RHSA-2026:0033

creationtimestamp| type| source ---|---|--- 2026-01-05 08:01:26+00:00| seen| Telegram/Ln-Tijs8Mrus1yJJyoZ6KmT82kic7NQ3bIXfA3ucf5IWpQ 2026-01-05 08:01:49+00:00| seen| Telegram/taG3BJ9Jv6Qp7bxDZF1T7cokiFjegEW9dxPUyVryiZJ4SE 2026-01-05 08:02:10+00:00| published-proof-of-concept|...

CVE-2026-0574

creationtimestamp| type| source ---|---|--- 2026-01-04 04:34:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbl3txybo52u 2026-01-04 05:39:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115835218991008384...

CVE-2025-64121

creationtimestamp| type| source ---|---|--- 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 02:26:56+00:00| seen| Telegram/Lw1YL0WWPKIwC-wnXTkrs3PgwYq9KeIU7jrvAVFhCs54Q 2026-01-03 02:36:13+00:00| seen|...

CVE-2025-64122

creationtimestamp| type| source ---|---|--- 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 00:08:49+00:00| seen| Telegram/8pbh4RUG7IPW5n-XaoRJkyPYiJSXBdywk4VIUzdy8zfIjo 2026-01-03 02:26:56+00:00| seen|...

CVE-2025-59387

creationtimestamp| type| source ---|---|--- 2026-01-02 18:54:57+00:00| seen| Telegram/fKGzgPxm4HdOPbxQ-IlBp8HZpa9ZU7wv577tZMCQId7qg 2026-01-02 21:56:58+00:00| seen| Telegram/guHHmyvoy-6slTWOk0lscaybhLQRVuwB2X4Pgg0KWuUC6I8...

CVE-2025-15436

creationtimestamp| type| source ---|---|--- 2026-01-02 18:54:45+00:00| seen| Telegram/Ixvst1zhHfk7lKUhI5B29IEUYLZOT2b0wkW9xa8GvuAtM 2026-01-02 21:56:08+00:00| seen| Telegram/Zv5tNHIYABHF73295PLurMceTZF9dstOvAEjjio6JFd40 2026-01-02 21:56:46+00:00| published-proof-of-concept|...

CVE-2025-45286

creationtimestamp| type| source ---|---|--- 2026-01-02 18:54:45+00:00| seen| Telegram/Ixvst1zhHfk7lKUhI5B29IEUYLZOT2b0wkW9xa8GvuAtM 2026-01-02 21:56:46+00:00| published-proof-of-concept| Telegram/VT6BfG-NV3TfbCsF7d29L1QsNikCty5LjazQa3RLsnwI 2026-01-24 22:43:15+00:00| seen|...

CVE-2026-21483

creationtimestamp| type| source ---|---|--- 2026-01-02 18:50:43+00:00| published-proof-of-concept| https://github.com/knadh/listmonk/security/advisories/GHSA-jmr4-p576-v565 2026-01-24 22:43:18+00:00| seen| https://gist.github.com/alon710/0ae3438b83af1f6dc50fe382f034b3e9 2026-01-24 22:43:21+00:00|...

CVE-2025-67442

creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:41+00:00| published-proof-of-concept| Telegram/SIlHdnSWOhxtT164bo5OUY813qzBPWb650GYgkhFr1n0D8 2026-01-02 21:52:17+00:00| published-proof-of-concept| Telegram/mK8o9C1rhrHkVcM37GZHvLPW6XA5mG-AmvsJea-RQorcPsU...

CVE-2026-21437 eopkg vulnerable to package file list integrity bypass

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

EUVD-2026-0024

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by eopkg. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be shown by lseopkg and...

CVE-2026-21436 eopkg has Path Traversal: '../filedir' vulnerability

eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could escape the directory set by --destdir. This requires the installation of a package from a malicious or compromised source. Files in such packages would not be installed in the path given...

CVE-2025-68620

creationtimestamp| type| source ---|---|--- 2026-01-01 17:54:21+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-fq56-hvg6-wvm5 2026-01-01 20:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbf6bouxuo2u 2026-01-01...

CVE-2025-15276

A flaw was found in FontForge. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted SFD file. This issue arises from improper validation of user-supplied data during SFD file parsing, leading to deserialization of untrusted data. Successful exploitatio...

SUSE CVE-2025-67746

Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer downloads from might in some way inject ANSI control characters in the terminal output of various Composer commands, causing mangled output and...

PT-2026-8217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the macvlan component, specifically in the macvlan common newlink function. A use-after-free condition can occur when creating a new macvlan link...

PT-2026-26146

HTSlib is a library for reading and writing bioinformatics file formats. GZI files are used to index block-compressed GZIP BGZF files. In the GZI loading function, bgzf index load hfile, it was possible to trigger an integer overflow, leading to an under- or zero-sized buffer being allocated to...

PT-2026-28494

Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.23.0 Description Incus lacks validation of the image fingerprint when downloading from simplestreams image servers. This can lead to image cache poisoning, potentially allowing an attacker to provide a compromised ima...

PT-2026-1017

Name of the Vulnerable Software and Affected Versions eopkg versions prior to 4.4.0 Description eopkg is a package manager for Solus implemented in Python3. A malicious package could bypass the directory restrictions imposed by the --destdir option. Exploitation requires installing a package from...

CVE-2025-66863

A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable PE file. This can lead to a denial of service, making the affected application unavailable. Mitigation To reduce the risk of exploitation, users should avoid processing...