PT-2026-95031

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

Security update for perl-Net-DNS (moderate)

openSUSE security update: security update for perl-net-dns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21859-1 Rating: moderate References: bsc1272212 bsc1272214 bsc1278084 Cross-References: CVE-2026-64193 CVE-2026-64194 CVE-2026-81928 CVSS...

Oracle Linux 10 : unbound (ELSA-2026-68291)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-68291 advisory. - Fix CVE-2026-50252: prevent cache poisoning via shared ports - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow - Fix CVE-2026-44690 - Cross-zo...

PT-2026-94862

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the TXF key sanitiser within the iwlwifi module. The function iwl mvm frob txf key iter incorrectly calculates the memset start offset when a full key match...

PT-2026-94938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar thermal driver where the probe function calls thermal zone device enable before verifying if thermal zone device register with trips failed. This sequence can...

PT-2026-94936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Universal Disk Format UDF implementation where an I/O error during the writing of the Logical Volume Integrity Descriptor LVID buffer to a block device causes the...

CVE-2026-20121 CIsco FTD Bypass Access List

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2026-20121 CIsco FTD Bypass Access List

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2026-20121

A logic error in the Object Group Search (OGS) implementation of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to bypass configured access controls by sending traffic that should be blocked through the device. A successful exploit could let the attacker rea...

EUVD-2026-81153

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2026-20120 Cisco FTD ACL bypass vulnerability

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2026-20120 Cisco FTD ACL bypass vulnerability

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2026-20120

CVE-2026-20120 affects the ACL Object Group Search (OGS) implementation in Cisco Secure Firewall ASA and FTD Software. A logic error in how group access control policies (ACPs) are populated when OGS is configured allows an unauthenticated, remote attacker to send traffic that should be blocked t...

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities

Multiple vulnerabilities in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access...

SUSE CVE-2026-92238

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92360

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

CVE-2026-92360 ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation

A weakness has been identified in ag-ui-protocol ag-ui 1.0. The impacted element is the function prepareRunAgentInput of the file agent/agent.ts of the component Event Application Layer. This manipulation of the argument TEXTMESSAGESTART causes origin validation error. Remote exploitation of the...

CVE-2026-90044

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix Use-After-Free in AIO error path In ffsepfilewriteiter and ffsepfilereaditer, when ffsepfileio fails with an error other than -EIOCBQUEUED, the iodata structure p is freed. However, for AIO operations, the...

DEBIAN-CVE-2026-89977

In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: check MMIO mapping errors in probe devmplatformioremapresource returns an error pointer when the register resource cannot be mapped. ethosuprobe stores it and continues until initialization dereferences it through...