Rocky Linux 8 [CIQ] Security Update: wpa_supplicant / wpa_supplicant-debuginfo / etc (crlsa-2021_1686)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211686 advisory. wpasupplicant: P2P group information processing vulnerability CVE-2021-0326 Tenable has extracted the preceding description block directly from the CIQ security...

The vulnerability of the os and dns modules in the vm2 package manager NPM allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the DNS server Dnsmasq, related to errors in information processing, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the DNS server Dnsmasq is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SUSE CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the VMSVGA device component of the Oracle VM VirtualBox software lies in errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the virtual graphics adapter VMSVGA of the Oracle VM VirtualBox software allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Virtual Graphics Adapter VMSVGA in the Oracle VM VirtualBox virtualization software is related to errors in information processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and Thunderbird email client’s Cocoa browser engine, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Widget component: Mozilla Firefox, Firefox ESR, and the email client Thunderbird have vulnerabilities related to information processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the NTLM protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM protocol implementation in Windows operating systems is related to errors in information processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

EulerOS Virtualization 2.12.1 : binutils (EulerOS-SA-2026-2071)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with...

The vulnerability of the Open WebUI web interface, based on artificial intelligence, relates to errors in information processing, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Open WebUI-based web interface is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in information processing, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in information processing. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Microsoft Enterprise Security Token Service in terms of authentication and token management, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Enterprise Security Token Service for authentication and token management is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection software through backup using PowerProtect Data Domain for Dell EMC Data Domain Operating Systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

GHSA-98QH-XJC8-98PQ vulnerabilities

Vulnerabilities for packages: thingsboard, guacamole-client, geoserver, nacos-docker, flyway, kayenta, apache-hop-fips, apache-hop, nuxeo, apicurio-registry, flyway-fips, camunda-zeebe, nacos, dependency-track, hono, druid, debezium, kayenta-fips, ghidra, keycloak-fips, keycloak, camunda, seata,...

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

GHSA-46WH-PXPV-Q5GQ vulnerabilities

Vulnerabilities for packages: langfuse, wazuh-dashboard, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, langfuse-fips...

USN-8059-7: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; CVE-2025-22037, CVE-2025-37899...

The vulnerability of the Spotlight component in the macOS Sequoia, macOS Sonoma, and macOS Tahoe operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Spotlight component in the macOS Sequoia, macOS Sonoma, and macOS Tahoe operating systems is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the /cgi-bin/DownloadLog file in the Web Management Interface component of the Tenda AC21 microprogramming router allows a hacker to gain unauthorized access to protected information.

The vulnerability of the /cgi-bin/DownloadLog file of the Web Management Interface component of the Tenda AC21 microprogramming system for routers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access t...