EUVD-2026-62856

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user export that includes the global settings table even though the rest of the export is user-scoped. The settings table...

CVE-2026-69220 vulnerabilities

Vulnerabilities for packages: conductor, zipkin, druid, cassandra-reaper, thingsboard, conductor-fips, nuxeo, traccar-fips, traccar...

CVE-2026-69219 vulnerabilities

Vulnerabilities for packages: conductor, zipkin, druid, cassandra-reaper, thingsboard, conductor-fips, nuxeo, traccar-fips, traccar...

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: openbao, docker-fips, podman, skaffold-fips, podman-fips, skaffold, ctop-fips, buildkitd, buildah, telegraf, buildkitd-fips, kubescape-server-fips, openbao-fips, buildah-fips, kubescape, docker-cli-buildx, kubescape-server, docker-cli-buildx-fips...

GHSA-HFG8-HC9C-6C3H vulnerabilities

Vulnerabilities for packages: openbao, docker-fips, podman, skaffold-fips, podman-fips, skaffold, ctop-fips, buildkitd, buildah, telegraf, buildkitd-fips, kubescape-server-fips, openbao-fips, buildah-fips, kubescape, docker-cli-buildx, kubescape-server, docker-cli-buildx-fips...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GO-2026-4950 vulnerabilities

Vulnerabilities for packages: dapr-fips, dapr...

CVE-2026-73500 vulnerabilities

Vulnerabilities for packages: milvus, minio, rancher-support-bundle-kit, kots, hubble, loki, kyverno, cilium, cilium-cli, cert-manager, multicluster-controlplane, external-dns, multicluster-controlplane-fips, reports-server, dapr, kine...

GHSA-6VCH-Q96H-7GC3 vulnerabilities

Vulnerabilities for packages: milvus, minio, rancher-support-bundle-kit, kots, hubble, loki, kyverno, cilium, cilium-cli, cert-manager, multicluster-controlplane, external-dns, multicluster-controlplane-fips, reports-server, dapr, kine...

CVE-2026-38755 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38753 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-JCQV-RJ94-JMX3 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-69219 vulnerabilities

Vulnerabilities for packages: druid, cassandra-reaper, zipkin, thingsboard...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-38755 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-9R55-P3JW-V652 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-38753 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-18849

IBM OpenBMC firmware (FW1060.00–FW1060.80) on Power 10 systems is vulnerable to arbitrary code execution via the BMC firmware update process. The root cause is CWE-22 (Path Traversal) . An attacker with authenticated administrator-level access to the BMC over an adjacent network can exploit this ...

CVE-2026-54742

Lemmy is a link aggregator and forum for the fediverse. From 0.19.18 until 0.19.19 and 1.0.0-alpha.20, a community moderator can feature or unfeature posts in other communities through federated CollectionAdd and CollectionRemove activities using CollectionType::Featured. After verifymodaction...

CVE-2026-17042

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM...