CLSA-2026-1788790498 TuxCare security update for ip-address (2 CVEs)

TuxCare rebuilt ip-address to address 2 CVEs. Fixed in 6.4.0-tuxcare.2...

CVE-2026-86429

creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwogkzu462e 2026-09-12 19:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdro5dz722r...

GHSA-QQJF-53CJ-PWVV

creationtimestamp| type| source ---|---|--- 2026-09-07 14:02:55+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3muwodkwr3p24 2026-09-10 23:20:16+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mv76uxdg5z2t...

Security update for curl

This update for curl fixes the following issues: CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated...

WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Anthony Green of Greenhat Security in WordPress Plugin JetFormBuilder versions = 3.6.5.1...

CVE-2017-6459

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2017-6462

creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlohukka2v...

CVE-2026-78043

A flaw was found in OpenVPN. The Windows Interactive Service allows local authenticated users to bypass security restrictions and load unauthorized configuration files. By crafting special paths, an attacker can manipulate the service's configuration, potentially leading to privilege escalation...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

CLSA-2026-1788782659 TuxCare security update for org.springframework.ldap (1 CVE)

TuxCare rebuilt 7 org.springframework.ldap packages to address 1 CVE. Fixed in 3.2.12-tuxcare.1...

CLSA-2026-1788782570 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 4 CVEs. Fixed in 4.2.9.RELEASE-tuxcare.11...

UBUNTU-CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CLSA-2026-1788782067 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.16-tuxcare.5...

CLSA-2026-1788781526 TuxCare security update for pacote (1 CVE)

TuxCare rebuilt pacote to address 1 CVE. Fixed in 20.0.1-tuxcare.1...

CVE-2020-37277

creationtimestamp| type| source ---|---|--- 2026-09-07 11:39:41+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3muwgdfzowl23...

CVE-2026-81830

A flaw was found in OpenVPN. The Windows interactive service in OpenVPN contains an incorrect file path validation vulnerability. A local authenticated user could exploit this flaw to bypass the trusted configuration directory constraint, leading to a security bypass and potential integrity...

CVE-2025-52651

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

CVE-2025-52651

HCL MyXalytics is affected by an Improper Input Validation vulnerability that allows malicious or unexpected data to cause unintended system behaviour or security issues. The CNA-assigned CVSS 3.1 score is 3.5 (LOW) , with a network vector, low attack complexity, low privileges required, and user...

CVE-2025-52651 HCL MyXalytics is affected by multiple security vulnerabilities.

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

BIT-ELASTICSEARCH-2024-23444 Elasticsearch elasticsearch-certutil csr fails to encrypt private key

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command...