CVE-2026-79980

The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c contains a vulnerability where the transaction identifier (xid) is maintained as a predictable counter rather than a per-transaction random value. Because this identifier is the only unpredictable reply-validation token, an attacker observing a ...

CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS

The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier iface-config.dhcpv4.xid as a counter rather than as a per-transaction random value. It was seeded once with sysrand32get in dhcpv4startinternal, incremented by one in dhcpv4senddiscover and dhcpv4senddecline...

CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS

The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier iface-config.dhcpv4.xid as a counter rather than as a per-transaction random value. It was seeded once with sysrand32get in dhcpv4startinternal, incremented by one in dhcpv4senddiscover and dhcpv4senddecline...

USN-8951-1 c-ares vulnerabilities

It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2020-22217 It was discovered that c-ares incorrectl...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the Redis reply parser fails to limit recursion depth; as a result, remote peers on the Redis server return deeply nested RESP array replies, potentially causing the bRPC...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libXtst vulnerabilities (USN-8939-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8939-1 advisory. It was discovered that libXtst did not properly handle certain RECORD replies from th...

CVE-2026-98568

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...

CVE-2026-111709

WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET...

CVE-2026-111709

WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET...

Cassio Santos Whaticket Open Source Authorization Issue Vulnerability

Cassio Santos: Whaticket Open Source versions from cf04795 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references IDOR. ShowTicketService does not perform ownership or queue checks. Attackers can use the ticket IDs of other agents to...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. The redis-cli command-line tool and the redis-sentinel service may be vulnerable to integer overflow when parsing specially crafted large multi-bulk network replies. This issue arises due to a vulnerability in the hiredis...

Astra Linux - vulnerability in connman

An issue was found in the DNS proxy within Connman up to version 1.40. The implementation of the TCP server’s reply handling fails to verify whether there is sufficient header data, resulting in an out-of-bounds read...

Astra Linux - vulnerability in qtbase-opensource-src

An issue was found in Qt 5.x prior to 5.15.14, 6.x prior to 6.2.9, and 6.3.x through 6.5.x prior to 6.5.1. QDnsLookup suffers from a buffer over-read caused by a specially crafted reply from a DNS server...

CVE-2026-77460

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

CVE-2026-77460 EspoCRM: Mass email template renderer leaks restricted record fields

EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restricted record fields in a template because the renderer stops filtering those fields when per-user ACL application is...

Improper Neutralization of Special Elements in Data Query Logic

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the comment replies endpoint, where the read action in comments-controller.js was invoked without enforcing admin-only status filtering. ...

SUSE CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

DEBIAN-CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...

UBUNTU-CVE-2026-94002

Possible memory exhaustion in SFTP clients DefaultSftpClient in component sshd-sftp in Apache MINA SSHD versions 0.9.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The sshd-sftp component provides support for SFTP. The SFTP client...