PT-2026-89318

🚨 HIGH: CVE-2026-88277 CVSS 8.8 - GeoVision GV-LPC2211 V1.13 vulnerable to authenticated command injection via ONVIF. Attackers can execute arbitrary commands as root. Patch immediately. CVE Vulnerability PatchNow https://t.co/0HQ3GCjvsH...

PT-2026-89275

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 Description An unauthenticated remote attacker can create arbitrary durable queues using the CORE protocol. This allows for unauthorized...

PT-2026-89276

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 Description An unauthenticated remote attacker using the CORE protocol can discover cluster node details by sending a SUBSCRIBE TOPOLOGY reques...

K000163275: Curl vulnerabilities CVE-2023-27533, CVE-2023-28319, CVE-2023-28320, and CVE-2023-38039

Security Advisory Description CVE-2023-27533 A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allo...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ac.intave:samples (>=0.0.4, <=0.0.13) +13884 more potentially affected by CVE-2026-87877 via com.github.luben:zstd-jni (>=1.3.8-5, <=1.5.7-13)

com.github.luben:zstd-jni MAVEN version =1.3.8-5, =0.0.1, =0.0.4, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =1.3.7 and more Source cves: CVE-2026-87877 Source advisory: SNYK:JAVA-COMGITHUBLUBEN-19659617...

CLSA-2026-1788960930 rsync: Fix of 5 CVEs

CVE-2026-70459: guard the parentndx consumer against an empty dirflist so a crafted first incremental file list cannot reach an uninitialised heap slot already blocked in els11 by the CVE-2026-53789 transfer-root rejection; added as defence in depth to match upstream's final state -...

sigcorr

SigCorr Passive Cross-Protocol Attack Detection for Mobile Core Networks SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber identity correlation. Features Cross-protocol correlation — Links SS7/MAP,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-16028

A flaw was found in Protocol::HTTP2 for Perl. A remote attacker could exploit this vulnerability by repeatedly opening and closing HTTP/2 streams. This action causes the system to retain residual entries for each closed stream, leading to an unbounded increase in memory usage. This memory...

nerva v1.69.6

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

Updated dovecot package fixes security vulnerabilities

submission-login: Panic when mailmaxuseripconnections is reached: Panic: epollctldel, 8 failed: Bad file descriptor. CVE-2026-33263 Dovecot IMAP LIST matchsub Exponential Backtracking — CPU Denial of Service. CVE-2026-33607 DoS by sending mail with bad header. CVE-2026-27852 dsync: Mail content c...

UBUNTU-CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

CVE-2026-87724

Tor before 0.4.9.12 interprets the CCRESPONSE extension even when CCREQUEST was not sent, which allows remote attackers to cause a denial of service crash because of corrupted congestion-control state. This is TROVE-2026-032...

SUSE CVE-2026-16028

Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...

SUSE CVE-2026-54755

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigger.go sum those values in uint32...

Towards Tackling Application Logic Flaws through Autonomous Formal-Logic Modeling and Automated Reasoning

Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are inherently tied to business-specific semantics and threat models, making their discovery and reasoning difficult...

OPENSUSE-SU-2026:11735-1 perl-Protocol-HTTP2-1.140.0-1.1 on GA media

These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security Advisory 0160

Security Advisory 0160 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with...

PT-2026-89713

These are all security issues fixed in the perl-Protocol-HTTP2-1.140.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux TLS Protocol Buffer Overflow

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...