CVE-2026-100556

The OpenClaw npm package (versions >= 2026.5.2 and < 2026.8.1 ) contains an incorrect authorization vulnerability within WhatsApp group handling. An attacker who is permitted to send ordinary messages but restricted from using owner commands can exploit this by issuing the /new command. Th...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CVE-2026-100528 OpenClaw before 2026.8.1 Credential Disclosure via Provider Endpoint

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

CLEANSTART-2026-BY91929 Security fix for ghsa-hrxh-6v49-42gf applied in: loki 3.7.1-r2, secrets-store-csi-driver-provider-aws 3.1.4-r1

ghsa-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-100556: Incorrect Authorization

OpenClaw npm package openclaw versions = 2026.5.2 and 2026.8.1 contain an incorrect authorization vulnerability in WhatsApp group handling. A group sender who is admitted for ordinary messages but denied by commands.allowFrom or owner command authorization can issue the /new command to reset the...

CVE-2026-100528: Exposure of Sensitive Information to an Unauthorized Actor

OpenClaw npm package 'openclaw' before 2026.8.1 could send third-party provider credentials to the wrong endpoint. In affected versions, when a third-party provider uses an OpenAI-compatible API and the resolved model metadata lacks a concrete base URL, a pinned session that continues after a mod...

PT-2026-99193

Name of the Vulnerable Software and Affected Versions openclaw versions 2026.5.2 through 2026.8.0 Description An incorrect authorization issue exists in WhatsApp group handling. A group sender who is permitted to send ordinary messages but is restricted by commands.allowFrom or owner command...

SUSE SLES12: gnome-shell / gnome-shell-browser-plugin / gnome-shell-devel / etc (SUSE-SU-2026:4350-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4350-1 advisory. This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote...

CVE-2026-84458

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-63204 Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, an authenticated user with agent permissions can supply an arbitrary AI analytics run identifier to the ticket summarize endpoint and receive the AI provider error message stored for that run, even if the run...

CVE-2026-92161 FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the Discord OAuth provider does not check the verified field returned for an OAuth email before passing the address to Flarum core as trusted through...

Security update for gnome-shell

This update for gnome-shell fixes the following issue: CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:4350-1 Security update for gnome-shell

This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619...

EUVD-2026-86475

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

PT-2026-98894

Name of the Vulnerable Software and Affected Versions FriendsOfFlarum OAuth versions prior to 1.7.4 FriendsOfFlarum OAuth versions prior to 2.0.0-beta.4 Description An account takeover issue exists when the Discord OAuth provider is enabled. The provider fails to check the verified field of the...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Octavia vulnerabilities (USN-8814-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8814-1 advisory. It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticate...

CVE-2026-97636

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

CVE-2026-97636

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...

CVE-2026-97636 Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key

Apache Airflow HashiCorp provider: the HashiCorp Vault secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret...