ROOT-OS-UBUNTU-2404-CVE-2025-40172 CVE-2025-40172 in linux - Patched by Root

Root has patched CVE-2025-40172 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43311 CVE-2026-43311 in linux - Patched by Root

Root has patched CVE-2026-43311 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43062 CVE-2026-43062 in linux - Patched by Root

Root has patched CVE-2026-43062 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21926 CVE-2025-21926 in linux - Patched by Root

Root has patched CVE-2025-21926 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43073 CVE-2026-43073 in linux - Patched by Root

Root has patched CVE-2026-43073 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-21811 CVE-2025-21811 in linux - Patched by Root

Root has patched CVE-2025-21811 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

RHSA-2026:55841 Red Hat Security Advisory: unbound security update

Bulletin has no description...

DEBIAN-CVE-2026-72488

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdwaddelementgroupcount found by syzkaller The original implementation caused an out-of-bounds memory access in the sdwaddelementgroupcount for-loop when i == num. for i = 0; i ratesi && lane == group-lanesi...

MINI-94WG-G43X-Q7RJ

Bulletin has no description...

CLEANSTART-2026-GL72878 Security fixes in prometheus 3.13.1-r1

Package prometheus version 3.13.1-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-WS96350 Security fixes in kube-vip-fips 1.0.4-r1

Package kube-vip-fips version 1.0.4-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-p77j-4mvh-x3m3, CVE-2026-33186...

Important: Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.7.1 security update

This is an updated version of the Machine Deletion Remediation Operator. This Operator is delivered by Red Hat Workload Availability RHWA. The Machine Deletion Remediation MDR Operator works with the Node Health Check NHC Operator to reprovision unhealthy nodes using the Machine API. The MDR...

MAL-2026-13400 Malicious code in agenttunnels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264711675c5edabf4f3d0b1d544ca8bade34057c973ca614c82bca3cf8bdd5a1 agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker agenttunnels-session.lakshman111.workers.dev...

ROOT-OS-DEBIAN-12-CVE-2026-53296 CVE-2026-53296 in linux - Patched by Root

Root has patched CVE-2026-53296 in the linux package for Root:Debian:12. Multiple fixed versions available...

Important: kernel-livepatch-6.1.170-213.321

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycling ILOCK CVE-2026-64600...

CVE-2026-67217

cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in applypatch in cJSONUtils.c. For a replace operation that is missing its value member, or a move operation whose destination path cannot be resolved, the existing target member is detached and deleted before the operatio...

Vulnera

Strix The open-source AI pentesting tool. Autonomous AI h...

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

CVE-2026-16812 VeloCloud Orchestrator OS Command Injection

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...