CVE-2026-12118

creationtimestamp| type| source ---|---|--- 2026-07-30 17:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz6lqsul2u...

CVE-2026-15435

creationtimestamp| type| source ---|---|--- 2026-07-30 17:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruyxi4j4e2j 2026-08-06 04:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msf7semcx222...

EUVD-2026-51258

An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insufficient Session Expiration vulnerability. This could allow active sessions to retain their previous permission set after inactivity timeouts or user‑group changes. As a result, an...

CVE-2026-11885

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

SUSE CVE-2026-17838

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

Updated nghttp2 packages fix a security vulnerability

The updated packages fix a security vulnerability: HTTP Request/Response Smuggling via Upgrade Request with Content-Length. CVE-2026-58055...

MGASA-2026-0309 Updated nghttp2 packages fix a security vulnerability

The updated packages fix a security vulnerability: HTTP Request/Response Smuggling via Upgrade Request with Content-Length. CVE-2026-58055...

Updated 389-ds-base packages fix a security vulnerability

The updated packages fix a security vulnerability: Unbounded ldap controls count in getldapmessagecontrolsext causes cpu and heap amplification remote dos. CVE-2026-9064...

SUSE CVE-2026-44327

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker who can reach NEF on the SBI can hit the OAM route with no Authorization header at all and the handl...

SUSE CVE-2026-44342

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 0.12.0-alpha.1, the email and WeChat account binding endpoints GET /api/oauth/email/bind and GET /api/oauth/wechat/bind used GET requests for state-changing account operations, allowing a...

SUSE CVE-2026-45781

The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI ownership validation skips label-match check when upstream OCI registry returns HTTP 429, letting any authenticated publisher bind their io.github./ namespace to OCI images the...

SUSE CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

SUSE CVE-2026-49254

unknown...

SUSE CVE-2026-50006

unknown...

SUSE CVE-2026-52809

Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...

SUSE CVE-2026-52832

unknown...

SUSE CVE-2026-53508

unknown...

SUSE CVE-2026-53715

unknown...

CVE-2026-28811

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue...

CVE-2026-52680

Affected software: Apache Kyuubi REST batch multipart upload feature. Vulnerability: path traversal via client-supplied multipart filename used when creating temporary uploaded resources, enabling writing content outside the intended upload directory depending on filesystem permissions. Impact: p...