Rocky Linux 9.6 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ALMALINUX9.6:CLSA-2026:1780323631)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780323631 advisory. - A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting...

Rocky Linux 9 [CIQ] Security Update: cockpit / cockpit-bridge / cockpit-debuginfo / cockpit-debugsource / etc (crlsa-2026_21468)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202621468 advisory. cockpit: Cockpit: Arbitrary command execution via crafted links in system logs UI CVE-2026-4802 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.6 [TuxCare] Security Update: cockpit / cockpit-bridge / cockpit-doc / cockpit-packagekit / etc (ALMALINUX9.6:CLSA-2026:1780323631)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780323631 advisory. - A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting...

CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...

CLEANSTART-2024-JF46935 Sensitive data could be exposed in logs of cloud-init before version 23

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in logs of cloud-init before version 23...

SUSE CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

EUVD-2026-89438

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

AlmaLinux 9.2 [TuxCare] Security Update: NetworkManager / NetworkManager-adsl / NetworkManager-bluetooth / etc (ALMALINUX9.2:CLSA-2026:1779533209)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779533209 advisory. - A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP...

CVE-2026-63713

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-63713

The Toptech TMS7 and TopHAT systems are vulnerable to a time-based blind SQL injection vulnerability. This security flaw exists within the "search" parameter of the view audit logs feature, located in the utilities section. Impacting the confidentiality and availability of the system, the vulnera...

CVE-2026-63713 Toptech TMS7 and TopHAT SQL Injection

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-63713 Toptech TMS7 and TopHAT SQL Injection

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

CVE-2026-97915

A flaw was found in the Linux kernel's Intel Versatile Processing Unit accel/ivpu driver. The driver fails to verify that firmware-supplied log names are null-terminated before printing them. This issue causes an out-of-bounds memory read that can leak adjacent data from shared memory buffers int...

CVE-2026-67406

A flaw was found in rabbitmq-server. When the Shovel plugin worker process crashes due to network or connection failures, it fails to sanitize its internal state before logging error reports. As a result, sensitive connection details and unencrypted credentials, including plaintext passwords, are...

CVE-2026-81862

Apache Airflow's Teradata provider contains a vulnerability where the S3ToTeradataOperator and AzureBlobStorageToTeradataOperator embed cloud storage credentials as plain string literals into CREATE MULTISET TABLE ... LOCATION statements. This occurs when using a private bucket/container without ...

BIT-JUPYTERHUB-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

PT-2026-102741

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

PT-2026-102898

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-53629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, an attacker with the READ right on logs can craft a URL for the...

CVE-2026-63713: Improper Neutralization of Special Elements used in an SQL Command

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...