CVE-2026-66138

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

EUVD-2026-48476

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the value of ntpserver is passed to a shell...

SUSE CVE-2026-59676

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10...

CVE-2026-56160

creationtimestamp| type| source ---|---|--- 2026-07-24 00:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3lwoaig2a 2026-07-24 02:25:24+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrecev6bhf2p 2026-07-24 02:25:26+00:00| seen|...

CVE-2026-56165

creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3iezou62v 2026-07-24 05:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2wg5nh2f 2026-07-31 02:07:06+00:00| seen|...

PT-2026-67307

Name of the Vulnerable Software and Affected Versions better-auth versions 1.1.3 through 1.6.21 better-auth versions 1.7.0-beta.0 through 1.7.0-beta.9 Description A pre-account hijacking flaw allows account takeover when open email and password registration is enabled alongside magic-link or...

AlmaLinux 8 : kernel-rt (ALSA-2026:45116)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:45116 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited kernel: d...

PT-2026-64232

Name of the Vulnerable Software and Affected Versions OpenStack Ironic Python Agent versions prior to 11.6.1 Description A project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent. This occurs because the value of the ntp server variable is...

PT-2026-64304

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...

ALSA-2026:45116 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly...

PT-2026-64338

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the mac80211 module of the Linux kernel. The ieee80211 parse neg ttlm function incorrectly advances its cursor for every Traffic Identifier TID, regardles...

PT-2026-64305

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The ext2 file system fails to verify that the on-disk superblock fields s blocks per group and s inodes per group are non-zero during the mount process in the ext2 verify disk superblock...

RHEL 8 : kernel-rt (RHSA-2026:45116)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45116 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly...

CVE-2026-16362

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

CVE-2026-63359

creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcwptc322...

GO-2026-5987 Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh

The nebula-mesh Web UI host creation ignores the configured enrollment token TTL and instead mints 24-hour bearer enrollment tokens. This can lead to tokens remaining valid for longer than intended, increasing the window of opportunity for an attacker to use an intercepted token...

CVE-2026-60436

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-47755

CVE-2026-47755 : ITFlow prior to v26.05 is vulnerable to authenticated cross-tenant credential disclosure. A low-privileged authenticated agent can fetch plaintext credentials and TOTP secrets of another client by loading the credential edit modal for an arbitrary credential_id due to missing cli...

CVE-2026-61184

creationtimestamp| type| source ---|---|--- 2026-07-23 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcku3brp24 2026-07-23 18:17:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 23:07:06+00:00| seen|...