CVE-2026-90248

A flaw was found in the Linux kernel's network scheduler component net/sched: clsapi. A race condition exists in the tcnewtfilter function during the insertion of a new protocol. If a process loses a race to insert a protocol, its error handling path may incorrectly remove an active network...

batea

Batea Una batea es una bandeja grande y poco profunda de madera o hierro utilizada tradicionalmente por los buscadores de oro para lavar arena y grava y recuperar pepitas de oro. Batea es un marco de clasificación de dispositivos de red basado en contexto que utiliza la familia de algoritmos de...

CVE-2026-59277

Spring Security 7.1.0 contains a misclassification flaw in the InetAddressMatchers utility. The matchInternal() and matchExternal() builders fail to recognize the IPv4 and IPv6 any-local addresses (0.0.0.0 and :: ) as internal, causing matchExternal() to classify them as external. This enables ac...

CVE-2026-59277 Spring Security InetAddressMatchers Incomplete Internal Network Classification

Spring Security's InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. Spring Security 7.1.0...

CVE-2026-59277 Spring Security InetAddressMatchers Incomplete Internal Network Classification

Spring Security's InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. Spring Security 7.1.0...

CVE-2026-59277 Spring Security InetAddressMatchers Incomplete Internal Network Classification

Spring Security's InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. Spring Security 7.1.0...

cve-2026-59277 - LOW - Spring Security InetAddressMatchers Incomplete Internal Network Classification

cve-2026-59277 - LOW - Spring Security InetAddressMatchers Incomplete Internal Network Classification...

CVE-2026-69198 ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

Cybersecurity and Class M Planets

I was considering another debate about appropriate cybersecurity measures and I had the following thought: not all networks are the same. Profound, right? This is so obvious, yet so obviously forgotten. Too often when confronting a proposed defensive measure, an audience approaches the concept fr...