MINI-3FWP-PFQH-P2CX

Bulletin has no description...

MINI-W449-RPVW-P886

Bulletin has no description...

MINI-3J2J-RCR6-MRW8

Bulletin has no description...

MINI-CX35-J43X-RF67

Bulletin has no description...

MINI-922H-F598-2W2R

Bulletin has no description...

MINI-7RP6-VXRP-7V4P

Bulletin has no description...

MINI-G26Q-66MW-5JCQ

Bulletin has no description...

MINI-X258-F394-CRRX

Bulletin has no description...

MINI-XQPF-33RX-7WHC

Bulletin has no description...

MINI-6GFX-53WV-39CM

Bulletin has no description...

MINI-MJRC-7749-H6CQ

Bulletin has no description...

MINI-HHCG-MF8V-3FJ6

Bulletin has no description...

MINI-89HG-8459-24G7

Bulletin has no description...

MINI-JFJJ-46CP-7GJ2

Bulletin has no description...

CVE-2026-49187 Hard-coded APK Resource Credentials & Scepters

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse...

DEBIAN-CVE-2026-8829

HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing HTML::Entities::decodeentities cached a pointer repl into the entity-value SV returned by hvfetch on the entity2char hash. When the input SV was identical to a value SV in that hash, and...

SUSE CVE-2026-28955

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-41011

The CVE affects BOSH: all versions prior to v282.1.12 (inclusive). PackagePersister.validate_tgz constructs a tar command (tar -tf #{tgz}) using a name derived from release.MF without Shellwords.escape, and passes it to Bosh::Common::Exec.sh (via /bin/sh -c). The Models::Package validation runs a...

SUSE CVE-2026-42342

React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the manifest endpoint, resulting in response...

SUSE CVE-2026-43660

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being...