GHSA-RJCW-VG7J-M9RC Syft improper temporary file cleanup

Impact Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those archives into temporary storage then inspect the unpacked contents. Under normal operation Syft will remove the...

CVE-2026-33191

Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are vulnerable to null byte injection in URL path parameters. A remote attacker can inject null bytes URL-encoded as %00 into the supi path parameter of the UDM's...

ROS-20260320-73-0003

A vulnerability in the WebSocket protocol implementation of the libsoup library of the GNOME GUI is related to pointer dereferencing errors. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service by sending a specially crafted POST request...

free5GC security vulnerabilities

free5GC is an open-source project for the 5th generation 5G mobile core network. Versions of free5GC prior to 1.4.2 contained security vulnerabilities. These vulnerabilities stemmed from UDM’s improper handling of PATCH requests with empty supi path parameters. UDM incorrectly converted downstrea...

Tillitis TKey Client package security vulnerability

The Tillitis TKey Client package is an open-source client library in Go language developed by Tillitis AB, designed for controlling hardware security keys. Versions of the Tillitis TKey Client package prior to 1.2.0 contained security vulnerabilities. These vulnerabilities were caused by buffer...

Heimdall security vulnerabilities

Heimdall is an open-source application panel and launcher developed by LinuxServer.io. Versions of Heimdall prior to 0.17.10 contained security vulnerabilities. These vulnerabilities were caused by errors in encoding URL strings, which could lead to rule bypasses...

CVE-2026-32041

OpenClaw vulnerable in versions prior to 2026.3.1 due to authentication bootstrap error at startup, leaving browser-control routes accessible without authentication. Local or loopback SSRF paths can reach browser-control routes, including evaluate-capable actions, without valid credentials. CVSS ...

CVE-2026-32041 OpenClaw < 2026.3.1 - Unauthenticated Browser Control Access via Failed Auth Bootstrap

OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authentication. Local processes or loopback-reachable SSRF paths can exploit this to access browser-control routes including...

CVE-2026-32041

OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authentication. Local processes or loopback-reachable SSRF paths can exploit this to access browser-control routes including...

SUSE CVE-2026-23254

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading t...

Ubuntu: Security Advisory (USN-8106-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nextcloud Server Security Configuration

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the ohcihcdppcofprobe function in the drivers/usb/host/ohci-ppc-of.c file of the Linux device driver for USB chipsets is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenClaw Access Control Vulnerability

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from an Access Control Error vulnerability that is caused by a failure to properly handle authentication boot errors during startup. An attacker can exploit the vulnerability to cause a local process or...

Ubuntu 24.04 LTS / 25.10 : Valkey vulnerabilities (USN-8106-1)

The remote Ubuntu 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8106-1 advisory. It was discovered that Valkey incorrectly handled errors for lua scripts. An attacker could possibly use this issue to inject arbitrary informati...

EUVD-2026-12884

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading t...

USN-8106-1 valkey vulnerabilities

It was discovered that Valkey incorrectly handled errors for lua scripts. An attacker could possibly use this issue to inject arbitrary information into the response stream for other clients. CVE-2025-67733 It was discovered that Valkey incorrectly handled malformed cluster bus messages. A remote...

USN-8106-1: Valkey vulnerabilities

It was discovered that Valkey incorrectly handled errors for lua scripts. An attacker could possibly use this issue to inject arbitrary information into the response stream for other clients. CVE-2025-67733 It was discovered that Valkey incorrectly handled malformed cluster bus messages. A remote...

Linux kernel InfiniBand Heap Buffer Overflow DoS

The vulnerability of the mlx5revokemr function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...