CVE-2026-44605 affecting package rpm for versions less than 4.18.2-2

CVE-2026-44605 affecting package rpm for versions less than 4.18.2-2. A patched version of the package is available...

CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6

CVE-2026-13346 affecting package python-virtualenv for versions less than 20.36.1-6. A patched version of the package is available...

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2

CVE-2026-56390 affecting package bison for versions less than 3.8.2-2. A patched version of the package is available...

CVE-2026-66485 affecting package cpio for versions less than 2.14-2

CVE-2026-66485 affecting package cpio for versions less than 2.14-2. A patched version of the package is available...

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10

CVE-2026-13346 affecting package python-pip for versions less than 24.2-10. A patched version of the package is available...

CVE-2026-65624 affecting package rabbitmq-server for versions less than 3.13.7-9

CVE-2026-65624 affecting package rabbitmq-server for versions less than 3.13.7-9. A patched version of the package is available...

CVE-2026-15003 affecting package gdb for versions less than 13.2-11

CVE-2026-15003 affecting package gdb for versions less than 13.2-11. A patched version of the package is available...

CVE-2026-56389 affecting package bison for versions less than 3.8.2-2

CVE-2026-56389 affecting package bison for versions less than 3.8.2-2. A patched version of the package is available...

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10

CVE-2026-73282 affecting package openssh for versions less than 9.8p1-10. A patched version of the package is available...

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

EUVD-2026-42966

ZITADEL: Auto-linking by email: IdP-side email verification is not checked...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455

This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

EUVD-2026-42968

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover...

EUVD-2026-38206

Central Dogma: SSH host-key verification permanently disabled in Git mirror SshGitMirror...

CVE-2026-49439 OpenRemote read-only asset users can write predicted datapoints

OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only read:assets privileges to write predicted datapoints. Version 1.24.1 fixes the issue...

AZL-100667 CVE-2026-89650 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the decode cursor by numexporttargets sizeofu32 without first checking...

DEBIAN-CVE-2026-89608

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...