MiracleLinux 8 : dotnet9.0-9.0.120-1.el8_10 (AXSA:2026-1581:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1581:16 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

OPENSUSE-SU-2026:11558-1 MozillaThunderbird-140.14.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

Timing Attack

Overview org.springframework.security:spring-security-core is a package that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Timing Attack via the comparison of sensitive values using standard string equality rather than constant-time...

Access Control Bypass

Overview org.springframework.security:spring-security-core is a package that provides security services for the Spring IO Platform. Affected versions of this package are vulnerable to Access Control Bypass in the InetAddressMatchers process. An attacker can bypass network-based access control...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)

This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...

Security update for python313 (important)

openSUSE security update: security update for python313 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21595-1 Rating: important References: bsc1257041 bsc1257044 bsc1265268 bsc1268977 bsc1269066 bsc1269788 bsc1269959 bsc1271192 Cross-References:...

CVE-2026-76929

creationtimestamp| type| source ---|---|--- 2026-08-19 23:56:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jbdruqpacv2bd...

bind: bind9: Incorrect acceptance of NSEC3 records

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses...

CVE-2026-55192

creationtimestamp| type| source ---|---|--- 2026-08-19 23:30:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthv66u36b2f...

CVE-2026-55191

creationtimestamp| type| source ---|---|--- 2026-08-19 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthumehjgp2t 2026-08-20 00:19:32+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxwp2rbi2h...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.5 security update

Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update

Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...

CVE-2026-76850

creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...

CVE-2026-59992

creationtimestamp| type| source ---|---|--- 2026-08-19 22:35:05+00:00| published-proof-of-concept| https://github.com/tinacms/tinacms/security/advisories/GHSA-8mq9-5fw2-5rm4...

CVE-2026-76389

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the gettalosenrichment capability could send a crafted request to the Talos intelligence enrichment Representational State Transfer REST API endpoint and cause the instance to make an...

CVE-2026-76388

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

CVE-2026-76387

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...

CVE-2026-55085

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqsapxow2m 2026-08-20 01:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti3cxkjjd2m 2026-08-20 12:40:04+00:00| seen|...

CVE-2026-16919

creationtimestamp| type| source ---|---|--- 2026-08-19 22:11:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqrofgb423 2026-08-20 02:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti6o7oolp2j 2026-08-21 09:07:06+00:00| seen|...

CVE-2026-16882

creationtimestamp| type| source ---|---|--- 2026-08-19 22:10:32+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthqpzpsnb2e 2026-08-20 01:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mti4gpztkc2b 2026-08-21 10:07:06+00:00| seen|...