CLSA-2026-1778159627 libssh2: Fix of 2 CVEs

CVE-2019-13115: add bounds-checked stringbuf helpers and use them in diffiehellmansha1 to prevent out-of-bounds read on malformed KEX reply - CVE-2019-17498: harden bounds checks in SSHMSGDISCONNECT, SSHMSGDEBUG and SSHMSGGLOBALREQUEST handlers to prevent integer overflow / out-of-bounds read...

CVE-2026-6213

creationtimestamp| type| source ---|---|--- 2026-05-08 10:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116538489534406589 2026-05-08 10:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mldjlhz44r2o 2026-05-08 10:55:38+00:00| seen|...

CVE-2026-7330

creationtimestamp| type| source ---|---|--- 2026-05-08 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116538135511321220 2026-05-08 09:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y 2026-05-08 13:04:05+00:00| seen|...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issues: CVE-2025-2286...

SUSE-SU-2026:1763-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issues: -...

CVE-2026-29203

creationtimestamp| type| source ---|---|--- 2026-05-08 04:00:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-13 2026-05-08 11:49:02+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cpanel-security-advisory-av26-437 2026-05-08 12:44:10+00:00| seen|...

📄 Apache Airflow Databricks Provider Certificate Verification Bypass

The Apache Airflow Databricks Provider package disables TLS certificate verification when communicating with the Kubernetes API server during federated token exchange. Both the synchronous and asynchronous code paths use verify=False / ssl=False, allowing any attacker with network access within t...

GHSA-P64J-F4X9-WQ66 Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft

Summary parseAndValidateClientRedirect at internal/service/auth/auth.go:448 validates OAuth client-redirect URIs by comparing only scheme and host against the admin-configured allowlist. Path, query, and fragment are ignored. The initiator at /oauth/:provider/login embeds the caller-supplied...

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

A flaw was found in the OpenSSH GSSAPI Generic Security Service Application Program Interface delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the...

CVE-2026-43090

creationtimestamp| type| source ---|---|--- 2026-05-07 08:04:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116532251574592578...

CVE-2026-40076

creationtimestamp| type| source ---|---|--- 2026-05-07 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116530350683018033 2026-05-07 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml7vwe264u2v 2026-05-07 01:43:26+00:00| seen|...

Hotfix update for Exchange Server Subscription Edition RTM HU6: May 7, 2026 (KB5081755)

None None...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-016494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016494 advisory. Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions...

CVE-2026-43278

creationtimestamp| type| source ---|---|--- 2026-05-06 17:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528795236956577 2026-05-07 11:52:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116533148086350826 2026-07-02 06:18:13+00:00| seen|...

CVE-2026-43258

creationtimestamp| type| source ---|---|--- 2026-05-06 14:43:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528158216639257 2026-07-02 06:17:47+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43254

creationtimestamp| type| source ---|---|--- 2026-05-06 14:30:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116528107534757288...

CVE-2026-27693

Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality writes device names to XML output without proper escaping. An attacker with low privileges can create a device with a crafted name that injects XML...

CVE-2026-43121

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix userref race between scrub and refill paths The iozcrxputniovuref function uses a non-atomic check-then-decrement pattern atomicread followed by separate atomicdec to manipulate userrefs. This is serialized...

CVE-2026-43110

creationtimestamp| type| source ---|---|--- 2026-05-06 11:48:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527470440319391 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601 2026-07-06 05:54:49+00:00| see...

CVE-2026-43109

creationtimestamp| type| source ---|---|--- 2026-05-06 11:34:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527415042811896 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-09 01:17:37+00:00| seen|...