CVE-2026-13181

creationtimestamp| type| source ---|---|--- 2026-07-22 16:32:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mraqrtt7w72g 2026-07-22 17:03:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasjljpek2b...

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option

A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...

CVE-2026-55973

CVE-2026-55973 affects NLnet Labs Unbound 1.23.0 through 1.25.1. When dns-error-reporting: yes is enabled, the EDNS Report-Channel option (code 18) length from the last upstream response is treated as the length of the agent domain. If the agent domain contains garbage after the domain, those byt...

CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

EUVD-2026-47681

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

CVE-2026-16364

creationtimestamp| type| source ---|---|--- 2026-07-22 04:46:10+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqnhcmd52k...

PT-2026-63390

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.7.0 through 1.25.1 Description When the dnscrypt: clause contains more dnscrypt-provider-cert: files than matching dnscrypt-secret-key: files, the software fails to properly initialize all slots, leaving some fill...

PT-2026-63389

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.23.0 through 1.25.1 Description When the dns-error-reporting: yes setting is enabled, the software incorrectly processes the EDNS Report-Channel option code 18 from upstream responses. Specifically, it uses the...

CVE-2026-61100

...

CVE-2026-60678

The CVE-2026-60678 affects Oracle E-Business Suite, Oracle General Ledger (Internal Operations) in supported 12.2.3–12.2.15 releases. The vulnerability allows a low-privilege attacker with network access via SOAP to compromise Oracle General Ledger, with potential takeover and impact to confident...

CVE-2026-60499

CVE-2026-60499 affects Oracle JD Edwards EnterpriseOne Solution Advisor (component: Solution Advisor) in the 9.2 line. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to take over the JD Edwards EnterpriseOne Solution Advisor; CVSS 3.1 base score 8.8 (C/H/I/H). Th...

CVE-2026-60458

...

CVE-2026-60327

...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-60287

...

CVE-2026-60274

...

CVE-2026-60265

CVE-2026-60265 affects the Oracle Coherence component (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 . The vulnerability allows a high-privilege attacker with local logon to compromise Oracle Coherence, with potential broader...