29620 matches found
CVE-2026-56160
creationtimestamp| type| source ---|---|--- 2026-07-24 00:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3lwoaig2a 2026-07-24 02:25:24+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrecev6bhf2p 2026-07-24 02:25:26+00:00| seen|...
CVE-2026-56165
creationtimestamp| type| source ---|---|--- 2026-07-24 00:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3iezou62v 2026-07-24 05:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2wg5nh2f 2026-07-31 02:07:06+00:00| seen|...
PT-2026-64232
Name of the Vulnerable Software and Affected Versions OpenStack Ironic Python Agent versions prior to 11.6.1 Description A project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent. This occurs because the value of the ntp server variable is...
AlmaLinux 8 : kernel-rt (ALSA-2026:45116)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:45116 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited kernel: d...
PT-2026-64304
Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.19 Loytec L-INX versions prior to 8.4.19 Loytec L-GATE versions prior to 8.4.19 Loytec L-ROC versions prior to 8.4.19 Loytec L-IOB versions prior to 8.4.19 Loytec L-DALI versions prior to 8.4.19 Loytec...
ALSA-2026:45116 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly...
PT-2026-64338
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the mac80211 module of the Linux kernel. The ieee80211 parse neg ttlm function incorrectly advances its cursor for every Traffic Identifier TID, regardles...
Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly...
PT-2026-64305
The Zephyr ext2 file system validates the on-disk superblock in ext2 verify disk superblock subsys/fs/ext2/ext2 impl.c before completing a mount. The validator checked the magic number, block size, revision and feature flags, but did not verify that the on-disk fields s blocks per group and s...
RHEL 8 : kernel-rt (RHSA-2026:45116)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:45116 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
CVE-2026-16362
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...
CVE-2026-63359
creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcwptc322...
GO-2026-5987 Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh
The nebula-mesh Web UI host creation ignores the configured enrollment token TTL and instead mints 24-hour bearer enrollment tokens. This can lead to tokens remaining valid for longer than intended, increasing the window of opportunity for an attacker to use an intercepted token...
CVE-2026-60436
creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-47755
CVE-2026-47755 : ITFlow prior to v26.05 is vulnerable to authenticated cross-tenant credential disclosure. A low-privileged authenticated agent can fetch plaintext credentials and TOTP secrets of another client by loading the credential edit modal for an arbitrary credential_id due to missing cli...
CVE-2026-61184
creationtimestamp| type| source ---|---|--- 2026-07-23 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdcku3brp24 2026-07-23 18:17:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 23:07:06+00:00| seen|...
CVE-2026-15615
Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...
CVE-2026-15615 SAML <Conditions> element not validated
Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...