May 2026 Security Advisory Ivanti Secure Access Client (CVE-2026-7431, CVE-2026-7432)

Update 22 May: CVE-2026-8992 has been added to Vulnerability Details Summary Ivanti has released updates for the Ivanti Secure Access Client which addresses one medium severity vulnerability and two High severity vulnerabilities. We are not aware of any customers being exploited by these...

Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)

Last Modified Date 16.06.2026 0:48:48...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-75105

creationtimestamp| type| source ---|---|--- 2026-08-17 20:56:27+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtclnphkfn2b...

CVE-2026-71553

creationtimestamp| type| source ---|---|--- 2026-08-17 20:52:39+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclgvkfbx2a...

CVE-2026-75012

creationtimestamp| type| source ---|---|--- 2026-08-17 20:50:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclcey43n2q...

CVE-2026-75014

creationtimestamp| type| source ---|---|--- 2026-08-17 20:47:36+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtcl5unepq26...

GHSA-QQQ4-5773-PMW5

creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...

GHSA-FHGH-WQ4Q-R37X

creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...

CVE-2026-74254

creationtimestamp| type| source ---|---|--- 2026-08-17 20:07:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtciwi4mf32b 2026-08-17 20:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtckqfchry23...

CVE-2026-70454

creationtimestamp| type| source ---|---|--- 2026-08-17 20:02:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtcinfmd4b25...

CVE-2026-66792

creationtimestamp| type| source ---|---|--- 2026-08-17 18:48:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117112342968785881 2026-08-17 20:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcilkbuts2r 2026-08-17 20:07:49+00:00| seen|...

unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes

A flaw was found in Unbound. Insufficient validation of the RRSIG.Labels field, combined with premature cache writes during RFC 8198 aggressive NSEC processing, can lead to cache poisoning. This vulnerability allows a malicious actor, controlling a single delegated zone, to poison arbitrary sibli...

CVE-2026-71479

creationtimestamp| type| source ---|---|--- 2026-08-17 18:07:34+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtcc7qclzl23 2026-08-17 20:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcj2rcalx2t...

CVE-2026-55674

creationtimestamp| type| source ---|---|--- 2026-08-17 18:07:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtcc75ptta25 2026-08-17 19:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtchx2hric25...

curl security update

An update is available for curl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for...

Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 (CVE-2026-45205)

Summary IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 CVE-2026-45205 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...

CVE-2026-75045

creationtimestamp| type| source ---|---|--- 2026-08-17 16:21:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3sf2vmeeb3uek 2026-08-17 18:07:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtcc7zwqe52b 2026-08-17 20:00:05+00:00| seen|...

python: Fix of 2 CVEs

CVE-2026-15308: fix quadratic complexity CPU DoS in the incremental HTMLParser when unterminated markup declarations span many feed calls, by accumulating new data and only rescanning once enough has piled up...