MINI-2RMW-MJ6P-R56X

Bulletin has no description...

MINI-PCFC-55P7-4W69

Bulletin has no description...

MINI-HR6J-9337-CCXM

Bulletin has no description...

MINI-G7QR-9CR9-JH28

Bulletin has no description...

MINI-67CG-P9JJ-33R6

Bulletin has no description...

CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...

CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...

USN-8543-2 wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...

CVE-2026-2334 ) Missing Server-Side File Extension Validation in vsDesk

An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...

EUVD-2026-42235

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...

MINI-2HJ9-R69M-6QJP

Bulletin has no description...

MINI-5QQC-Q8MC-9W87

Bulletin has no description...

ROOT-OS-DEBIAN-11-CVE-2025-5987 CVE-2025-5987 in libssh - Patched by Root

Root has patched CVE-2025-5987 in the libssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root

Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root

Root has patched CVE-2026-66034 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root

Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-76833

creationtimestamp| type| source ---|---|--- 2026-08-20 15:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5g6een2r...

CVE-2026-61897 accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts

An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 root. A shell spawned by a helper script inherits ruid=0 and may reset its...