Linux Distros Unpatched Vulnerability : CVE-2026-55567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent...

Astra Linux – Vulnerability in glib2.0

A flaw was discovered in glib before version 2.63.6. Due to random charset aliases, pkexec can leak content from files owned by privileged users to unprivileged users under certain conditions...

CVE-2026-18858

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858

IBM i 7.5 and 7.6 are affected by an information disclosure vulnerability in the OpenSSH component (5733-SC1). A local authenticated attacker can obtain information from a privileged file when using SSH, rooted in CWE-267 (Privilege Defined With Unsafe Actions). The impact is limited to confident...

EUVD-2026-71600

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858 IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858 IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

CVE-2026-18858: Privilege Defined With Unsafe Actions

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

PT-2026-85692

IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH...

Security Bulletin: IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH [CVE-2026-18858]

Summary IBM i is vulnerable to obtaining sensitive information from a privileged file CVE-2026-18858 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18858 DESCRIPTION: IBM i could allow a local authenticated attacker to obtain information from a...

CVE-2026-73584: Insecure Temporary File

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. Th...

USN-8579-1 snapd vulnerabilities

James Henstridge discovered that snapd's default apparmor template did not restrict access to systemd-userdbd varlink interface. A local attacker could possibly use this issue to obtain sensitive information. CVE-2024-5300 Qualys discovered that snap-confine can be tricked to create...

Exploit for Missing Authentication for Critical Function in Splunk

Splunk Enterprise — CVE-2026-20253 Training Lab Splunk En...

CVE-2026-46406 Claude Code: Insecure Temporary File in /copy Command Enables Response Disclosure and Symlink-Based File Write

Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path /tmp/claude/response.md without UID isolation, randomness, or symlink protection. The file was created world-readable 0644 in a world-traversable...

EUVD-2026-37682

Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service. The update service runs as NT AUTHORITY\SYSTEM and exposes a .NET Remoting interface over a named pipe without sufficient access controls or authorization. A local authenticated...

CVE-2026-2638

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...

CVE-2026-2638 X-VPN macOS website versions - Local Privilege Escalation

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...

CVE-2026-2638

Technical details beyond the summary are not publicly available in the provided documents. Monitor for updates.

CVE-2026-2638: Time-of-check Time-of-use (TOCTOU) Race Condition

A vulnerability in the quarantine and restore workflow of the X-VPN macOS website versions 77.0 through 77.5 allow a local attacker to leverage a race condition and symlink manipulation to achieve privileged file corruption...

CVE-2026-41489

Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. From 6.0 to before Core 6.4.2 and FTL 6.6.1, two shell scripts executed as root by systemd pihole-FTL-prestart.sh and pihole-FTL-poststop.sh read the files.pid path from this config...