UBUNTU-CVE-2026-41991

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID PID. This predictable filename is created without...

PYSEC-2026-431 OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2026-13549

creationtimestamp| type| source ---|---|--- 2026-06-29 11:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfw2fged2g...

CVE-2026-57965

creationtimestamp| type| source ---|---|--- 2026-06-29 11:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfkxxaqx2d 2026-06-29 12:59:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgk53jybe2t...

CVE-2026-13551

creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfgos4cc2t...

CVE-2026-25707

creationtimestamp| type| source ---|---|--- 2026-06-29 11:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgeejxf3d2y 2026-06-29 12:41:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgj6gnudt2t 2026-06-29 20:47:44+00:00| seen|...

CVE-2026-13560

A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carri...

CVE-2025-9033

creationtimestamp| type| source ---|---|--- 2026-06-29 10:31:34+00:00| seen| https://bsky.app/profile/wasacon.bsky.social/post/3mpgbv456bx2k...

CVE-2026-54820

creationtimestamp| type| source ---|---|--- 2026-06-29 10:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpgazmb4od2d...

CVE-2026-41991

CVE-2026-41991 affects GNU gzip’s gzexe utility, where insecure temporary file handling creates a TOCTOU vulnerability. If mktemp is unavailable in PATH, gzexe constructs a PID-based temporary path without exclusive access or existence checks. A local attacker can pre-create the predicted path as...

CVE-2026-41991 Predictable Temporary File in GNU gzip

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID PID. This predictable filename is created without...

CVE-2026-13545

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13532

creationtimestamp| type| source ---|---|--- 2026-06-29 08:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg3cpev2p2y 2026-06-29 10:46:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcqd2fox2g 2026-06-29 19:55:28+00:00| seen|...

CVE-2026-13535

creationtimestamp| type| source ---|---|--- 2026-06-29 08:28:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2zqxq6j2a 2026-06-29 10:47:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcshrsp62n 2026-06-29 19:57:07+00:00| seen|...

CVE-2026-13538

creationtimestamp| type| source ---|---|--- 2026-06-29 08:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg2qskonm2y 2026-06-29 19:50:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphb5bkz222g...

CVE-2026-54816

creationtimestamp| type| source ---|---|--- 2026-06-29 08:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpg2czqzdd2m...

CVE-2025-2902

creationtimestamp| type| source ---|---|--- 2026-06-29 08:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzht3xd223 2026-06-29 08:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpg45kog3k2e 2026-06-29 10:41:57+00:00| seen|...

CVE-2026-13534

creationtimestamp| type| source ---|---|--- 2026-06-29 07:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfzc4zwtg27 2026-06-29 10:47:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgcrrxjt72g 2026-06-29 19:58:43+00:00| seen|...

EUVD-2026-40045

A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2026-13545

CVE-2026-13545 affects D-Link DCS-935L 1.10.01. The vulnerability is in the function sub_400E40 of setconf.cgi (POST Parameter Handler); manipulating the UID argument enables an OS command injection. The attack can be launched remotely, and the exploit has been disclosed publicly. CVSS metrics in...