CVE-2026-83260

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlubb662a2f 2026-09-16 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyzkn7zf2p 2026-09-23 09:18:15+00:00| seen|...

CVE-2026-83107

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu6irlel2t 2026-09-16 01:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlxdyxptc2t 2026-09-23 09:46:41+00:00| seen|...

CVE-2026-83066

creationtimestamp| type| source ---|---|--- 2026-09-16 00:12:14+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu4ijv3s2w 2026-09-16 02:50:13+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4wyf3v72t 2026-09-23 04:07:07+00:00| seen|...

CVE-2026-83064

creationtimestamp| type| source ---|---|--- 2026-09-16 00:12:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu4asvrm2r 2026-09-16 00:50:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlwac2nwl2t 2026-09-23 09:47:58+00:00| seen|...

CVE-2026-83062

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu3yttex2j 2026-09-16 02:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4wrexzx2f 2026-09-23 06:07:07+00:00| seen|...

CVE-2026-83060

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu3jaizt2j 2026-09-16 02:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4eu5cu72r 2026-09-23 05:07:07+00:00| seen|...

CVE-2026-83058

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2zg6332t 2026-09-16 00:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlvodn7ut2t 2026-09-23 09:48:09+00:00| seen|...

CVE-2026-83055

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2bkvvx2j 2026-09-16 00:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlv4frvnq2b 2026-09-23 09:48:14+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-89852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several...

Linux Distros Unpatched Vulnerability : CVE-2026-89910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is...

Linux Distros Unpatched Vulnerability : CVE-2026-89843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t...

CVE-2026-92760: Incorrect Authorization

Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restricted keys to subscribe to all topics. Attackers with author-only or domain-only keys can access the mercure-info endpoint to receive visit data including referrer, user agent,...

The vulnerability of the MediaWiki’s API/queryAbuseFilters.php tool, which is used to implement the hypertext environment, allows a violator to gain unauthorized access to protected information.

The vulnerability of the MediaWiki hypertext environment implementation, as demonstrated in the api/queryAbuseFilters.php tool, involves insufficient protection for operational data. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected informati...

Debian dsa-6501 : firefox-esr - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6501 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6501-1 [email protected] https://www.debian.org/securit...

ROS-20260916-73-0004

The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

PT-2026-93289

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...

Linux Distros Unpatched Vulnerability : CVE-2026-89859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing...

CVE-2026-81870: Exposure of Sensitive Information to an Unauthorized Actor

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

CVE-2026-89859: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...