PT-2026-103312

🚨 CVE-2026-100265 In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation 🎖@cveNotify...

PT-2026-123599

Bump release to 3.7.17-8.0.1.1.tuxcare.els1...

PT-2026-103182

Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...

CVE-2026-94678: Deserialization of Untrusted Data

Contributor PHP Object Injection in Go Live Update Urls = 7.0.8 versions...

AlmaLinux 9.2 [TuxCare] Security Update: frr / frr-selinux Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762420748)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762420748 advisory. - An issue was discovered in FRRouting FRR through 9.0. bgpd/bgppacket.c processes NLRIs if the attribute length is zero...

Linux Distros Unpatched Vulnerability : CVE-2026-13720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Editor can set file-provisioning metadata the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations when creating a dashboard...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1759505734)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1759505734 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 8.4 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS8.4:CLSA-2025:1753207967)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1753207967 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

AlmaLinux 9.6 [TuxCare] Security Update: grafana-pcp Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779109358)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779109358 advisory. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates a...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1757011448)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757011448 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 8.5 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1768587465)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1768587465 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are...

CVE-2026-91191

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

CVE-2026-84409

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CLSA-2026-1790719706 TuxCare security update for 13 packages (2 CVEs)

TuxCare rebuilt 13 packages to address 2 CVEs. Fixed in 13.5.11-tuxcare.18...

CLSA-2026-1790718594 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.4...

CLSA-2026-1790718582 TuxCare security update for uuid (1 CVE)

TuxCare rebuilt uuid to address 1 CVE. Fixed in 2.0.3-tuxcare.1...

CVE-2026-84409

The Lantronix G520 Series Cellular Gateway is vulnerable to a Cross-site Scripting (XSS) flaw in its update mechanism. The device retrieves update metadata over an unencrypted HTTP connection and stores it; a management interface then returns this data in a JSON response, which the web interface ...

CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-100293

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

CVE-2026-100293

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a vulnerability in its local and cloud update mechanisms. The system applies new firmware without cryptographic verification , relying solely on basic hashing. This allows an attacker with network access to the update routine to inject and ...