DEBIAN-CVE-2026-42285

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending a specially crafted BGP UPDATE message. When the server receives a message with inconsistent...

Why Outdated Maintenance Software Is a Growing Ransomware Risk

Outdated maintenance software increases ransomware risk by exposing weak access controls, unpatched systems, and critical operational data to attackers...

RHSA-2026:13978 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

BIT-KEYDB-2026-25588 RedisTimeSeries RESTORE invalid memory access may allow remote code execution

RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

BELL-CVE-2026-6502

Bulletin has no description...

BELL-CVE-2026-43280

Bulletin has no description...

BELL-CVE-2026-43192 CVE-2026-43192 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43208

Bulletin has no description...

BELL-CVE-2026-43144

Bulletin has no description...

BELL-CVE-2026-43164

Bulletin has no description...

BELL-CVE-2026-43100

Bulletin has no description...

BELL-CVE-2026-43106 CVE-2026-43106 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43095

Bulletin has no description...

BELL-CVE-2026-43087 CVE-2026-43087 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2025-71271

Bulletin has no description...

BELL-CVE-2026-43070

Bulletin has no description...

CVE-2026-44602

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006...

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered NaN cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected...

CVE-2026-42194 Incomplete fix for CVE-2026-32812: SSRF in admidio

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetchmetadata.php validates the resolved IP address but passes the original hostname-based URL to curlinit, leaving a DNS rebinding TOCTOU window that allows redirecting requests to...

PT-2026-38451

Name of the Vulnerable Software and Affected Versions Ivanti EPMM versions prior to 12.6.1.1 Ivanti EPMM versions prior to 12.7.0.1 Ivanti EPMM versions prior to 12.8.0.1 Description Improper Access Control allows a remote authenticated attacker to gain administrative access. Recommendations Upda...