171229 matches found
PT-2026-99417
Root has patched AIKIDO-2026-266277 in the piscina package for Root:npm. Multiple fixed versions available...
CVE-2026-86462: Insufficient Session Expiration
Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie keeps full access as that user after the password change, so th...
PT-2026-93402
Name of the Vulnerable Software and Affected Versions apache-airflow-providers-fab versions prior to 3.9.0 Description Changing a user password via the Admin user-edit PATCH endpoint fails to invalidate existing database-backed sessions. This allows an attacker possessing a victim's session cooki...
Linux Distros Unpatched Vulnerability : CVE-2026-89930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Service local TLB flushes on failed nested VM-Enter KVM services local TLB flushes on full nested VM-Exits through nestedvmxvmexit, but not if a nest...
Linux Distros Unpatched Vulnerability : CVE-2026-89918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Correctly handle end of VA space TLBI invalidation Our TLB invalidation by VA code is based on comparing two ranges, one defined by the TLB, and one...
Linux Distros Unpatched Vulnerability : CVE-2026-89843
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t...
Linux Distros Unpatched Vulnerability : CVE-2026-92035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153....
Linux Distros Unpatched Vulnerability : CVE-2026-89898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed. CVE-2026-89898 Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-89897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: Serialize exclusive follower delivery cecreceivenotify reads the exclusive follower pointer without the adapter lock. Serialize the no-follower chec...
SUSE SLES15 Security Update : kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:4185-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4185-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed:...
SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4170-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4170-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...
Linux Distros Unpatched Vulnerability : CVE-2026-92039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
SUSE SLES15 Security Update : kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2026:4193-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4193-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed:...
ROOT-APP-NPM-AIKIDO-2025-10436 AIKIDO-2025-10436 in multer - Patched by Root
Root has patched AIKIDO-2025-10436 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2025-10435 AIKIDO-2025-10435 in multer - Patched by Root
Root has patched AIKIDO-2025-10435 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root
Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...
Before You Patch. Why Patch Reliability Matters for Confident Deployment
Executive Summary Microsoft’s September 2026 security updates,KB5124008 and KB5124012 , have been linked to USB audio failures on some Windows systems, highlighting the operational risk that can accompany security patching. Qualys TruRisk Eliminate classified both updates as Low Reliability ,...
Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...
SUSE-SU-2026:4193-1 Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtabli...
