Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: dm-verity: Recursive forward error correction has been disabled. There are two issues with this recursive correction mechanism: 1. It may cause a denial-of-service attack. In the fecreadbufs function, there is a loop with 253...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Fixed a use-after-free bug in brcmfcfg80211detach. This is the candidate patch for CVE-2023-47233: https://nvd.nist.gov/vuln/detail/CVE-2023-47233 In the brcm80211 driver, the process starts with the following...

Astra Linux – Vulnerability in Chromium

Memory access beyond the allowed boundaries in the Service Worker API in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Memory access beyond the allowed boundaries in the Service Worker API in Google Chrome prior to version 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bnxt: prevents a UAF Use After Free error after handing over control to the PTP worker. When reading the timestamp, bnxttxint hands over the ownership of the completed skb to the PTP worker. The skb should not be used afterward, ...

Astra Linux – Vulnerability in node-marked

Marked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression block.def might cause catastrophic backtracking against certain strings, leading to a regular expression denial of service ReDoS attack. Any user who runs untrusted markdown using a vulnerable version of...

CVE-2026-13417

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate the type of fields.properties on block creation which allows an authenticated user with editor access to a board to crash the Boards plugin worker and trigger a denial of service via a child...

CVE-2026-13417

Mattermost Boards plugin denial of service vulnerability in versions 11.9.x ≤ 11.9.0 , 11.8.x ≤ 11.8.4 , 11.7.x ≤ 11.7.7 , and 10.11.x ≤ 10.11.22 . The plugin fails to validate the type of fields.properties on block creation, allowing an authenticated user with editor access to a board to crash t...

CVE-2026-13417 Boards plugin denial of service via unvalidated block fields.properties

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate the type of fields.properties on block creation which allows an authenticated user with editor access to a board to crash the Boards plugin worker and trigger a denial of service via a child...

Microsoft Edge (Chromium) < 153.0.4234.32 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.32. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2026 advisory. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remot...

PT-2026-91231

Description The worker's Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline and acts on frames before any authentication has taken place. It allocated buffers sized from a length field carried in the frame, so a single frame from an unauthenticated peer...

CVE-2026-82429: Time-of-check Time-of-use (TOCTOU) Race Condition

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

CVE-2026-82430: Time-of-check Time-of-use (TOCTOU) Race Condition

Description When launching a Docker or OCI worker, the setuid-root worker-launcher first changes ownership of the entire worker directory to the untrusted topology user, and only afterwards reads and acts on the command file that the supervisor wrote into that same directory. The file is opened...

PT-2026-91227

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

PT-2026-91115

🚨 CRITICAL: Apache Storm has patched a vulnerability allowing local privilege escalation to root. CVE-2026-82430 affects the Storm Worker Launcher and can allow a local attacker to escalate privileges through container command files. ⚠️ Organizations running Apache Storm should update to a patched...

RHEL 10 : rhc-worker-playbook (RHSA-2026:67464)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67464 advisory. A worker for yggdrasil that receives Ansible playbooks and executes them against the local host. Security Fixes: encoding/asn1: golang: Go...

waf-checker v1.2.0

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. 🧪 Test Coverage & Status All packages are thoroughly...

SUSE CVE-2026-89464

In the Linux kernel, the following vulnerability has been resolved: power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disables charging and masks interrupts. It cancels neither worker. A worker...

Linux Distros Unpatched Vulnerability : CVE-2026-89464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: twl4030charger: cancel workers via devm bci is devm-allocated. Two workers bci-work and bci-currentworker dereference it. twl4030bciremove disabl...

Linux Distros Unpatched Vulnerability : CVE-2026-89681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix layout fence worker double- reference race The workqueue core clears...