SUSE CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

EUVD-2026-92894

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...

PT-2026-107315

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...

PT-2026-107333

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper input validation leads to the improper neutralization of special elements used in an OS command, allowing a remote authenticated attacker to perform code injection and execute...

PT-2026-107332

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Improper input validation allows a remote authenticated attacker to execute arbitrary code. Recommendations Update IBM Langflow OSS to a version later than 1.12.2...

PT-2026-107331

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description Remote authenticated attackers can execute arbitrary code due to improper neutralization of special elements used in code, which leads to a sandbox escape. A sandbox escape occurs when...

Linux Distros Unpatched Vulnerability : CVE-2026-92821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol...

CVE-2026-51904

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...

EUVD-2026-91702

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, createagentexecution and createagentrun in superagi/controllers/agentexecution.py accept a caller-supplied agentid and fail to verify that the referenced agent...

CVE-2026-92869

A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows a remote authenticated attacker to cause a Denial of Service DoS by forcing the service to terminate unexpectedly. The issue occurs when the application attempts to write data beyond allocated memory buffer boundaries,...

EUVD-2026-90883

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505

The AWS EFS CSI Driver (aws-efs-csi-driver ) versions v3.1.0 through v3.4.2 are vulnerable to an improper neutralization of argument delimiters within the volume handling component. This flaw could allow remote authenticated users who possess PersistentVolume creation permissions to inject arbitr...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

CVE-2026-103505 AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...

EUVD-2026-90454

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

CVE-2026-13313

An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet service, thereby executing arbitrary commands with root privileges and potentially affecting other devices connected...

CVE-2026-13313

Certain ASUS router models are vulnerable to an Active Debug Code vulnerability. A remote authenticated user can send a crafted HTTP request to bypass security mechanisms and enable the Telnet service . This allows the attacker to execute arbitrary commands with root privileges , which could pote...

CVE-2026-14157

A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...