CVE-2026-17524

Versions of the package zip-lib before 1.1.0 are vulnerable to Directory Traversal via the caching mechanism for path validation during the extraction process. An attacker can bypass security checks designed to prevent directory traversal. The intended security function, isOutsideTargetFolder, on...

CVE-2026-64737

creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:26+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:48:35+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 17:15:52+00:00| seen|...

CVE-2026-64730

creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:10+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:16:07+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:01:20+00:00|...

CVE-2026-64727

creationtimestamp| type| source ---|---|--- 2026-07-28 04:53:02+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:16:14+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 19:02:05+00:00|...

CVE-2026-64711

creationtimestamp| type| source ---|---|--- 2026-07-28 04:52:34+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:48:23+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 17:16:43+00:00| seen|...

CVE-2026-64698

creationtimestamp| type| source ---|---|--- 2026-07-28 04:52:02+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:17:08+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 21:58:04+00:00|...

CVE-2026-43812

creationtimestamp| type| source ---|---|--- 2026-07-28 04:51:23+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrptdgzuim2v 2026-07-28 17:17:49+00:00| seen|...

CVE-2026-43802

creationtimestamp| type| source ---|---|--- 2026-07-28 04:51:01+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:18:11+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:00:57+00:00|...

CVE-2026-43759

creationtimestamp| type| source ---|---|--- 2026-07-28 04:49:50+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 17:19:25+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-30 16:00:57+00:00|...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

CVE-2026-61953

creationtimestamp| type| source ---|---|--- 2026-07-28 00:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mro4wpqsah2i 2026-07-28 18:07:27+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrpyv4ejcd27...

PT-2026-65412

The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter of the POST /wp-json/wpdmpp/v1/cart/coupon REST API endpoint in versions up to, and including, 6.2.0. This is due to insufficient escaping on the user-supplied...

Security Bulletin: NVIDIA DCGM Exporter - July 2026

NVIDIA has released a software update for NVIDIA® DCGM Exporter. To protect your system, clone or update this software from the NVIDIA/dcgm-exporter GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses...

python313-CherryPy-18.10.0-4.1 on GA media (moderate)

python313-CherryPy-18.10.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11378-1 Rating: moderate Cross-References: CVE-2019-9740 CVSS scores: CVE-2019-9740 SUSE : 5.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

CVE-2026-64775

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination...

CVE-2026-64721

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

DEBIAN-CVE-2026-64553

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLEATTRDATA psample open codes nlaput presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr i...

CVE-2026-64691

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to cause unexpected system termination...

CVE-2026-43782

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data...

UBUNTU-CVE-2026-64537

In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: reject invalid CCM interval at configuration time ccmtxworkexpired re-arms itself via queuedelayedwork using the configured expinterval converted by intervaltous. When expinterval is BRCFMCCMINTERVALNONE or out of...