CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73281 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6

CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6. A patched version of the package is available...

CVE-2026-66485 affecting package cpio for versions less than 2.14-2

CVE-2026-66485 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10. A patched version of the package is available...

CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-16742 affecting package systemd for versions less than 255-34

CVE-2026-16742 affecting package systemd for versions less than 255-34. A patched version of the package is available...

CVE-2026-15059 affecting package systemd for versions less than 255-34

CVE-2026-15059 affecting package systemd for versions less than 255-34. A patched version of the package is available...

CVE-2026-63632 affecting package pytorch for versions less than 2.2.2-17

CVE-2026-63632 affecting package pytorch for versions less than 2.2.2-17. A patched version of the package is available...

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6. A patched version of the package is available...

CVE-2026-65959 affecting package vitess for versions less than 19.0.4-13

CVE-2026-65959 affecting package vitess for versions less than 19.0.4-13. A patched version of the package is available...

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-75032 affecting package bluez for versions less than 5.63-7

CVE-2026-75032 affecting package bluez for versions less than 5.63-7. A patched version of the package is available...

EUVD-2026-42966

ZITADEL: Auto-linking by email: IdP-side email verification is not checked...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455

This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...

EUVD-2026-42968

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover...

EUVD-2026-38206

Central Dogma: SSH host-key verification permanently disabled in Git mirror SshGitMirror...

CVE-2026-49439 OpenRemote read-only asset users can write predicted datapoints

OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only read:assets privileges to write predicted datapoints. Version 1.24.1 fixes the issue...

AZL-100667 CVE-2026-89650 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the decode cursor by numexporttargets sizeofu32 without first checking...