CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...

CVE-2026-58179

CVE-2026-58179 affects Apache Traffic Server (regex_remap plugin). The vulnerability is a stack overflow triggered by substitution input, impacting versions 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Remediation is to upgrade to 9.2.15 or 10.1.4, which contain the fix. The available connected ...

CVE-2026-60082 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-60082 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53361 affecting package kernel for versions less than 6.6.144.1-1

CVE-2026-53361 affecting package kernel for versions less than 6.6.144.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53064 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53064 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56132 affecting package expat for versions less than 2.8.2-1

CVE-2026-56132 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-53133 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53133 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

MAL-2026-7241 Malicious code in chai-as-upgraded (npm)

--- -= Per source details. Do not edit below this line.=-...

postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison

A flaw was found in PostgreSQL. This vulnerability, a covert timing channel, exists in the comparison of MD5-hashed passwords during authentication. A remote attacker could exploit this to recover user credentials, gaining unauthorized access to the database. This issue specifically impacts...

CVE-2026-46064 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46064 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46132 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46132 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46274 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46274 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46077 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46077 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46107 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46107 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46152 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46152 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46161 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46161 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46189 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46189 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

EUVD-2026-36726

Multer vulnerable to Denial of Service via deeply nested field names...

CVE-2026-32652

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earli...