CVE-2026-73793

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-73793 HPE NonStop Middleware - Secret key handling vulnerability

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

EUVD-2026-100948

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-73793

The HPE NonStop Middleware software contains a secret key handling and data deserialization vulnerability (CWE-502). Impact includes potential Denial of Service (DoS) , memory corruption , Buffer Overflow , and Stack Overflow on affected systems. The vulnerability affects multiple components, inc...

CVE-2026-73793 HPE NonStop Middleware - Secret key handling vulnerability

HPE NonStop Middleware software has secret key handling and data deserialization vulnerability...

CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

CVE-2026-14441: Comparison Using Wrong Factors

A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...

PT-2026-98304

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic flaw in Java cache key handling object comparison could lead to improper identifier resolution when processing specific user account structures. This iss...

Logic flaw in Brocade SANnav Java cache key handling object comparison handling

A logic flaw in Brocade SANnav Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and...

MikroTik router flaws allow takeover without a password

CERT Polska warns that attackers are actively exploiting a chain of critical MikroTik RouterOS flaws to seize control of routers exposed to the internet. Although the warning comes from Poland’s national cybersecurity response team, MikroTik routers are sold worldwide, including in the US. The...

UBUNTU-CVE-2026-64389

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbdauthntlmv2 derives the NTLMv2 session key into sess-sesskey before it verifies the NTLMv2 response. ksmbddecodentlmsspauthblob then continues into KEYXCH even when...

EUVD-2026-48933

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbdauthntlmv2 derives the NTLMv2 session key into sess-sesskey before it verifies the NTLMv2 response. ksmbddecodentlmsspauthblob then continues into KEYXCH even when...

PYSEC-2026-3488 ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template.savepilimage of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A hig...

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument inputdata"image" results in use of weak hash. The attack...

CVE-2026-63823

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the handling of requestkeyauth payloads. This flaw occurs when the system attempts to use a key authorization payload after it has been released, which can lead to system instability or crashes. A local attacker could...

PT-2026-61332

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the keyring code where the find key to update function calls assoc array find without holding the RCU Read-Copy-Update read lock. RCU is a synchronization mechanism th...

PYSEC-2026-1905 Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint

Summary In the /license/ endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting XSS vulnerability when attempting to access a detailed license view that does not exist. Details In the /license/ endpoint, the licensedetailsview...

MiracleLinux 9 : bind-9.16.23-40.el9_8.1 (AXSA:2026-1031:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1031:06 advisory. bind: Resource exhaustion via malformed DNSKEY handling CVE-2025-8677 Tenable has extracted the preceding description block directly from the MiracleLinux...

PT-2026-53476

Impact A database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route for example POST /chat/completions a...

PT-2026-53025

Name of the Vulnerable Software and Affected Versions js-toml versions prior to 1.1.2 Description The interpreter incorrectly verifies if a key already exists in a parser-built container by using if objectkey instead of if key in object. When a key is assigned a falsy primitive value—such as fals...