CVE-2026-57586

creationtimestamp| type| source ---|---|--- 2026-09-15 16:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkyq6bawv2v...

CVE-2026-89025

creationtimestamp| type| source ---|---|--- 2026-09-15 16:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvkyofw5es2b...

CVE-2026-65838

creationtimestamp| type| source ---|---|--- 2026-09-14 21:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mviyy5okkd2m...

CVE-2026-73496

creationtimestamp| type| source ---|---|--- 2026-09-14 21:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mviyxvwudy2b 2026-09-18 12:00:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3465 2026-09-19 00:00:37+00:00| published-proof-of-concept|...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in its HTTP/1.1 wire parser http/src/main/java/org/http4s/blaze/http/parser/, which carries five independent conformance laxities, notably in Content-Length handling relative to RFC 9110 section 8.6 and RFC 9112. ...

CVE-2026-91079

creationtimestamp| type| source ---|---|--- 2026-09-14 19:02:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvisdgamqk2e...

CVE-2026-73494 blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in the hand-written Java parser under http/src/main/java/org/http4s/blaze/http/parser/ can cause blaze to derive a...

CVE-2026-73494

blaze is a Scala library for asynchronous network I/O pipelines. Five HTTP/1.1 conformance laxities in its hand-written Java parser (http/src/main/java/org/http4s/blaze/http/parser/) accept malformed requests—invalid tchar header names, obs-fold lines, unsupported Transfer-Encoding values, duplic...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: Disable the interrupt enable bit before calling devmrequestirq The customer reports a soft lockup issue related to the i2c driver. After checking, it was found that the i2c module was performing a transmission operatio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc – fixed an off-by-one error in the wireorder validation. The current validation wireorderi ARRAYSIZEconfig pins allows wireorderi to equal ARRAYSIZEconfig pins, which causes out-of-bounds access when used as an...

CVE-2026-88802

creationtimestamp| type| source ---|---|--- 2026-09-14 04:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvh7wy357f2s...

CVE-2026-85129

creationtimestamp| type| source ---|---|--- 2026-09-14 00:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgsj6vlfl23...

CVE-2026-89724

creationtimestamp| type| source ---|---|--- 2026-09-13 20:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgf4butcg2e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89733

creationtimestamp| type| source ---|---|--- 2026-09-13 19:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgbrr6ifg2r 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89742

creationtimestamp| type| source ---|---|--- 2026-09-13 19:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvgbradx2w2e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89736

creationtimestamp| type| source ---|---|--- 2026-09-13 18:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvg6fwefys2z 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89750

creationtimestamp| type| source ---|---|--- 2026-09-13 16:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfxrkxqjs23 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...