Rocky Linux 8 [CIQ] Security Update: wpa_supplicant / wpa_supplicant-debuginfo / etc (crlsa-2021_1686)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211686 advisory. wpasupplicant: P2P group information processing vulnerability CVE-2021-0326 Tenable has extracted the preceding description block directly from the CIQ security...

vm2 os dns Module Data Compromise

The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Dnsmasq Unauthorized Access

The vulnerability of the DNS server Dnsmasq is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SUSE CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

Oracle VM VirtualBox VMSVGA Unauthorized Access

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software lies in errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

VirtualBox VMSVGA Unauthorized Access

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to errors in information processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Widget Component Mozilla Firefox ESR Thunderbird Unauthorized Access

The vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird have vulnerabilities related to information processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NTLM Spoofing

The vulnerability of the NTLM protocol implementation in Windows operating systems is related to errors in information processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

EulerOS Virtualization 2.12.1 : binutils (EulerOS-SA-2026-2071)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with...

Open WebUI Unauthorized Access

The vulnerability of the Open WebUI-based web interface is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Enterprise Security Token Service Authentication Bypass

The vulnerability of the Microsoft Enterprise Security Token Service for authentication and token management is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Visual Studio Code Editor Information Disclosure

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in information processing. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

Data Protection Software PowerProtect Data Domain Unauthenticated Access

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

GHSA-98QH-XJC8-98PQ vulnerabilities

Vulnerabilities for packages: ghidra, apicurio-registry, nacos, keycloak-fips, druid, thingsboard, hono, dependency-track-apiserver, nacos-docker, kayenta-fips, guacamole-client, flyway, geoserver, flyway-fips, nuxeo, camunda-zeebe, debezium, sonarqube, seata, apache-hop-fips, dependency-track,...

OpenStack Barbican Unauthorized Access

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

GHSA-46WH-PXPV-Q5GQ vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards, opensearch-dashboards-fips, wazuh-dashboard, langfuse, kibana...

USN-8059-7: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...

Spotlight Component Unauthorized Access

The vulnerability of the Spotlight component in the macOS Sequoia, macOS Sonoma, and macOS Tahoe operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Tenda AC21 Web Management Interface DownloadFlash Unauthorized Access

The vulnerability of the /cgi-bin/DownloadFlash file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access...