CVE-2026-43638 Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import

Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via POST /ciphers/import-organization by submitting an empty collections array, which causes the server-side permission check to be...

CVE-2026-43638

Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via POST /ciphers/import-organization by submitting an empty collections array, which causes the server-side permission check to be...

MINI-R25R-V535-RP36

Bulletin has no description...

MINI-HXG3-H86J-VFP7

Bulletin has no description...

MINI-26MX-G95G-8WPH

Bulletin has no description...

MINI-8FM2-JGXW-VCCH

Bulletin has no description...

bitwarden 安全漏洞

Bitwarden is an open-source password management backend service developed by Bitwarden. Versions of Bitwarden prior to 2026.4.1 contained security vulnerabilities. These vulnerabilities stemmed from the lack of authorization checks, allowing any authenticated user to write passwords to any...

Unity Linux 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-017541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017541 advisory. An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it...

MINI-55G4-V8WX-J339

Bulletin has no description...

MINI-JFH7-XHCM-5RGJ

Bulletin has no description...

openSUSE 16 Security Update : google-cloud-sap-agent (openSUSE-SU-2026:20669-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20669-1 advisory. This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-34986: github.com/go-jose/go-jose/v4: processing of JWE object with empty...

OESA-2026-2236 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp and ctnetlink. These attributes are used by the...

OESA-2026-2235 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim reports out-of-bounds access in sctp and ctnetlink. These attributes are used by the...

BELL-CVE-2026-43256

Bulletin has no description...

BELL-CVE-2026-43237

Bulletin has no description...

BELL-CVE-2026-43154

Bulletin has no description...

BELL-CVE-2026-43096 CVE-2026-43096 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43423 CVE-2026-43423 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43394

Bulletin has no description...

SUSE CVE-2026-39826

If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block...