CVE-2026-66379: Missing Authorization

An authenticated user may view private Puppet module metadata without repository read access...

CVE-2026-67587: Deserialization of Untrusted Data

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

CVE-2026-19654: Out-of-bounds Read

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

PT-2026-75904

This module enables you to pay for Commerce transactions using Paypal. The module doesn't sufficiently validate the transaction result in certain circumstances, allowing a malicious user to mark transactions placed without payment. This vulnerability only affects sites using the Payflow Link...

PT-2026-75908

This module enables you to display content in tabs, where each tab renders a block, a node, a view, or another Quick Tabs instance. The module did not correctly enforce access when rendering node and block tabs. It treated a neutral access result as a grant for node tabs and block plugins, and...

Linux kernel module CDNSP DoS

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68342

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket release ovpnpeerreleasep2p is called when a...

SUSE SLED15: perl / perl-32bit / perl-base / perl-base-32bit / perl-core-DB_File / etc (SUSE-SU-2026:3558-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3558-1 advisory. - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bi...

Linux Distros Unpatched Vulnerability : CVE-2026-68177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for enableevent trigger Triggers are now delayed from freein...

PT-2026-71126

🚨 HIGH: CVE-2026-67587 in Apache Airflow 3.3.0 allows arbitrary module import via deserialization. CVSS 8.8. Upgrade to 3.3.1+ immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/XWZsAPG9T8...

Linux kernel module CAN usb kvaser_usb_leaf Buffer Overflow DoS

The vulnerabilities of the functions kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback in the driver/net/can/usb/kvaserusb/kvaserusbleaf.c file of the Linux kernel are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities could allow an...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the havemonandosdmap function in the net/ceph/cephcommon.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-67260: Deserialization of Untrusted Data

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-44618

A flaw was found in Apache CXF. An insecure XML parser configuration within Apache CXF's WS-Transfer module may allow a remote attacker to perform XML External Entity XXE attacks. This could lead to information disclosure, denial of service, or server-side request forgery. Mitigation If using...

CVE-2026-68116

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module, specifically within its Multicast Database MDB functionality. When an operation to replace the source list of an MDB remote entry fails, the system incorrectly deletes existing sources. This can lead to a situation where...

CVE-2026-68122

A flaw was found in the Linux kernel's ovpn module. A race condition in the TCP error handling paths can lead to a reference count leak. This occurs when an internal object's reference count is incremented twice but decremented only once, preventing the object from being properly released. Over...

CVE-2026-68205

A flaw was found in the Linux kernel. The v4l2-fwnode module, responsible for video device node management, incorrectly handles module ownership during asynchronous subdevice registration. This can lead to a sensor module's reference count not being properly incremented. As a result, the module m...

CVE-2026-68428

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker with privileges to load and unload kernel modules could exploit a use-after-free vulnerability. This occurs when a vendor module is unloaded while the KVM module remains loaded, and a subseque...

CVE-2026-20898

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...