ROOT-OS-DEBIAN-13-CVE-2025-68302 CVE-2025-68302 in rootio-linux - Patched by Root

Root has patched CVE-2025-68302 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-39720 CVE-2025-39720 in rootio-linux - Patched by Root

Root has patched CVE-2025-39720 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

CVE-2026-8987

creationtimestamp| type| source ---|---|--- 2026-07-22 01:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr77upipxb2j 2026-07-22 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratyrlhlu2k...

PT-2026-63544

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the OcspServerCertificateValidator where out-of-date OCSP Online Certificate Status Protocol responses are flagged but not stopped from...

PT-2026-63474

A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling validation is enabled by default for outgoing TLS connections. Affected scenarios require the remote peer to hold a...

CVE-2026-60264

creationtimestamp| type| source ---|---|--- 2026-07-21 23:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k 2026-07-23 16:50:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 10:37:07+00:00| seen|...

DEBIAN-CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-10675

creationtimestamp| type| source ---|---|--- 2026-07-21 22:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6vgein622b...

CVE-2026-10677

creationtimestamp| type| source ---|---|--- 2026-07-21 22:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uh7ybxp2o...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-56820

Netty (versions 4.2.0.Final–4.2.15.Final and before 4.1.135.Final) contains an OCSP validation flaw in OcspClient: it does not verify that the CertificateID in the OCSP response matches the requested CertificateID, allowing a replay of a GOOD status issued by the same CA to bypass revocation chec...

CVE-2026-21953

creationtimestamp| type| source ---|---|--- 2026-07-21 21:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6sjn4xpd2a...

CVE-2026-60188

The CVE-2026-60188 entry affects Oracle MySQL components: MySQL Server (Replication) and MySQL Cluster. Affected versions are MySQL Server 8.4.0–8.4.10 and 9.7.0–9.7.1; MySQL Cluster 8.0.0–8.0.47, 8.4.0–8.4.10, and 9.7.0–9.7.1. The vulnerability can be exploited by a high-privilege attacker with ...

CVE-2026-63903

A flaw was found in the Linux kernel's belkinsa USB serial driver. The driver's interrupt handling routine fails to validate the length of incoming status reports. This oversight allows a local attacker, by connecting a specially crafted USB device, to trigger an out-of-bounds read. The primary...

CVE-2026-47412

creationtimestamp| type| source ---|---|--- 2026-07-21 19:31:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6kczhtvo2o...

httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server

A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...

MINI-HHVQ-M4F8-GJC5

Bulletin has no description...

SUSE CVE-2026-63903

In the Linux kernel, the following vulnerability has been resolved: USB: serial: belkinsa: validate interrupt status length The Belkin interrupt callback treats interrupt data as a four-byte status report and reads LSR/MSR fields at offsets 2 and 3. The interrupt-in buffer length is derived from...

SUSE CVE-2026-63961

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and se...