EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-2706)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA...

July 14, 2026-KB5102206 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

None None...

July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5102205)

None None...

July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5102204)

None None...

None: kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fixes and Enhancements: XFS data corruption using reflink almalinux-9.8.z JIRA:AlmaLinux-193937...

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

SUMMARY Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP incl. SIPLUS variant. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

PT-2026-59004

Summary Anyquery's server mode does not disable or restrict native SQLite disk manipulation commands. Unauthenticated attackers connecting to the MySQL-compatible server port can use the ATTACH DATABASE command to write arbitrary SQLite databases to any path on the victim's filesystem where the...

PT-2026-58988

Unbounded Pod Log Read via Attacker-Controlled limitBytes/tailLines Causes Memory Exhaustion Summary The MKP Model Context Protocol for Kubernetes server exposes a get resource MCP tool that proxies Kubernetes pod log requests. User-supplied limitBytes and tailLines parameters are parsed as...

PT-2026-58936

Summary Live PoC verified 2026-04-30 against a stock FacturaScripts master at 127.0.0.1:8081. A low-privilege user lowpriv created a customer with nombre = "=SUM1+1cmd|/c calc!A1". An admin then exported ListCliente to CSV via ?action=export&option=CSV. The downloaded file contains the raw payloa...

PT-2026-58004

Name of the Vulnerable Software and Affected Versions Opcenter X versions prior to V2604 Description An issue exists where the application fails to properly validate the algorithm specified in the JSON Web Token JWT header. This flaw allows an unauthenticated remote attacker to forge arbitrary...

PT-2026-58976

Summary Anyquery's server mode lacks input sanitization and access control over its built-in SQLite virtual table modules e.g., csv reader, log reader. Unauthenticated attackers connecting to the MySQL-compatible server port can create virtual tables pointing to local files on the system e.g.,...

EulerOS 2.0 SP10 : openssh (EulerOS-SA-2026-2664)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 In OpenSSH before 10.3, comman...

EulerOS 2.0 SP10 : openssh (EulerOS-SA-2026-2705)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 In OpenSSH before 10.3, comman...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21310-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21310-1 advisory. Changes in gh: - Update to version 2.96.0: Critical security fix: patched vulnerability in gh codespace jupyter that could allow command executi...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-2665)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA...

Description of the security update for Office 2016: July 14, 2026 (KB5002857)

None None...

ALSA-2026:39315 Moderate: libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 For more details about the security issues,...

Siemens Opcenter X

SUMMARY Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application. Siemens has released a new version for Opcenter X and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

Circular JSON Schema $ref causes unbounded CPU DoS in jsonrepair Summary SchemaRepairer.resolveschema in jsonrepair follows JSON Schema $ref pointers in an unbounded while loop without any cycle detection. An attacker who can supply a schema containing a self-referencing $ref e.g., via the demo...