CVE-2026-55546

creationtimestamp| type| source ---|---|--- 2026-08-25 16:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kkjtwu7rva4w 2026-08-25 16:35:12+00:00| published-proof-of-concept| https://github.com/QWED-AI/qwed-mcp/security/advisories/GHSA-mw6r-2hvm-4rp2 2026-08-25 18:08:22+00:00|...

DEBIAN-CVE-2026-79772

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

CVE-2026-54874

creationtimestamp| type| source ---|---|--- 2026-08-25 16:02:31+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtw6xhzfnb2r 2026-08-25 16:27:45+00:00| seen| https://bsky.app/profile/derdreschi84.bsky.social/post/3mtwaelgpws23 2026-08-26 01:09:35+00:00| seen|...

RHSA-2026:59325 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

RHSA-2026:59137 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Bulletin has no description...

TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016...

CVE-2026-55477

creationtimestamp| type| source ---|---|--- 2026-08-24 22:35:03+00:00| published-proof-of-concept| https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg 2026-08-25 12:31:18+00:00| seen| https://gist.github.com/alon710/782a9d0e0a33092c615e2219299ab6e3...

CVE-2025-34555

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:04+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA...

DEBIAN-CVE-2026-78475

A flaw was found in the file-pix ESM plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array VLA on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a...

ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32740 CVE-2026-32740 in libheif - Patched by Root

Root has patched CVE-2026-32740 in the libheif package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

ROOT-OS-DEBIAN-13-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-PW6J-QG29-8W7F GHSA-pw6j-qg29-8w7f in tornado - Patched by Root

Root has patched GHSA-pw6j-qg29-8w7f in the tornado package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-QPPV-J76H-2RPX GHSA-qppv-j76h-2rpx in tornado - Patched by Root

Root has patched GHSA-qppv-j76h-2rpx in the tornado package for Root:PyPI. Multiple fixed versions available...

Astra Linux – Vulnerability in Firefox

A transient execution vulnerability, named Floating Point Value Injection FPVI, allowed attackers to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. A related vulnerability, Speculative Code Store Bypass SCSB, did not affect Firefox. This vulnerability affect...

Astra Linux – Vulnerability in twitter-bootstrap3

A security vulnerability has been discovered in Bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is related to the “data-loading-text” attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into this attribute,...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in libgit2

libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Previous versions of libgit2 required the caller to set the certificatecheck field of the libgit2’s...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free remote desktop protocol library and client. Affected versions of FreeRDP lack input validation in the urbdrc channel. A malicious server can trick a FreeRDP-based client into crashing due to a division by zero. This issue has been addressed in version 2.9.0. All users are advise...