Linux Distros Unpatched Vulnerability : CVE-2026-23240

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tls: Fix race condition in tlsswcancelworktx This issue was discovered during a code audit. After canceldelayedworksync is called from tlsskprotoclose,...

EUVD-2026-10516

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...

CVE-2026-22628

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...

CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

...

CLSA-2026-1773161124 Fix CVE(s): CVE-2021-22876, CVE-2025-15079

SECURITY UPDATE: acceptance of hosts not listed in specified knownhosts file during SSH-based transfers - debian/patches/CVE-2025-15079.patch: Set both knownhosts options to same file and fix surprises caused by libssh exposing separate KNOWNHOSTS and GLOBALKNOWNHOSTS options. - CVE-2025-15079...

CVE-2026-22628

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...

CVE-2026-22628

CVE-2026-22628 describes an improper access control flaw in Fortinet FortiSwitch AXFixed, affecting versions 1.0.0 through 1.0.1. An authenticated admin can execute system commands by supplying a specially crafted SSH config file, enabling local command execution with low impact vector (local, lo...

CVE-2025-41765

Due to insufficient authorization enforcement, an unauthorized remote attacker can exploit the wwwupload.cgi endpoint to upload and apply arbitrary data. This includes, but is not limited to, contact images, HTTPS certificates, system backups for restoration, server peer configurations, and...

March 10, 2026—KB5078752 (OS Build 17763.8511)

None None...

March 10, 2026—KB5078740 (OS Build 26100.32522)

None None...

KB5078738: Cumulative security update for Internet Explorer: March 10, 2026

None None...

March 10, 2026—KB5078938 (OS Build 14393.8957)

None None...

March 10, 2026—Hotpatch KB5078736 (OS Build 26100.32463)

None None...

March 10, 2026—KB5078883 (OS Build 22631.6783)

None None...

March 10, 2026—KB5078775 (Monthly Rollup)

None None...

March 10, 2026—KB5078774 (Monthly Rollup)

None None...

March 10, 2026—KB5078885 (OS Builds 19045.7058 and 19044.7058)

None None...

March 10, 2026—KB5078766 (OS Build 20348.4893)

None None...

March 10, 2026—KB5079473 (OS Builds 26200.8037 and 26100.8037)

None None...

BIT-MAVEN-2021-26291 block repositories using http by default

Apache Maven will follow repositories that are defined in a dependency’s Project Object Model pom which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository...