CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-81235

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

EUVD-2026-78919

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-81235

Dell Wyse Management Suite , versions prior to 2605.0.3.683 , contains a Missing Cryptographic Step vulnerability. A high-privileged attacker with remote access could potentially exploit this flaw, leading to Information tampering with a scope change. The assigned CVSS v3.1 base score is 8.0 (HIG...

CVE-2026-81235: Missing Cryptographic Step

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

PT-2026-92174

Name of the Vulnerable Software and Affected Versions Dell Wyse Management Suite versions prior to 2605.0.3.683 Description A missing cryptographic step allows a high privileged attacker with remote access to potentially perform information tampering. Recommendations Update to version 2605.0.3.68...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fixed a memory leak that occurred when using one-step timestamping. When running one-step sync timestamping, the hardware is configured to insert the TX time into the frame. There is therefore no reason to keep th...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize The step variable is initialized to zero. It is changed during the loop, but if it isn’t changed, it will remain zero. Add a variable check before the division...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server could cause the FreeRDP client to crash by sending audio data in IMA ADPCM format with an invalid initial step index value = 89. The invalid step index was read directly from the netwo...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Networks: hns3: Fixed a deadlock issue that occurred during the reset process when configuring tc. During the reset process, configuring tc can lead to a deadlock. The sequence of events is as follows: 1. pf reset start 2. setup ...

Astra Linux – Vulnerability in Tomcat9

A missing critical step in the authentication process in Apache Tomcat’s vulnerability allows attackers to authenticate without providing the correct password. This issue affects Apache Tomcat versions ranging from 11.0.0-M1 through 11.0.4, from 10.1.0-M1 through 10.1.36, from 9.0.0.M1 through...

CVE-2026-78224

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...

EUVD-2026-76116

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...

Exploit for CVE-2026-88861

SecDim Challenge Builder Repro — Assurance Drift Working rep...

PT-2026-89881

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...

CVE-2026-78224: Improper Restriction of XML External Entity Reference

The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...

Exploit for CVE-2026-73313

CVE-2026-73313 XenForo before 2.3.13 can complete one user's...

CLEANSTART-2026-FT20664 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-AJ39907 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the step package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...