CLSA-2026-1789126805 xdg-dbus-proxy: Fix of CVE-2026-34080

Improve detection of eavesdrop=true in the D-Bus match-rule filter to address the following vulnerability: - CVE-2026-34080: the eavesdrop= match was located with a fixed-string search, so whitespace between 'eavesdrop' and '=' was not recognised and a client could install an eavesdropping match...

CVE-2026-84324

An use after free flaw was found in the Proxy component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533534913...

CVE-2026-73785

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

CVE-2026-73785 HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

CVE-2026-73785

HPE IceWall Federation Agent 4.0 and IceWall Federation Proxy 4.0 contain a denial-of-service vulnerability that can be triggered by a remote, unauthenticated attacker over the network with low complexity (CVSS 3.1: 7.5 HIGH ). Affected platforms include RHEL 7/8/9/10 and Windows. The impact is l...

CVE-2026-90449: Missing Authentication for Critical Function

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...

CVE-2026-73785: Improper Handling of Unexpected Data Type

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

PT-2026-90523

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An improper access control issue exists in a deployment mode designed to provide read-only access to a bundled packet-analysis component's interface. The system...

Linux Distros Unpatched Vulnerability : CVE-2026-88017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy drive...

PT-2026-89792

🚨 HIGH SEVERITY: CVE-2026-73785 CVSS 7.5 HPE IceWall Federation Agent & Proxy vulnerable to remote unauthenticated DoS attack. No user interaction required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel https://t.co/7OEcwyYjWK...

PT-2026-90516

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A deployment mode designed to provide read-only access to stored data fails to restrict request methods on certain application programming interface routes. This...

Fedora 45 : nsd (2026-c56ac69334)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c56ac69334 advisory. BUG FIXES: Fix for CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Thanks to Qifan Zhang, Palo Alto Networ...

CVE-2026-90452: Improper Certificate Validation

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...

Linux Distros Unpatched Vulnerability : CVE-2026-88018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with...

CVE-2026-89540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs mutexinit on sn-gssplock. Once the dentry is linked under...

CVE-2026-89540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs mutexinit on sn-gssplock. Once the dentry is linked under...

PT-2026-90518

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description When a specific authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that...

PT-2026-90521

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Requests sent from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange fail to verify the server...

PT-2026-90256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the sunrpc component where the function create use gss proxy proc entry publishes the /proc/net/rpc/use-gss-proxy endpoint before the init gssp clnt function...

PT-2026-96570

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp lock before publishing proc entry create use gss proxy proc entry publishes /proc/net/rpc/use-gss-proxy via proc create data before init gssp clnt runs mutex init on sn-gssp lock. Once the dentry is linked under...