CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

CVE-2026-65325

Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....

GHSA-PWCW-F3FJ-7VR2 vulnerabilities

Vulnerabilities for packages: imagemagick...

GHSA-MMG7-4C9C-2R54 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XMQ2-CRJ6-VR9M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-CG63-H6R4-GP45 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-H655-847G-Q4F7 vulnerabilities

Vulnerabilities for packages: xorg-server...

GHSA-XMQ2-CRJ6-VR9M vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-MMG7-4C9C-2R54 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-H8WM-M326-VH8H vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-64352

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When certain security modules interact with network routing tables, it can trigger diagnostic warnings. This issue primarily affects debug kernels by generating console messages and does not lead to direct security...

CVE-2026-58150

Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade request smuggling. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4...

CVE-2026-15344

creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15344...

ROOT-OS-DEBIAN-11-CVE-2026-7210 CVE-2026-7210 in rootio-python3.9 - Patched by Root

Root has patched CVE-2026-7210 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-11940 CVE-2026-11940 in rootio-python3.9 - Patched by Root

Root has patched CVE-2026-11940 in the rootio-python3.9 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-64556

CVE-2026-64556 pertains to the Linux kernel PMU subsystem (perf/core). When a performance event group leader is removed during process exit, its surviving siblings can remain active and still linked to the removed leader’s list, leaving the PMU context active list in a potentially inconsistent st...

GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758...

MINI-6PHH-4HV8-P8C7

Bulletin has no description...

CVE-2026-60004

creationtimestamp| type| source ---|---|--- 2026-07-29 07:59:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrhfbohdx2w 2026-07-29 08:02:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrrhkep54z23 2026-07-29 09:00:07+00:00| seen|...