170521 matches found
CVE-2026-90486
A server-side request forgery (SSRF) vulnerability exists in openstatusHQ openstatus , specifically in the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The affected functionality is not further detailed in the provided documents. The vulnerability allows a remote attacker...
SUSE-SU-2026:23679-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...
Linux Distros Unpatched Vulnerability : CVE-2026-89570
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-fre...
Linux Distros Unpatched Vulnerability : CVE-2026-80973
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bou...
Linux Distros Unpatched Vulnerability : CVE-2026-89462
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: max17040: propagate register read errors max17040getvcell and max17040getsoc ignore errors returned by regmapread. When an I2C transfer fails, th...
Linux Distros Unpatched Vulnerability : CVE-2026-80960
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: validate on-media segnum against the cache device size segnum is read from the crc32c-only superblock, so whoever supplies the cache device on a tabl...
Linux Distros Unpatched Vulnerability : CVE-2026-89762
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in...
Linux Distros Unpatched Vulnerability : CVE-2026-89542
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is a...
Linux Distros Unpatched Vulnerability : CVE-2026-80954
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: Fix unlocked dereference of dev-desc in i3cdevicegetsupportedxfermode i3cdevicegetsupportedxfermode uses dev-desc to obtain the master controller. However,...
Linux Distros Unpatched Vulnerability : CVE-2026-89601
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext2: Fix lost inode updates for ISSYNC inodes ext2setsize and ext2xattrset2 had a construct like: if ISSYNCinode syncinodemetadatainode, 1 %NASLMINLEVEL 80900...
Linux Distros Unpatched Vulnerability : CVE-2026-89516
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Don't BUGON a destroyed DSQ in processdeferredreenqusers scxbpfdsqreenq queues a...
Linux Distros Unpatched Vulnerability : CVE-2026-89757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mglru: fix and remove redundant unevictable folio handling sortfolio has a shortcut for moving folios that are no longer evictable but are still sitting on a...
Linux Distros Unpatched Vulnerability : CVE-2026-80969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It'...
PT-2026-90724
Name of the Vulnerable Software and Affected Versions openstatusHQ openstatus versions up to f04c827112f30a11d571ebdad3892826034d6265 Description A remote attacker can exploit a flaw in the apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts file to perform server-side request forgery...
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9
CVE-2026-59248 affecting package rabbitmq-server for versions less than 3.13.7-9. A patched version of the package is available...
CVE-2026-66484 affecting package cpio for versions less than 2.14-2
CVE-2026-66484 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10
CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6
CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...