Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skips the dev-iotlb flush for inaccessible PCIe devices without scalable mode. PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can cause a system hard lock when their link fails, eithe...

Astra Linux – Vulnerability in Network-Manager

A flaw was discovered in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. This would cause NetworkManager to crash, resulting in a denial of service...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in ipvsgetoutrt calls dstlinkfailure without ensuring skb-dev is set, leading to a NULL pointer dereference in fibcomputespecdst when ipv4linkfailure attempts t...

CVE-2023-28802

creationtimestamp| type| source ---|---|--- 2026-06-24 15:07:47+00:00| seen| https://gist.github.com/usualdork/84d156ab09027755f4c405b2f87af230...

CVE-2021-26810

creationtimestamp| type| source ---|---|--- 2026-06-24 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp26xcjn6p23...

CVE-2026-57439

creationtimestamp| type| source ---|---|--- 2026-06-24 15:06:19+00:00| published-proof-of-concept| https://github.com/gchq/CyberChef/security/advisories/GHSA-fx6f-382r-j72c 2026-07-11 00:05:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdei4ttcn2e...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to a lack of permission checks in the connect process. An attacker can exfiltrate credentials by specifying a malicious URL and leveraging credential IDs obtained through other means. Remediation There is no...

CVE-2026-9178

creationtimestamp| type| source ---|---|--- 2026-06-24 14:05:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp23jpf5gx2f 2026-06-25 20:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp5aoruwd32y...

CVE-2026-56237

creationtimestamp| type| source ---|---|--- 2026-06-24 13:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp222mff642y...

CVE-2025-71332

creationtimestamp| type| source ---|---|--- 2026-06-24 13:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozzaue52o2s 2026-06-25 11:39:45+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mp4dthrnkv2p 2026-07-14 11:07:06+00:00| seen|...

CVE-2026-57298

A cross-site request forgery CSRF vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key...

CVE-2026-57291

Missing permission checks in Jenkins Gitee Plugin 1288.v18bdebc9069b and earlier allow attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method...

CVE-2026-8865

creationtimestamp| type| source ---|---|--- 2026-06-24 11:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozs2b3vcp27...

OESA-2026-2695 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

CVE-2026-56052

creationtimestamp| type| source ---|---|--- 2026-06-24 11:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozrolt35i2m...

CVE-2026-52941

creationtimestamp| type| source ---|---|--- 2026-06-24 10:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqkrljyh2t 2026-07-01 02:47:23+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:25:03+00:00| seen|...

CVE-2026-52930

creationtimestamp| type| source ---|---|--- 2026-06-24 10:33:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozpngvuvj2t 2026-07-01 02:47:17+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:24:42+00:00| seen|...

CVE-2026-9721

creationtimestamp| type| source ---|---|--- 2026-06-24 09:16:24+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozle7e7yj2q...

GHSA-5W46-G9PQ-WH6F

creationtimestamp| type| source ---|---|--- 2026-06-24 07:42:24+00:00| seen| https://gist.github.com/alon710/0cc6180222e375f03b77f1081a3811f5...

CVE-2026-11370

The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'newlink' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations...