ch.mobi.mobitor:mobitor-base (>=3.1.13, <=3.1.97), ch.mobi.mobitor:mobitor-doc (3.1.13) +39 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.11.2)

com.hazelcast:hazelcast MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - ch.mobi.mobitor:mobitor-base =3.1.13, =2.1.6, =1.1.4, =2.1.4, =2.0.9.0, =0.1.0, =0.1.1 -...

com.hazelcast:hazelcast-build-utils (3.11.3), com.hazelcast:hazelcast-client (3.11.3) +43 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.11.3)

com.hazelcast:hazelcast MAVEN version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.11.3 - com.hazelcast:hazelcast-client 3.11.3 -...

com.moomanow.web:moomanowwebapp (>=0.0.2, <=0.0.10), org.apereo.cas:cas-server-support-jdbc (>=5.1.0-rc1, <=5.1.0-rc2) +4 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.5.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.moomanow.web:moomanowwebapp =0.0.2, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1,...

com.moomanow.web:moomanowwebapp (>=0.0.2, <=0.0.10), org.apereo.cas:cas-server-support-jdbc (>=5.1.0-rc1, <=5.1.0-rc2) +4 more potentially affected by CVE-2026-55856 via org.mariadb.jdbc:mariadb-java-client (1.5.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.moomanow.web:moomanowwebapp =0.0.2, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1,...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.3), org.openwms:org.openwms.configuration (3.0.0) potentially affected by CVE-2026-59315 via org.springframework.cloud:spring-cloud-config-monitor (>=5.0.0, <=5.0.4)

org.springframework.cloud:spring-cloud-config-monitor MAVEN version =5.0.0, =8.0.0-rc1, =8.0.3 - org.openwms:org.openwms.configuration 3.0.0 Source cves: CVE-2026-59315 Source advisory: MEND:CVE-2026-59315...

io.gitee.gzcltech.job:job-spring-scheduler-starter-jdbc (>=4.0.0-rc3, <=4.2.4), org.apereo.cas:cas-server-support-jpa-ticket-registry (8.0.0-rc1) +3 more potentially affected by CVE-2026-59307 via org.springframework.integration:spring-integration-jdbc (>=7.0.1, <=7.0.5)

org.springframework.integration:spring-integration-jdbc MAVEN version =7.0.1, =4.0.0-rc3, =4.2.4 - org.apereo.cas:cas-server-support-jpa-ticket-registry 8.0.0-rc1 - org.springframework.cloud.fn:spring-aggregator-function 6.0.0 - org.springframework.cloud.fn:spring-jdbc-consumer 6.0.0 -...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.3), org.openwms:org.openwms.configuration (3.0.0) potentially affected by CVE-2026-47837 via org.springframework.cloud:spring-cloud-config-monitor (>=5.0.0, <=5.0.4)

org.springframework.cloud:spring-cloud-config-monitor MAVEN version =5.0.0, =8.0.0-rc1, =8.0.3 - org.openwms:org.openwms.configuration 3.0.0 Source cves: CVE-2026-47837 Source advisory: MEND:CVE-2026-47837...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=8.0.0-rc1, <=8.0.3), org.openwms:org.openwms.configuration (3.0.0) potentially affected by CVE-2026-59315 via org.springframework.cloud:spring-cloud-config-monitor (>=5.0.0, <=5.0.4)

org.springframework.cloud:spring-cloud-config-monitor MAVEN version =5.0.0, =8.0.0-rc1, =8.0.3 - org.openwms:org.openwms.configuration 3.0.0 Source cves: CVE-2026-59315 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-19267421...

openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...

SUSE SLES15: warewulf4 / warewulf4-dracut / warewulf4-man / warewulf4-overlay / etc (SUSE-SU-2026:2830-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2830-1 advisory. Update to v4.7.0. Security issues fixed: - CVE-2025-69725: incorrect input validation in the RedirectSlashes function can lead to an open...

GHSA-59QP-CFJ3-RP64 netfoil has a domain name filter bypass via multiple questions

Summary Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate. Impact Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them...

io.camunda.connector:connector-runtime-bundle (>=8.5.0-alpha2, <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0-alpha2, <=8.8.0-alpha4.1) +7 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=4.0.0, <=4.0.13)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0-alpha2, =8.5.0-alpha2, =8.5.0-alpha2, =7.0.0-rc1, =5.0.0, =5.0.0, =7.0.0-rc3, =7.0.0-rc3, =7.1.6.2 Source cves: CVE-2026-40994 Source advisory: OSV:GHSA-GG9R-WR4P-W63H...

io.camunda.connector:connector-runtime-bundle (>=8.5.0-alpha2, <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0-alpha2, <=8.8.0-alpha4.1) +7 more potentially affected by CVE-2026-40996 via org.springframework.ws:spring-ws-security (>=4.0.0, <=4.0.13)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0-alpha2, =8.5.0-alpha2, =8.5.0-alpha2, =7.0.0-rc1, =5.0.0, =5.0.0, =7.0.0-rc3, =7.0.0-rc3, =7.1.6.2 Source cves: CVE-2026-40996 Source advisory: GHSA-P7QJ-2Q5W-F9R7...

io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-40994 Source advisory: GHSA-GG9R-WR4P-W63H...

io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-40996 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-40996 Source advisory: GHSA-P7QJ-2Q5W-F9R7...

io.camunda.connector:connector-runtime-bundle (>=8.5.17, <=8.5.22), io.camunda.connector:connector-soap (>=8.5.17, <=8.9.0-alpha2) +2 more potentially affected by CVE-2026-41000 via org.springframework.ws:spring-ws-security (>=4.1.0, <=4.1.3)

org.springframework.ws:spring-ws-security MAVEN version =4.1.0, =8.5.17, =8.5.17, =8.5.17, =7.3.0-rc2, =7.3.8.3 Source cves: CVE-2026-41000 Source advisory: OSV:GHSA-8QQ9-R6CC-QJV9...

io.camunda.connector:connector-soap (>=8.9.0-alpha3, <=8.10.0-alpha2), org.apereo.cas:cas-server-support-inwebo-mfa (>=8.0.0-rc1, <=8.0.0-rc5) potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=5.0.0, <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =8.0.0-rc1, =8.0.0-rc5 Source cves: CVE-2026-40994 Source advisory: GHSA-GG9R-WR4P-W63H...

io.camunda.connector:connector-soap (>=8.9.0-alpha3, <=8.10.0-alpha2), org.apereo.cas:cas-server-support-inwebo-mfa (>=8.0.0-rc1, <=8.0.0-rc5) potentially affected by CVE-2026-41000 via org.springframework.ws:spring-ws-security (>=5.0.0, <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =8.0.0-rc1, =8.0.0-rc5 Source cves: CVE-2026-41000 Source advisory: OSV:GHSA-8QQ9-R6CC-QJV9...

io.camunda.connector:connector-soap (>=8.9.0-alpha3, <=8.10.0-alpha2), org.apereo.cas:cas-server-support-inwebo-mfa (>=8.0.0-rc1, <=8.0.0-rc5) potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=5.0.0, <=5.0.1)

org.springframework.ws:spring-ws-security MAVEN version =5.0.0, =8.9.0-alpha3, =8.0.0-rc1, =8.0.0-rc5 Source cves: CVE-2026-40994 Source advisory: OSV:GHSA-GG9R-WR4P-W63H...

io.camunda.connector:connector-runtime-bundle (>=8.5.0-alpha2, <=8.6.0-alpha5), io.camunda.connector:connector-soap (>=8.5.0-alpha2, <=8.8.0-alpha4.1) +7 more potentially affected by CVE-2026-40994 via org.springframework.ws:spring-ws-security (>=4.0.0, <=4.0.13)

org.springframework.ws:spring-ws-security MAVEN version =4.0.0, =8.5.0-alpha2, =8.5.0-alpha2, =8.5.0-alpha2, =7.0.0-rc1, =5.0.0, =5.0.0, =7.0.0-rc3, =7.0.0-rc3, =7.1.6.2 Source cves: CVE-2026-40994 Source advisory: GHSA-GG9R-WR4P-W63H...