CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-105859

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

CVE-2026-105859

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

CVE-2026-105859 Payload: Unauthorized update to collection documents

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

CVE-2026-105859

The headless content management system Payload contains a vulnerability in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . An attacker can submit a request to a specific update endpoint to modify collection documents because the system fails to enforce collection or field-leve...

CVE-2026-105859 Payload: Unauthorized update to collection documents

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control...

NPM: Payload didn't enforce field-level password update restrictions

NPM: Payload didn't enforce field-level password update restrictions vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...

CLSA-2026-1791296249 TuxCare security update for org.springframework.data (3 CVEs)

TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 3.1.10.RELEASE-tuxcare.1...

CLSA-2026-1791293888 TuxCare security update for simple-git (2 CVEs)

TuxCare rebuilt simple-git to address 2 CVEs. Fixed in 3.36.0-tuxcare.1...

[SECURITY] [DLA 4825-1] suricata-update security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 06, 2026 https://wiki.debian.org/LTS -...

CLSA-2026-1791290323 TuxCare security update for lodash (3 CVEs)

TuxCare rebuilt lodash to address 3 CVEs. Fixed in 2.3.0-tuxcare.1...

CLSA-2026-1791289714 TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 1.5.6-tuxcare.1...

CLSA-2026-1791289094 TuxCare security update for org.springframework (31 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 31 CVEs. Fixed in 4.3.16.RELEASE-tuxcare.1...

ROOT-APP-PYPI-CVE-2026-34518 CVE-2026-34518 in aiohttp - Patched by Root

Root has patched CVE-2026-34518 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1791281018 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.14...

ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root

Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34003 CVE-2026-34003 in xorg-server - Patched by Root

Root has patched CVE-2026-34003 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

CLSA-2026-1791278813 TuxCare security update for flatted (1 CVE)

TuxCare rebuilt flatted to address 1 CVE. Fixed in 2.0.0-tuxcare.1...

CVE-2026-98269

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...

CVE-2026-98269

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...