CVE-2026-86462: Insufficient Session Expiration

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie keeps full access as that user after the password change, so th...

Linux Distros Unpatched Vulnerability : CVE-2026-89898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed. CVE-2026-89898 Note that...

SUSE SLES15 Security Update : kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4170-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4170-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: -...

ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root

Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2025-10436 AIKIDO-2025-10436 in multer - Patched by Root

Root has patched AIKIDO-2025-10436 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2025-10435 AIKIDO-2025-10435 in multer - Patched by Root

Root has patched AIKIDO-2025-10435 in the multer package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-42004 CVE-2022-42004 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2022-42004 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...

SUSE-SU-2026:4193-1 Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtabli...

CVE-2026-92033

Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156...

ROOT-APP-MAVEN-CVE-2022-25857 CVE-2022-25857 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-25857 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59725 CVE-2026-59725 in engine.io - Patched by Root

Root has patched CVE-2026-59725 in the engine.io package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root

Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59879 CVE-2026-59879 in immutable - Patched by Root

Root has patched CVE-2026-59879 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:11. Multiple fixed versions available...

Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...

SUSE-SU-2026:4183-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtablist...

SUSE-SU-2026:23835-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device...

SUSE-SU-2026:23833-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device...

SUSE-SU-2026:23836-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-64561: KVM: x86: Check for invalid/obsolete root...