8298 matches found
SUSE CVE-2026-49338
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subsonic API endpoints /rest/deletePlaylist.view and /rest/getPlaylist.view perform no per-resource authorization. Once authenticated as any user admin or not, an attacker can delete...
CVE-2026-67596
CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...
CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg
CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...
CVE-2026-54367
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
CVE-2026-54367 CentreStack < 17.2 Unauthenticated API Authorization Bypass
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
EUVD-2026-51103
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
CVE-2026-54367
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...
[SECURITY] [DSA 6404-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6404-1 [email protected] https://www.debian.org/security/ Aron Xu July 30, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
CVE-2026-13577
A flaw was found in Dancer2. When Cryptographically Secure PseudoRandom Number Generator CSPRNG modules are not available, Dancer2 generates insecure session identifiers IDs. This occurs because the system falls back to using a less secure, built-in random number generator. An attacker could...
CVE-2026-44100
The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...
CLEANSTART-2026-ZQ47367 Security fixes in metrics-server-fips 0.5.2-r3
Package metrics-server-fips version 0.5.2-r3 fixes 4 vulnerabilities: ghsa-2xhq-gv6c-p224, ghsa-m425-mq94-257g, ghsa-wf43-55jj-vwq8, ghsa-wr2v-9rpq-c35q...
CLEANSTART-2026-JM58207 Security fixes in go-discover 0_git20250325-r1
Package go-discover version 0git20250325-r1 fixes 8 vulnerabilities: CVE-2026-42505, CVE-2026-39822, CVE-2026-42504, CVE-2026-42507, CVE-2026-42506...
CLEANSTART-2026-PU88836 Security fixes in solr 9.8.1-r0
Package solr version 9.8.1-r0 fixes 3 vulnerabilities: ghsa-3qp7-7mw8-wx86, ghsa-x4gw-5cx5-pgmh, ghsa-w573-9ffj-6ff9...
CLEANSTART-2026-EL73954 Security fixes in argo-cd 3.3.5-r1
Package argo-cd version 3.3.5-r1 fixes 13 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CLEANSTART-2026-XX23863 Security fixes in istio 1.27.1-r0
Package istio version 1.27.1-r0 fixes 4 vulnerabilities: ghsa-2464-8j7c-4cjm, ghsa-p436-gjf2-799p, CVE-2025-11065, CVE-2025-15558...
CLEANSTART-2026-QC69966 Security fixes in step-issuer 0.9.9-r1
Package step-issuer version 0.9.9-r1 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-MB11718 Security fixes in helm 3.19.0-r0
Package helm version 3.19.0-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-MY88598 Security fixes in local-static-provisioner 2.8.0-r0
Package local-static-provisioner version 2.8.0-r0 fixes 10 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...
CLEANSTART-2026-QV66806 Security fixes in cert-manager-fips 1.19.1-r0
Package cert-manager-fips version 1.19.1-r0 fixes 16 vulnerabilities: CVE-2025-61729, CVE-2025-61725, CVE-2025-61723, CVE-2025-58188, CVE-2025-58187...