ROOT-APP-NPM-CVE-2026-12590 CVE-2026-12590 in body-parser - Patched by Root

Root has patched CVE-2026-12590 in the body-parser package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-45590 CVE-2024-45590 in body-parser - Patched by Root

Root has patched CVE-2024-45590 in the body-parser package for Root:npm. Multiple fixed versions available...

CVE-2026-33924

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

CVE-2026-33923

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...

ROOT-APP-GOBINARY-GHSA-F48P-C9V4-H7XV GHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-f48p-c9v4-h7xv in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-H7WR-284F-5QVC GHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-h7wr-284f-5qvc in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

Advisory ROSA-SA-2026-3320

Software: Apache HTTPD OS: ROSA-CHROME Affected versions: = apache-2.4.69-3 Unaffected versions: apache-2.4.69-3 CVE IDs: CVE-2026-63292, CVE-2026-56154, CVE-2026-56153, CVE-2026-57941, CVE-2026-59685, CVE-2026-93546 BDU ID: None CVE-Crit: HIGH CVE-DESC.: Vulnerabilities enabling root access to t...

CVE-2026-33924 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

CVE-2026-33924

Two OS command injection vulnerabilities exist in the Guardian/CMC update installation functionality, affecting versions before 26.4.0 . The root cause is the insufficient validation of update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle ...

EUVD-2026-112724

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...

CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...

CVE-2026-33923

A signature verification vulnerability exists in the update installation functionality of Guardian/CMC prior to version 26.4.0 . The root cause is the inconsistent validation of update bundle contents, allowing an attacker with administrative privileges to remotely supply a crafted bundle. While ...

EUVD-2026-112723

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...

ROOT-APP-NPM-CVE-2026-111759 CVE-2026-111759 in markdown-it - Patched by Root

Root has patched CVE-2026-111759 in the markdown-it package for Root:npm. Multiple fixed versions available...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...

ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root

Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-39883 CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root

Root has patched CVE-2026-39883 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...

OESA-2026-4571 flatpak security update

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. Security Fixes: In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data...

OESA-2026-4569 flatpak security update

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. Security Fixes: In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: include include include void attributeconstructor init setuid0; system"/bin/bash"; Usage...