CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

EUVD-2026-51386

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43830 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43830

CVE-2026-43830 describes a command injection vulnerability in the firmware upgrade file verification process. Exploitation could allow an attacker to execute arbitrary commands during firmware upgrade. Documents provide no vendor/product/version details or remediation steps; no exploit status is ...

SUSE SLES12 Security Update : python-dulwich (SUSE-SU-2026:3408-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3408-1 advisory. This update for python-dulwich fixes the following issue - CVE-2026-38974: Dulwich through 1.1.0 was found to be missing SSH host key...

Oracle Linux 8 : grafana (ELSA-2026-46391)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-46391 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-191816: CVE-2026-44740 Tenable has extracted the precedi...

The vulnerability of the Google Chrome browser’s Navigation function, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Google Chrome browser’s Navigation function is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

DEBIAN-CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

UBUNTU-CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362

The CVE-2026-63362 entry concerns an unsigned integer underflow in the open62541 PubSub signature verification path, which may let a remote attacker cause a denial of service via a crafted UDP packet. Affected component is the signature verification logic within PubSub of open62541. The root caus...

CVE-2026-63362

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

CVE-2026-63362 o6 Automation open62541 Integer Underflow

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

EUVD-2026-51199

Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by excluding the Laravel VerifyCsrfToken middleware from the global middleware stack in app/Http/Kernel.php. Attackers can...

SUSE CVE-2026-49998

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse a key for one allowed issuer to verify a JWT for another allowed issuer because the JWKS cache and singleflight lookup were keyed only by JWT header kid, not...

SUSE CVE-2026-52809

Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...

SUSE CVE-2026-55075

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaws in Coder's OIDC login chained into account takeover. Email-based user matching fell back to linking by email without checking for an existing link...

SUSE CVE-2026-55076

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked emailverified with a direct Go bool type assertion. When an IdP returned the claim as a non-boolean for example the string...

SUSE CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy aibridgeproxyd created a goproxy server whose default transport set InsecureSkipVerify: true and only assigned a...