Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: a possible memory leak in mISDNdspelementregister has been fixed. After committing 1fa5ae857bb1 "driver core: get rid of struct device’s busid string array", the name of the device is allocated dynamically. Use putdevic...

Security Bulletin:Vulnerability in httpclient5-5.5.jar may affect IBM Infosphere Change Data Capture (CVE-2026-64607)

Summary A security vulnerability has been identified in httpclient5-5.5.jar, Apache HttpComponents Client. httpclient5-5.5.jar is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...

Release Information for Veeam Backup for Microsoft 365 8.6

Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, v8.4, or v8.5 deployment of Veeam Backup for Microsoft 365 to v8.6. install a new deployment of Veeam Backup for Microsoft 365 v8.6. After installing this release, the Veeam Backup for Microsoft 365 build number...

PT-2026-91286

Name of the Vulnerable Software and Affected Versions subhajitkhan online-clinic-management-system versions up to e9ee77a8827a1446220fa07ee693dc4d9a29a578 Description A remote SQL injection flaw exists in the doctorlogin.php file. This issue occurs when the doc mail and doc pswd arguments are...

CVE-2026-90524

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90524

jaychouchannel Tourism-Management-System contains a missing authentication flaw in the Update Endpoint component, allowing a remote unauthenticated attacker to manipulate an unknown function. The flaw was tracked in GitHub issue #11 and patched in commit 84d8ec3 . A proof-of-concept exploit has b...

EUVD-2026-77011

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...

CVE-2026-90520

jaychouchannel Tourism-Management-System is affected by an improper authorization flaw in the AuthorizationInterceptor.java file of the Authorization Interceptor component. The vulnerability allows a remote attacker with low privileges and no user interaction to exploit it, resulting in low impac...

Exegol v5.1.12

Exegol is a comprehensive cybersecurity environment designed by offensive security experts, for fellow hackers, with its community. It solves the common pain points of traditional security distributions by providing a modular and reliable toolkit that's made for the field. Want to know more about...

EUVD-2026-76917

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

PT-2026-90861

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

CVE-2026-90486

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

CVE-2026-90486 openstatusHQ openstatus resolve-custom-domain-rewrite.ts server-side request forgery

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

Linux Distros Unpatched Vulnerability : CVE-2026-89469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: lp8727: fix use-after-free in lp8727releaseirq lp8727isrfunc, the threaded IRQ handler, is the only caller that arms pchg-work via...

CVE-2026-56136 affecting package ntfs-3g for versions less than 2022.10.3-4

CVE-2026-56136 affecting package ntfs-3g for versions less than 2022.10.3-4. A patched version of the package is available...

CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

CVE-2026-89767

A flaw was found in the Linux kernel's overlay file system overlayfs. An unprivileged local user can trigger a specific error condition during the creation of a new directory. This error causes the system to incorrectly release a lock on the parent directory and a reference to the new directory...

CVE-2026-89712

A flaw was found in the Linux kernel's Network File System Daemon NFSD component. A race condition exists where, during the processing of unmounted source-server mounts, a thread may temporarily release a lock. During this window, another NFS Remote Procedure Call RPC thread can free memory that...

CVE-2026-89485

A flaw was found in the lockd component of the Linux kernel. This use-after-free vulnerability occurs in the nlmtraversefiles function when a file's memory is prematurely released while an iterator still holds a pointer to it. A remote attacker could potentially exploit this to cause system...

CVE-2026-89469

A flaw was found in the Linux kernel's lp8727 power supply driver. A race condition can occur during the release of an interrupt request IRQ, where a delayed work item might be re-armed after the associated memory has been freed. This can lead to a use-after-free vulnerability, potentially causin...