Security information for Hitachi Disk Array Systems

Overview CVE-2026-33842 | Windows File Explorer Information Disclosure Vulnerability CVE-2026-34328 | Windows Audio Service Information Disclosure Vulnerability CVE-2026-34346 | Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability CVE-2026-34348 | Windows Event Loggi...

PT-2026-91482

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to...

CVE-2026-49030

pathe (unjs) through version 2.0.3 unconditionally normalizes backslash characters to forward slashes on all platforms, including POSIX systems where backslash is a valid filename character. This causes join(), resolve(), and normalize() to interpret backslash-separated dot notation sequences as ...

CVE-2026-89579

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically impacting 32-bit systems. This vulnerability stems from incorrect sizing and indexing of bloom filters, which can lead to out-of-bounds memory access. A local attacker with CAPBPF capabilities could exploit...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-15603 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, azurite...

CISA Malcolm

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

CVE-2026-89158

PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...

CVE-2026-89157

PCRE2 before 10.48, on 32-bit platforms, has a pcre2patternconvert out-of-bounds write when an attacker can provide a large pattern...

CVE-2026-49838

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

CVE-2026-38058

creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01...

CVE-2026-81821

creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...

CVE-2026-78224

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:31+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

CVE-2026-82583

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

USN-8748-1 linux-nvidia-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - GFS2 file system; -...

uac v3.4.0

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

SUSE CVE-2026-80917

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2026-89049: Server-Side Request Forgery (SSRF)

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...