CVE-2026-63240

Technical details (affected software/versions, root cause, fix) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-63240

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...

The vulnerability of the pegasus_probe() function in the drivers/input/tablet/pegasus_notetaker.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

PT-2026-65711

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...

SUSE SLED15 / SLES15 Security Update : libssh (SUSE-SU-2026:3330-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3330-1 advisory. - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: deni...

Rockwell Automation CompactLogix Improper Validation of Integrity Check Value (CVE-2025-11694)

A security issue exists within the affected CompactLogix 5370 controllers due to missing validation of sequence numbers and source IP addresses in the CIP protocol. An attacker can abuse the exposed Connection IDs visible on the controller's web interface to send forged CIP packets, resulting in ...

SUSE SLES16 Security Update : runc (SUSE-SU-2026:22942-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22942-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations...

CVE-2026-66922

Pivotick used plain JavaScript objects as lookup tables indexed by caller-controlled graph node identifiers in its tree-layout and cycle-detection components. Node identifiers matching properties inherited from Object.prototype, such as constructor, toString, or proto, were not handled as ordinar...

UBUNTU-CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

Security update for libssh

This update for libssh fixes the following issues: CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure bsc127216...

The vulnerability in the `drivers/dma/xilinx/xdma.c` driver of the Linux operating system’s DMA core allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the drivers/dma/xilinx/xdma.c driver of the Linux operating system’s DMA core is related to errors in calculating the data buffer size. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerabilities of the functions bfq_put_stable_ref() and bfq_exit_icq_bfqq() in the block/bfq-iosched.c module support the block-level kernel support in the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions bfqputstableref and bfqexiticqbfqq in the block/bfq-iosched.c module are related to the reuse of previously freed memory due to competitive access to resources during the “race condition”. Exploiting these vulnerabilities can allow attackers to compromise the...

The CTDB protocol has bounds checking issues

== Summary: CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. Description CTDB fails to do a number of integrity checks on received packets. This includes: checking of field lengths against pack...

CVE-2026-65923

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions...

CVE-2026-65617

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

CVE-2026-65922

Technical details for CVE-2026-65922 are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-65922

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

EUVD-2026-49583

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...

CVE-2026-65923 Potential server-side request forgery in Artifactory Ansible repository handling

A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, to cause unintended server-side requests. The issue primarily affects confidentiality and integrity and has been addressed in fixed Artifactory versions...