PT-2026-72272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SCSI target core during the REGISTER AND MOVE process. The function core scsi3 emulate pro register and move maps the PERSISTENT RESERVE OUT paramete...

PT-2026-72273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCSI target component where the core scsi3 decode spec i port and core scsi3 emulate register and move functions pass a raw PERSISTENT RESERVE OUT parameter buffer...

Open Redirect

Spring Security is vulnerable to Open Redirect. The vulnerability is due to CookieRequestCache and CookieServerRequestCache storing and using an unvalidated absolute URL from a browser cookie as the post-login redirect target, allowing an attacker to redirect users to a malicious destination...

The vulnerability in the `drivers/target/iscsi/iscsi_target_util.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/target/iscsi/iscsitargetutil.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

RLSA-2026:54343 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 kernel: scsi: target:...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RockyLinux 10 : kernel (RLSA-2026:54343)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54343 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...

Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

GHSA-88P2-JJ8W-J8QG Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Summary The target search endpoint POST /api/latest/fleet/targets returned team enroll secrets and full team configuration, including credential-bearing agent options, to observer-class users. Other team-facing endpoints mask these fields for observers; the target search endpoint did not apply th...

kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

SUSE CVE-2026-45571

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were...

Vulnerabilities in Microsoft Windows

Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...

CVE-2026-65796

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65791

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65681

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-65679

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

EUVD-2026-56744

Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-65796

CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...