MGASA-2026-0281 Updated python-nltk packages fix security vulnerability

URL-Encoded Path Traversal in nltk.data.load Allows Arbitrary Local File Read. CVE-2026-54293...

MGASA-2026-0286 Updated perl-CGI-Session package fixes a security vulnerability

The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...

Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

Updated nilfs-utils packages fix security vulnerability

Undefined Behavior and Out-of-Memory via Unvalidated slogblocksize. CVE-2026-55392...

Updated graphicsmagick packages fix a security vulnerability

The updated packages fix a security vulnerability: Use-After-Free in MSL decoder. CVE-2026-46523...

Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities

The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...

CVE-2026-58484

creationtimestamp| type| source ---|---|--- 2026-07-20 19:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3yfyrhgv2s...

CVE-2025-8173

creationtimestamp| type| source ---|---|--- 2026-07-20 19:00:06+00:00| seen| https://t.me/autodafemanuals/268 2026-07-21 00:00:24+00:00| seen| https://t.me/autodafemanuals/268 2026-07-22 00:00:29+00:00| published-proof-of-concept| https://t.me/autodafemanuals/268...

.NET: .NET: Network Spoofing Vulnerability

A flaw was found in .NET. An authorized attacker can exploit this vulnerability by leveraging improper encoding or escaping of output. This allows the attacker to perform spoofing over a network, potentially deceiving users or systems into believing they are interacting with a trusted entity...

EUVD-2026-46064

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens...

CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this...

UBUNTU-CVE-2026-44227

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...

UBUNTU-CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2022-35499

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:06+00:00| seen| Telegram/zF5Spud96hIRv-kMH4Dj2nymZKpXTrW05uWfMwEMnMJUmrg 2026-07-20 18:00:06+00:00| seen| Telegram/STZr2ThKqLSEwjdullvBnAUiGEaXr6eGbEs0nK3zCFtJ6Z4 2026-07-21 00:00:34+00:00| seen|...

CVE-2026-39200

creationtimestamp| type| source ---|---|--- 2026-07-20 18:00:05+00:00| seen| Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc 2026-07-21 01:00:22+00:00| seen| Telegram/w6l8BPd9Q3GJFkZvi7YAaS3nfqUL8sbBpYE2TLByxwgM4Fc 2026-07-22 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-41252

creationtimestamp| type| source ---|---|--- 2026-07-20 17:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3ttwsff42v 2026-07-21 09:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5j5suzh224 2026-07-23 04:07:07+00:00| seen|...

CVE-2026-57308

creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...

CVE-2026-53421

creationtimestamp| type| source ---|---|--- 2026-07-20 17:32:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3t7z2p3624 2026-07-21 15:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr64wuknvd22...

CVE-2026-64206

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pendingrxwork before taking conn-lock l2capconndel takes conn-lock and then calls cancelworksync for pendingrxwork. processpendingrx takes the same mutex, so teardown can deadlock against the worker it is...

UBUNTU-CVE-2026-55645

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length validation before reading specific data fields from the network stream. A remote...