CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libproxy (UTSA-2026-093632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093632 advisory. url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms CVE-2026-14981, CVE-2026-15064, CVE-2026-15328, CVE-2026-15325, CVE-2026-15057, CVE-2026-11897, CVE-2026-10842, CVE-2026-9563, CVE-2026-50645, CVE-2026-9322, CVE-2026-9171,...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities when servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details...

aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...

MiracleLinux 9 : fence-agents-4.10.0-110.el9_8.5 (AXSA:2026-1605:15)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1605:15 advisory. httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies CVE-2026-59939 Tenable has extracted the preceding description bloc...

SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2026:3674-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3674-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes...

CVE-2026-69225

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69225

Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier are affected by an information disclosure vulnerability that allows a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body. The NVD scores this CVSS 7.5 (HIGH) with high confidentiality impact, whi...

CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

EUVD-2026-64154

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224

Esri Portal for ArcGIS versions 12.0 and earlier are affected by an information disclosure vulnerability that may allow a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body under difficult-to-reproduce circumstances. The primary impact is confidentiality (h...

EUVD-2026-64152

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

Summary IBM i is vulnerable to denial of service CVE-2026-11897, CVE-2026-15057, CVE-2026-14981, CVE-2026-64958, CVE-2026-57819, CVE-2026-54225, HTTP response smuggling CVE-2026-15064, CVE-2026-15328, CVE-2026-15325, and bypassing of security constraints CVE-2026-10842 in WebSphere Application...

SUSE-SU-2026:3674-1 Security update for sccache

This update for sccache fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274146. - CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values bsc1273881. - CVE-2026-66754: rouill...

CVE-2026-69225: Exposure of Sensitive Information to an Unauthorized Actor

There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...