Security update for valkey (important)

openSUSE security update: security update for valkey ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21485-1 Rating: important References: bsc1272442 bsc1272443 Cross-References: CVE-2026-56684 CVE-2026-63639 CVSS scores: CVE-2026-56684 SUSE : 7.5...

Security update for openvpn (important)

openSUSE security update: security update for openvpn ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21488-1 Rating: important References: bsc1270413 bsc1270414 Cross-References: CVE-2026-13122 CVE-2026-13698 CVSS scores: CVE-2026-13122 SUSE : 7.5...

Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...

Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104334 advisory. - This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and...

Cisco Adaptive Security Appliance (ASA) Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the...

RockyLinux 10 : nodejs22 (RLSA-2026:48033)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:48033 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed ta...

Security update for google-guest-agent (important)

openSUSE security update: security update for google-guest-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21476-1 Rating: important References: bsc1266603 bsc1272118 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821...

Security update for ignition (important)

openSUSE security update: security update for ignition ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21482-1 Rating: important References: bsc1266606 bsc1272059 Cross-References: CVE-2026-39821 CVE-2026-56852 CVSS scores: CVE-2026-39821 SUSE : 7.4...

RockyLinux 9 : java-25-openjdk (RLSA-2026:42899)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42899 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

RHEL 8 : abrt (RHSA-2026:48819)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48819 advisory. The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABR...

CVE-2026-66364

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over...

CVE-2026-66720 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing,...

CVE-2026-66369 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66369

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66369 MZ Automation libiec61850 Out-of-bounds Read

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66418

creationtimestamp| type| source ---|---|--- 2026-07-30 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh22scsy22 2026-07-30 22:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gtwl3xl2iqw3q 2026-07-31 12:42:04+00:00| seen|...

Malicious Package

Overview date-fns-2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

GHSA-HF3J-86P7-MFW8

creationtimestamp| type| source ---|---|--- 2026-07-30 21:31:48+00:00| seen| https://gist.github.com/alon710/2558fd727c5d711082968032190a8577 2026-07-30 21:38:54+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mrvfmzyzxd23...

EUVD-2026-51310

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In versions 8.0.0-next.0 through 8.2.0 and 9.0.0 through 9.0.2, the error.message is interpolated into the default HTML exception response without escaping, allowing a crafted missing-route URL to execute...

CVE-2026-66415

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva57i7jh2o 2026-07-30 20:22:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbe4xv6v2d...