ROOT-OS-DEBIAN-13-CVE-2026-34589 CVE-2026-34589 in openexr - Patched by Root

Root has patched CVE-2026-34589 in the openexr package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-48074 CVE-2025-48074 in openexr - Patched by Root

Root has patched CVE-2025-48074 in the openexr package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34589 CVE-2026-34589 in openexr - Patched by Root

Root has patched CVE-2026-34589 in the openexr package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-34380 CVE-2026-34380 in openexr - Patched by Root

Root has patched CVE-2026-34380 in the openexr package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-41142 CVE-2026-41142 in openexr - Patched by Root

Root has patched CVE-2026-41142 in the openexr package for Root:Debian:12. Multiple fixed versions available...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

CVE-2026-84698 PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size

PX4 Autopilot contains a heap buffer overflow vulnerability in the sdbench command that writes a four-byte block number into a user-supplied sized allocation. Attackers can invoke sdbench with a block size below four bytes to overflow the heap buffer and potentially execute code or crash the syst...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

Rockwell FactoryTalk Activation Manager <= 5.02 Privilege Escalation (SD1799)

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is 5.02 or prior. It is, therefore, affected by a privilege escalation vulnerability. The security issue stems from custom actions in the installer that spawn visible console windows running with SYSTEM...

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

EUVD-2026-66359

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

CVE-2026-73779

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73754

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...

EUVD-2026-69642

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-73774

A buffer overflow vulnerability in the underlying operating system of AOS-CX allows an unauthenticated attacker on an adjacent network to send specially crafted packets, resulting in limited disclosure or modification of sensitive information and potential disruption of the affected system. The v...

EUVD-2026-69637

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure ...

CVE-2026-73774 Unauthenticated Buffer Overflow Vulnerability leads to Sensitive Information Disclosure in AOS-CX

A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by sending specially crafted packets to the affected system. Successful exploitation of this vulnerability could result in limited disclosure ...

EUVD-2026-69628

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

EUVD-2026-69618

Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user to disrupt the normal operation of a vulnerable system...