CVE-2026-85649: Not Failing Securely

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2016-4883

Name of the Vulnerable Software and Affected Versions yast2-users versions prior to 3.1.47 Description The issue is related to the improper setting of empty password fields in /etc/shadow during an AutoYaST installation. This occurs when the profile does not contain inst-sys users, which might...