CVE-2026-58201

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

AZL-103266 CVE-2026-91986 affecting package rust 1.96.1-2

gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and lo...

DEBIAN-CVE-2026-91986

gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing attackers to inject NUL/CR/LF bytes via crafted git URLs. Attackers can inject extra NUL-delimited protocol fields to spoof virtual hosts or inject newlines into daemon requests and lo...

DEBIAN-CVE-2026-91949

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91955 FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions

FreeRDP before 3.31.0 fails to validate client-supplied DesktopWidth and DesktopHeight values during GCC negotiation, allowing remote attackers to crash the server. Attackers can send crafted RDP packets with zero or oversized dimensions to trigger division-by-zero or assertion failures in...

CVE-2026-91949

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949

FreeRDP server versions 3.0.0 through 3.30.0 (before 3.31.0 ) contain a protocol negotiation bypass vulnerability. The root cause, as described in the associated GHSA advisory (GHSA-x7v6-xfx3-52j6), is that the server continues after a negotiation failure and dispatches a failure code as RDSTLS ,...

CVE-2026-91949 FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949 FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

EUVD-2026-78806

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949 FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91945 FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR

FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKIDCOREDEVICEIOCOMPLETION responses to trigger reads past...

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

rabbitmq: RabbitMQ: Authenticated user can bypass connection limits via stream protocol

A flaw was found in RabbitMQ. The stream protocol handler does not correctly enforce per-user and per-virtual host vhost connection limits. An authenticated user can exploit this by connecting through port 5552, bypassing the intended connection restrictions. This could lead to resource exhaustio...

rabbitmq-server: rabbitmq-server: Denial of Service via oversized stream protocol frame

A flaw was found in rabbitmq-server. The stream protocol fails to validate the declared length of incoming frames against the negotiated maximum frame size before buffering them into memory. When the stream plugin is enabled, a remote attacker can exploit this issue by declaring an oversized fram...

rabbitmq-server: rabbitmq-server: Access control bypass via PROXY protocol handling in MQTT

A flaw was found in rabbitmq-server. When native Message Queuing Telemetry Transport MQTT or MQTT over WebSockets operates behind a trusted proxy utilizing the PROXY protocol, the broker may drop the client IP address before enforcing user restriction checks. This failure causes external...

Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue: CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4182-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629...