ROOT-OS-ALPINE-321-CVE-2026-11822 CVE-2026-11822 in sqlite - Patched by Root

Root has patched CVE-2026-11822 in the sqlite package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2025-70873 CVE-2025-70873 in sqlite - Patched by Root

Root has patched CVE-2025-70873 in the sqlite package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-59203 CVE-2026-59203 in pillow - Patched by Root

Root has patched CVE-2026-59203 in the pillow package for Root:PyPI. Multiple fixed versions available...

ssh-hardening

SSH Hardening Lock down SSH on Debian/Ubuntu in one run: new port, no root login, key-based auth, optional UFW and Fail2Ban. What you’ll see When you run the script, it detects your OS and shows the settings before asking to continue: Quick start step-by-step 1️⃣ Install git if needed On...

CVE-2026-123033

Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 and in release trains before their respective fixes allows an attacker on the same network segment to achieve unauthenticated full-administrator API access and execute commands as root. middlewar...

CVE-2026-123025

An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare method decodes the dnsgcloudkey model field and directly interpolates the string fields gcloudaccount and gcloudproject into a...

CVE-2026-123033

TrueNAS SCALE versions before 25.10.8 (including earlier release trains) are vulnerable to an authentication bypass in the middlewared HA heartbeat origin check. The ha_permission hook is registered unconditionally without verifying failover licenses or heartbeat interfaces. An unauthenticated at...

EUVD-2026-117387

Authentication bypass in the HA heartbeat origin check in middlewared in TrueNAS SCALE before 25.10.8 and in release trains before their respective fixes allows an attacker on the same network segment to achieve unauthenticated full-administrator API access and execute commands as root. middlewar...

CVE-2026-123025

An OS Command Injection vulnerability exists in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin (versions through 4.17). The root cause is the DnsGcloud::prepare() method, which decodes the dns_gcloud_key model field and interpolates the gcloud_account and gcloud_proj...

EUVD-2026-117385

An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare method decodes the dnsgcloudkey model field and directly interpolates the string fields gcloudaccount and gcloudproject into a...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution

Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...

Cisco Secure Firewall Management Center - Authentication Bypass

Cisco Secure Firewall Management Center Software contains an authentication bypass caused by improper system process creation at boot, letting unauthenticated remote attackers execute scripts and gain root access, exploit requires crafted HTTP requests. id: CVE-2026-20079 info: name: Cisco Secure...

Grandstream UCM6200 - SQL Injection

Grandstream UCM6200 series contains an unauthenticated remote SQL injection caused by crafted HTTP requests, letting attackers execute shell commands as root on versions before 1.0.19.20 or inject HTML in emails before 1.0.20.17. id: CVE-2020-5722 info: name: Grandstream UCM6200 - SQL Injection...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

Cisco IOS XE WLC - Arbitrary File Upload

A vulnerability in the Out-of-Band Access Point AP Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.This vulnerability is due to the presence of a hard-coded JSON Web...

kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers

A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...

CVE-2026-122192

Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if...

CVE-2026-122192 Guest access to Firecracker process memory after a failed memory discard

Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with root privileges to read or modify Firecracker VMM process memory via balloon or virtio-mem discard requests on microVMs restored from a snapshot with the File memory backend, if...

CVE-2026-122124

On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi credentials via the USB interface. Sensitive data within the firmware configuration can be abused to gain root privileges on the device. Within Wi‑Fi coverage, the attacker may perform aud...