PT-2026-72371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bypass exists in the Landlock security module regarding the LANDLOCK SCOPE SIGNAL restriction, which is intended to prevent sandboxed processes from signaling processes outside their...

PT-2026-72523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where a slab-use-after-free occurs during the cleanup of an advertising monitor addition failure. The function hci add adv monitor publish...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3s, mongo-tools, aws-otel-collector, nri-f5, nuclei, glow, chartmuseum, rabbitmq-default-user-credential-updater, cerbos, ipfs-cluster, nri-nginx, cluster-api-azure-controller, cni-plugins, dive, kapp-controller, kpt, witness, swagger, tekton-chains, kapp, wal-g,...

CVE-2026-72673 Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. Synthetics private locations can be shared with more than one space, and deleting one removes it from every space it is...

CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

CVE-2026-19311

The CVE-2026-19311 issue affects the Amazon OpenSearch Alerting plugin, specifically the Execute Monitor API. A missing authorization check in the API could allow an authenticated remote user to read, modify, or delete arbitrary index data through a crafted inline monitor request using unintentio...

CVE-2026-19311

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

EUVD-2026-57420

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

CVE-2026-16904

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16904

CVE-2026-16904 (IBM i) affects IBM i 7.3–7.6. A remote authenticated attacker could execute arbitrary commands due to improper privilege management during monitor owner reassignment. CVSSv3.1 base score 8.1 (High): vectors include AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; privileges required: LOW; net...

EUVD-2026-57358

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16904 IBM i is Affected By improper privilege management in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-16904

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-18125

creationtimestamp| type| source ---|---|--- 2026-08-12 06:46:25+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msujt4lqup2r 2026-08-12 12:25:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o 2026-08-13 09:48:11+00:00| seen|...

EUVD-2026-57007

The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode. An attacker could cause a denial-of-service condition or disrupt ovulation tracking and fertility monitoring workflow...

CVE-2026-68433 libceph: bound get_version reply decode to front len

In the Linux kernel, the following vulnerability has been resolved: libceph: bound getversion reply decode to front len handlegetversionreply uses msg-frontalloclen as the decode boundary for MONGETVERSIONREPLY. That is the size of the reused reply buffer, not the number of bytes actually receive...

CVE-2026-16904: Improper Privilege Management

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-19311: Undefined Behavior for Input to API

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...

PT-2026-71211

Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...