CVE-2026-45066

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:42+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqp4m3gj25...

CVE-2026-45071

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:38+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqoyndsy2h 2026-07-16 16:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqrmkwbscm2z 2026-08-30 05:00:04+00:00| seen|...

CVE-2026-45068

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:29+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqoqvzdp2y 2026-07-16 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqrkv7liw422...

CVE-2026-45063

creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:14+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqocmwr72o 2026-07-14 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmxjszsha2t 2026-07-15 09:32:04+00:00| seen|...

CVE-2026-44933

creationtimestamp| type| source ---|---|--- 2026-05-20 10:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbpv2jchj2p...

CVE-2026-47730

creationtimestamp| type| source ---|---|--- 2026-05-20 10:32:34+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbpc6qxek26...

python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...

CVE-2026-7472

creationtimestamp| type| source ---|---|--- 2026-05-20 09:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmblw3hnlg2l...

CVE-2026-47668

creationtimestamp| type| source ---|---|--- 2026-05-20 09:31:29+00:00| published-proof-of-concept| https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc 2026-05-20 13:24:13+00:00| confirmed|...

python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...

CVE-2026-9057

creationtimestamp| type| source ---|---|--- 2026-05-20 07:01:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbdic7ytg2n...

CVE-2026-7522

creationtimestamp| type| source ---|---|--- 2026-05-20 06:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbckxjs6e2n...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: Fixed the WARNON message for the monitor mode on some devices. On devices without WANTMONITORVIF and likely without channel context support, we receive a WARNON message when changing the per-link settings of a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: nvme-multipath: fixed the suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I receive the following “suspicious RCU usage” warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: The function dcstreamrelease is called when removing the link enc assignment. Why A porting error caused the stream assignment for the link to be retained instead of being released—resulting in a memory leak. How...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: The link ID is cleared from the bitmap during link deletion after cleanup. Currently, during link deletion, the link ID is first removed from the validlinks bitmap before any cleanup operations are performed...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: stmmac: fixed the altrtsepcs function when using a fixed-link. When using a fixed-link, the altrtsepcs driver crashes due to a null-pointer dereference, as no phydevice is provided to the tsepcsfixmacspeed function...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sm8450: Fix NULL pointer dereference in icclinknodes The change to dynamic IDs for SM8450 platform interconnects left two links unconverted. This issue was fixed to avoid NULL pointer dereference during runtim...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211 – Correctly decodes TTLM with the default link map. The TID-to-link mapping TTLM elements do not contain any link mapping presence indicators when a default mapping is used, and parsing is skipped. It should be not...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - Ice: Fixed the KASAN error in the LAG NETDEVUNREGISTER handler. Currently, the same handler is called for both the NETDEVBONDINGINFO LAG unlink notification and the NETDEVUNREGISTER call. This causes problems, as the...