CVE-2026-64551 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64551 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64511 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64511 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27

CVE-2024-7598 affecting package kubernetes for versions less than 1.30.10-27. A patched version of the package is available...

CVE-2026-68097 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68097 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4

CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...

CVE-2026-26081 affecting package haproxy for versions less than 2.9.11-8

CVE-2026-26081 affecting package haproxy for versions less than 2.9.11-8. A patched version of the package is available...

CVE-2026-63830 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-63830 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-54886 affecting package erlang for versions less than 26.2.5.21-4

CVE-2026-54886 affecting package erlang for versions less than 26.2.5.21-4. A patched version of the package is available...

CVE-2026-68117 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68117 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-71193

In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate-zone DB constraint are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter scheduler, creating an...

CVE-2026-73430

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:09+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-5xvq-cp9x-6p6r...

CVE-2026-73489

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:07+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-cqjc-rmpq-xprq...

CVE-2026-71194

In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS...

CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-73495

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and 1.0.0-M42, blaze-server can merge HTTP/1.1 chunked-body trailer fields into Request.headers. Because trailer fields are attacker-controlled, an unauthenticated remote client can inject...

CVE-2026-73429

Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEXECDHREPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::computesharedsecret function in...

CVE-2026-19654

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

CVE-2026-73495

CVE-2026-73495 affects blaze-server (Scala) prior to 0.23.18 and 1.0.0-M42, where HTTP/1.1 chunked-body trailer fields could be merged into Request.headers. Attacker-controlled trailers allow injection of arbitrary header names/values (e.g., X-Forwarded-For, internal authorization headers), bypas...

CVE-2026-73429 Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)

Russh is a Rust SSH client & server library. Prior to 0.62.4, a malicious SSH server can crash a russh client session with a malformed KEXECDHREPLY containing a server ephemeral value that is not 32 bytes long. The client-side Curve25519Kex::computesharedsecret function in...