CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

CVE-2026-102726

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

EUVD-2026-89193

Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: xttcpmss: Check the remaining length before reading optlen Quoting the reporter: In net/netfilter/xttcpmss.c lines 53-68, the TCP option parser reads opi+1 directly, without validating the remaining option length. If t...

PYSEC-2026-3780

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

CVE-2026-26452

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

OPENSUSE-SU-2026:21669-1 Security update for wicked

This update for wicked fixes the following issues: Changes in wicked: - Fix two OOB reads in nicaptureinspectudpheader and improve: - Reject packets with iplen ihl to avoid a sizet underflow of the UDP length, which the checksum truncates to uint16t bsc1274627, CVE-2026-71401. - Set payloadlen to...

CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

PT-2026-82515

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

CVE-2026-26452

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

PT-2026-82511

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2026-26459

The ccoap library (commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5) contains a vulnerability in its option parsing logic . When processing malformed COAP messages with insufficient option data, the software can experience a segmentation fault . This vulnerability results in a High availability im...

CVE-2026-26459: Out-of-bounds Write

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

EUVD-2026-67099

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

PT-2026-82606

Name of the Vulnerable Software and Affected Versions openssl-encrypt versions prior to 1.4.9 Description The software fails to redact file passwords in the --debug argv dump when passwords are provided using bundled short-option spellings e.g., -apHunter2 or abbreviated long-option spellings e.g...

CVE-2026-26452

The ccoap software (specifically commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5) contains a vulnerability in its option parsing logic . Processing COAP messages that contain invalid option numbers can trigger a segmentation fault , leading to a denial of service. The CVSS 3.1 score for this vuln...

EUVD-2026-67095

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2026-26452: Improper Input Validation

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers...

CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...