CVE-2026-9126 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q8X9-C3XR-45R5 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XJVJ-QVP3-H2CG vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9120 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9124 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J2GW-W7XW-RJ29 vulnerabilities

Vulnerabilities for packages: chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-48761

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13,...

Linux Distros Unpatched Vulnerability : CVE-2026-24197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory...

Linux Distros Unpatched Vulnerability : CVE-2026-48489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13,...

MAL-2026-4887 Malicious code in @cloudplatform-single-spa/anti-ddos (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

Automatically Attacking Software Reverse Engineering AI Agents

Software tools for reverse engineering executable binary files, such as Ghidra, enable malware analysts to safely conduct robust static analysis without having access to original source code. Coupled with the analytic power of large language models LLM, agentic systems enabled with tools, such as...

MAL-2026-4985 Malicious code in @cloudplatform-single-spa/svp-lbaas (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

CVE-2026-45968

A flaw was found in the Linux kernel's cpuidle subsystem. On certain PowerNV systems, when only a single idle state is available, the cpuidle ladder governor may incorrectly treat state 1 as usable. This can lead to an out-of-bounds index being passed, causing a NULL enter callback to be invoked...

CVE-2025-14688

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist...

GHSA-3QCW-2RHX-2726 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

GHSA-HCF7-66RW-9F5R vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

watch-tower

OT/ICS Threat Intelligence Lab Local threat intelligence lab...

CVE-2026-35090

In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker can connect to the modem via a telephone with a specific caller ID. This allows them to bypass admin authentication and gain full access to the service protocol and configuration panel...

CVE-2026-39828 vulnerabilities

Vulnerabilities for packages: loki, gitlab-kas, cilium-cli, trivy, snyk-cli, opentelemetry-collector, falco-no-driver, minio, prometheus, zot, k3s, flux-source-controller, docker-machine-driver-harvester, cilium, kubernetes-dashboard, cloud-provider-aws, fscrypt, osv-scanner, containerd, helm,...

CVE-2026-46598 vulnerabilities

Vulnerabilities for packages: loki, gitlab-kas, cilium-cli, snyk-cli, buildah, opentelemetry-collector, falco-no-driver, minio, prometheus, zot, k3s, cilium, kubernetes-dashboard, podman, cloud-provider-aws, fscrypt, containerd, helm, spire-server, aactl, mattermost, external-secrets-operator,...