Security Bulletin: IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings (CVE-2026-14522 & CVE-2026-14519)

Summary IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings. Vulnerability Details CVEID:CVE-2026-14522 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to execute arbitrary commands due to improper neutralization...

Security Bulletin: IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability (CVE-2026-15435)

Summary IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability. Vulnerability Details CVEID:CVE-2026-15435 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request...

perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...

CVE-2026-51295

SQLite 3.41 is vulnerable to a use-after-free in the jsonExtractFunc function, where premature release of parsed JSON object memory leads to illegal access of freed pointers. This remote flaw allows crafted SQL queries to crash the service and may leak sensitive memory information. Root cause: pr...

CVE-2026-51295

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-51292

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

RockyLinux 8 : perl:5.32 (RLSA-2026:48225)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:48225 advisory. perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVE-2026-9538 Tenable has extracted the preceding description...

CVE-2026-51291

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Implementing Homomorphic Encryption-Based Logic Locking in System-On-Chip Designs

This study presents a logic locking scheme based on the binary Ring Learning With Errors algorithm, implemented in a RISC-V System-on-Chip design. Unlike traditional logic locking methods that require providing users with raw locking parameters, the proposed approach secures critical logic paths ...

CVE-2026-51272

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-51293

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-51294

CVE-2026-51294 affects SQLite 3.41, with a use-after-free vulnerability in the jsonArrayLengthFunc function (json.c). The available data specify the vulnerable component and the function but do not provide explicit exploit details, affected subcomponents, versions beyond 3.41, or concrete remedia...

Linux Distros Unpatched Vulnerability : CVE-2026-62268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - borgbackup - None borgbackup2 - None Ubuntu Linux - Unknown description CVE-2026-62268 Note that Nessus relies on the presence of the package as...

CVE-2026-51294

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-51290

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-51290

CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.

CVE-2026-51293

CVE-2026-51293 is a use-after-free in SQLite 3.41. The vulnerability occurs in the jsonBlobAppendNode() function when it is invoked after sqlite3DbFree() has been called on the aBlob member of the Parse structure. Documents do not provide exploit details, affected version ranges beyond 3.41, or r...

RHEL 8 : perl:5.32 (RHSA-2026:48225)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:48225 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes:...

CVE-2026-51272

The connected AttackerkB entry documents a vulnerability in schreibfaul1 ESP32-audioI2S 3.4.5: a heap-based buffer overflow in latinToUTF8() used for Latin-1 to UTF-8 conversion. The code determines the required buffer size by simply doubling the input length and reallocates a heap buffer without...

CVE-2026-51292

CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...