MINI-WJC2-FCFC-Q89X

Bulletin has no description...

GHSA-6V2G-FPXH-PMMH

creationtimestamp| type| source ---|---|--- 2026-09-05 14:31:44+00:00| seen| https://gist.github.com/alon710/e9c9321eb429f1e237680df95cb576b8...

Exploit for CVE-2026-3326

No d...

Exploit for CVE-2026-3891

No d...

MINI-RMW6-X739-MM39

Bulletin has no description...

MINI-JG69-J4GX-879Q

Bulletin has no description...

MINI-CCWX-Q6GR-2XJ7

Bulletin has no description...

MINI-65H2-QQRX-JV6J

Bulletin has no description...

MINI-R477-6FPH-WVQ5

Bulletin has no description...

MINI-V3HJ-JCGC-8652

Bulletin has no description...

MINI-HHVQ-G349-36PJ

Bulletin has no description...

SUSE CVE-2026-35511

unknown...

SUSE CVE-2026-49446

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before removing x-cosmos-user, x-cosmos-role,...

SUSE CVE-2026-53658

Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured with an LDAP backend, Client.GetUser in lib/server/ldap/client.go inserts the username from HTTP Basic authentication into the LDAP uid search UserFilter without escaping LDAP metacharacters...

SUSE CVE-2026-54162

unknown...

SUSE CVE-2026-54167

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...

SUSE CVE-2026-54168

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installe...

SUSE CVE-2026-55061

uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go parses UNIGETEDITOR or EDITOR with strings.Spliteditor, " " and passes every space-delimited suffix as an argument to the selected editor executable. An attacker who can...

SUSE CVE-2026-55062

uniget is a universal installer and updater for container tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that directory. The resulting path is passed ...

SUSE CVE-2026-55149

Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the authrequest module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go parses the total part count from an attacker-controlled multipart cookie name and passes the value to makestring, numParts without checking that the value is...