PT-2026-64891

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description An allocation of resources without limits or throttling issue exists in the Apache Thrift Rust bindings. Specifically, the Rust binary protocol non-strict path lacks a string size limit, which...

Atlassian Jira Service Management Data Center and Server 10.0.x / 10.1.1 / 10.2.x / 10.3.x < 10.3.7 / 10.4.x / 10.5.x / 10.6.x / 11.x < 11.3.8 (JSDSERVER-16652)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16652 advisory. - This High severity BASM Broken Authentication & Session Management vulnerability was introduced in...

PT-2026-64880

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.24.0 Description Improper validation of certificates with host mismatch occurs in the Apache Thrift c glib bindings. This issue results in the TLS client failing to perform necessary hostname verification...

SUSE-SU-2026:3254-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060....

CVE-2026-61108

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged...

CVE-2026-47064

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...

CVE-2026-60181

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Configurator. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 PoC for Galaxy S24 Ultra SM-S928U1 Device-sp...

CVE-2026-17459

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...

[SECURITY] [DLA 4700-1] linux-6.1 security update

Debian LTS Advisory DLA-4700-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 26, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.177-1deb11u1 CVE ID : CVE-2025-23131 CVE-2026-23272 CVE-2026-23278 CVE-2026-23302 CVE-2026-31451 CVE-2026-46252...

EUVD-2026-49053

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack...

CVE-2026-17433 nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

EUVD-2026-49048

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

CVE-2026-17432

A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...

PT-2026-65086

Name of the Vulnerable Software and Affected Versions Valkey versions prior to 7.2.14 Valkey versions prior to 8.0.10 Valkey versions prior to 8.1.9 Valkey versions prior to 9.0.5 Valkey versions prior to 9.1.1 Description A use-after-free issue exists when TLS is enabled. The tlsProcessPendingDa...

PT-2026-65074

These are all security issues fixed in the libunbound8-1.25.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64793

Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65 Description An improper authorization issue exists within the MCP Server Approval component, specifically affecting the createChatSdkBridge.setup function located in the src/channels/chat-sdk-bridge....

OPENSUSE-SU-2026:11375-1 bind-9.20.26-1.1 on GA media

These are all security issues fixed in the bind-9.20.26-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11376-1 ignition-2.26.0-5.1 on GA media

These are all security issues fixed in the ignition-2.26.0-5.1 package on the GA media of openSUSE Tumbleweed...

MozillaFirefox-153.0-1.1 on GA media (moderate)

MozillaFirefox-153.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11358-1 Rating: moderate Cross-References: CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358 CVE-2026-16359 CVE-2026-16360...