ROOT-OS-DEBIAN-11-CVE-2026-49337 CVE-2026-49337 in libde265 - Patched by Root

Root has patched CVE-2026-49337 in the libde265 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-4948 CVE-2025-4948 in libsoup3 - Patched by Root

Root has patched CVE-2025-4948 in the libsoup3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-9669 CVE-2026-9669 in python3.11 - Patched by Root

Root has patched CVE-2026-9669 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-15308 CVE-2026-15308 in python3.11 - Patched by Root

Root has patched CVE-2026-15308 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3.11 - Patched by Root

Root has patched CVE-2026-3644 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-7210 CVE-2026-7210 in python3.11 - Patched by Root

Root has patched CVE-2026-7210 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-69534 CVE-2025-69534 in python3.11 - Patched by Root

Root has patched CVE-2025-69534 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Salúa Es-sair in WordPress Plugin Passster versions = 4.3.13...

WordPress AI Builder plugin 2.4.1-2.7.7 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by md. minaruzzaman shovon in WordPress Plugin AI Builder versions 2.4.1-2.7.7...

BIT-TOMCAT-2026-55276 Apache Tomcat: Logged effective web.xml is incomplete

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.0...

BIT-TOMCAT-2026-53404 Apache Tomcat: Bad ornext processing in RewriteValve

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.0...

BIT-TOMCAT-2026-50229 Apache Tomcat: XSS in number guess example

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.0 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0...

BIT-TOMCAT-2026-43514 Apache Tomcat: AJP secret compared in non-constant time

Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may al...

BIT-TOMCAT-2026-43513 Apache Tomcat: LockOutRealm treats user names as case-sensitive

Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also...

BIT-TOMCAT-2026-41284 Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade to versio...

ROOT-APP-MAVEN-CVE-2025-49146 CVE-2025-49146 in org.postgresql:postgresql - Patched by Root

Root has patched CVE-2025-49146 in the org.postgresql:postgresql package for Root:Maven. Multiple fixed versions available...

Dasan GPON Devices - Remote Code Execution

Dasan GPON home routers are susceptible to command injection which can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

CVE-2026-87727

creationtimestamp| type| source ---|---|--- 2026-09-11 04:45:03+00:00| seen| https://jvn.jp/en/jp/JVN20829034...

CVE-2026-8778

creationtimestamp| type| source ---|---|--- 2026-09-11 04:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117250524688517116 2026-09-11 04:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv7q7l5alo2f 2026-09-11 05:41:56+00:00| seen|...

CVE-2026-63695

creationtimestamp| type| source ---|---|--- 2026-09-11 01:32:47+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7gbvovoh2t 2026-09-11 02:14:14+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv7ilztmfu2j 2026-09-15 16:01:20+00:00| seen|...