CVE-2026-66723

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66723

CVE-2026-66723 affects MWDB Core versions 2.2.0 up to but not including 2.19.0. The Vulnerability: Remote Instances proxy API fails to verify authentication for incoming requests, allowing an unauthenticated remote attacker to perform actions on a remote MWDB instance using the API key’s identity...

CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

EUVD-2026-50359

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-66723

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

CVE-2026-59251

A flaw was found in Erlang/OTP's publickey application. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted X.509 certificate chain during a Transport Layer Security TLS handshake. This causes the certificate path validation process to consume excessiv...

CVE-2026-64445

A flaw was found in the rtl8723bs Wi-Fi driver within the Linux kernel. During shared-key authentication, an attacker on an adjacent network could send a specially crafted frame. This could lead to an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing ...

Security update for python-dulwich

This update for python-dulwich fixes the following issue CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:3408-1 Security update for python-dulwich

This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py bsc1271525...

CVE-2026-64316

A flaw was found in the Linux kernel's crypto: caam module. This vulnerability allows for information disclosure where sensitive cryptographic key material could be leaked at runtime. This occurs when the CONFIGDYNAMICDEBUG option is enabled, due to improper guarding of key dumps in the setkey an...

Sensitive Information Disclosure

kirby-modules is vulnerable to Sensitive Information Disclosure. The vulnerability is due to insufficient authorization checks in the plugin activation dialog, where any authenticated Kirby Panel user can retrieve the full plaintext commercial license key, allowing attackers to reuse the key to...

SUSE-SU-2026:22978-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

OPENSUSE-SU-2026:21477-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

ALSA-2026:47756 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in AlmaLinux OpenS...

Linux Distros Unpatched Vulnerability : CVE-2026-18047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. B...

NewStart CGSL MAIN 6.06 : ipv6nat-selinux Multiple Vulnerabilities (NS-SA-2026-0054)

The remote NewStart CGSL host, running version MAIN 6.06, has ipv6nat-selinux packages installed that are affected by multiple vulnerabilities: - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This...

PT-2026-65809

MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...

Enhancing the Security of Coherent One-Way Quantum Key Distribution Using CHSH Correlations

The coherent one-way COW protocol is a quantum key distribution scheme that has attracted significant attention, leading to the development and commercialization of practical implementations. Despite this progress, the security of the COW protocol has remained a fundamental challenge since its...

Apache Camel JIRA Java Framework Unauthorized Access

The vulnerability of the Apache Camel JIRA Java framework involves bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an intruder to gain unauthorized access to read, modify, add, and delete objects in the target JIRA system...