44264 matches found
EUVD-2026-41116
AWS CLI: Overly permissive File Permissions...
AWS CLI: Overly permissive File Permissions
Summary The AWS Command Line Interface AWS CLI is a unified tool for managing AWS services from the command line. Certain CLI subcommands wrote credential and configuration files with world-readable permissions on Unix-like systems with a default umask, allowing other local users on the same host...
CVE-2026-64209
In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swingtbl and preemphasistbl are 4x4 arrays valid indices 0-3, but the boundary check uses " 4" instead of "= 4", allowing index 4 to cause an out-of-bounds...
Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've collectively discovered is that enforcing least privilege for AI agents is harder than we ever imagined. This is why there are so many approaches, from prompt filtering t...
USN-8605-1 linux-azure-fde-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8605-1: Linux kernel (Azure CVM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1 linux-azure-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
CVE-2026-55831 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, s3proxy, kafbat-ui, keycloak, kafbat-ui-fips, apache-pulsar-fips, seata, conductor, floci-az, opensearch-fips, spark-kubernetes-operator, camunda, conductor-fips, kayenta-fips, apache-activemq-artemis, wazuh-indexer, elasticsearch, hono,...
CVE-2026-59898 vulnerabilities
Vulnerabilities for packages: apicurio-registry-fips, s3proxy, kafbat-ui, keycloak, kafbat-ui-fips, apache-pulsar-fips, seata, conductor, floci-az, opensearch-fips, spark-kubernetes-operator, camunda, conductor-fips, kayenta-fips, apache-activemq-artemis, wazuh-indexer, elasticsearch, hono,...
CVE-2026-56822 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-56821 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-55833 vulnerabilities
Vulnerabilities for packages: infinispan, apache-pulsar, wavefront-proxy, logstash, celeborn, cloudwatch-exporter, apache-nifi, management-api-for-apache-cassandra-5.0, opensearch, strimzi-kafka-operator, apicurio-registry, flyway, druid, spark, neo4j, kserve-modelmesh, trino, zipkin, tez, akhq,...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
SUSE CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...