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding Host/Origin protection...
CVE-2026-67346 Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass
Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the issafeurl function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve ...
CVE-2026-67346 Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass
Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the issafeurl function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve ...
CVE-2026-67346
Swarms 6.8.1 is affected by a server-side request forgery in the _is_safe_url function due to hostname validation via DNS resolution. This allows attackers to supply user-controlled image or audio URLs resolving to private, loopback, or metadata addresses to reach internal services and exfiltrate...
CVE-2026-46582
A flaw was found in Unbound, a Domain Name System DNS resolver. A remote attacker can exploit a vulnerability in how Unbound handles expired DNSSEC DNS Security Extensions records. By injecting a replayed wildcard record set, an attacker can cause Unbound to temporarily consider it secure, leadin...
AZL-94172 CVE-2026-58218 affecting package samba 4.18.3-2
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...
EUVD-2026-51128
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...
CVE-2026-58218
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...
CVE-2026-52863
A flaw was found in Unbound, a validating, recursive, and caching Domain Name System DNS resolver. When configured with specific modules and under heavy load, a memory corruption vulnerability can occur due to improper handling of view names during subquery processing. This issue could lead to a...
CVE-2026-58218
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...
firefox security update
An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.26. Security issues fixed: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit bsc1271983. CVE-2026-11331: potential wildcard...
SUSE-SU-2026:3426-1 Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.26. Security issues fixed: - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit bsc1271983. - CVE-2026-11331: potential...
CLEANSTART-2026-HA69693 Security fixes in kubernetes-dns-node-cache 1.26.8-r5
Package kubernetes-dns-node-cache version 1.26.8-r5 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-QO08875 Security fixes in kubernetes-dns-node-cache-fips 1.26.7-r1
Package kubernetes-dns-node-cache-fips version 1.26.7-r1 fixes 3 vulnerabilities: ghsa-c9v3-4pv7-87pr, ghsa-h75p-j8xm-m278, ghsa-9h8m-3fm2-qjrq...
CLEANSTART-2026-BG21646 Security fixes in kubernetes-dns-node-cache 1.25.0-r5
Package kubernetes-dns-node-cache version 1.25.0-r5 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507...
CLEANSTART-2026-BB57522 Security fixes in kubernetes-dns-node-cache 1.25.0-r8
Package kubernetes-dns-node-cache version 1.25.0-r8 fixes 17 vulnerabilities: CVE-2026-41178, CVE-2026-35579, CVE-2026-46600, CVE-2025-64702, CVE-2025-68151...