Vaultwarden icon endpoint SSRF via IP-literal hrefs

Vaultwarden icon Endpoint Server-Side Request Forgery SSRF Vulnerability Overview Vaultwarden's built-in icon service ICONSERVICE=internal automatically fetches, on the server side, the web pages and icon resources pointed to by vault entry URIs in order to display favicons for entries. The...

Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte

Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte Vulnerability Overview The Linux kernel 6LoWPAN IPHC multicast context address compression path contains an off-by-one error and uses a wrong memcpy offset, corrupting the RIID field of compressed multica...

SMTP MIME message/rfc822: encapsulation parser state not reset, bypassing attachment filename and decoded-content inspection

SMTP MIME message/rfc822: encapsulation parser state not reset, bypassing attachment filename and decoded-content inspection Vulnerability Overview Suricata's SMTP MIME parser incompletely resets state when processing message/rfc822 encapsulated messages: after entering the inner message, the...

Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read

Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read Vulnerability Overview The Linux kernel FDDI receive path parses FDDI/LLC/SNAP header fields before verifying that the skb contains enough bytes, so malformed short frames can trigger an out-of-bounds...

Outlook: undisclosed vulnerability (ZAI-2026-HLJV88)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-SCU2XI)

Not disclosed. Details are not yet publicly disclosed...

OpenClaw: undisclosed vulnerability (ZAI-2026-6ZQL09)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-FZEFVA)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-3FCB7G)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-P6W4QC)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-19YSKJ)

Not disclosed. Details are not yet publicly disclosed...

lwIP: undisclosed vulnerability (ZAI-2026-5DYARX)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-BOKDAU)

Not disclosed. Details are not yet publicly disclosed...

wget2: undisclosed vulnerability (ZAI-2026-O1DXP4)

Not disclosed. Details are not yet publicly disclosed...

FreeType: undisclosed vulnerability (ZAI-2026-NATH69)

Not disclosed. Details are not yet publicly disclosed...

OpenBSD: undisclosed vulnerability (ZAI-2026-IF2KLK)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-7EFG4W)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-JXBWGU)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-8OCKNA)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-CMMW1U)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-GHD13E)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-DFUWR5)

Not disclosed. Details are not yet publicly disclosed...

OpenVPN: undisclosed vulnerability (ZAI-2026-05I5H2)

Not disclosed. Details are not yet publicly disclosed...

vLLM: undisclosed vulnerability (ZAI-2026-JX1Z7X)

Not disclosed. Details are not yet publicly disclosed...

vLLM: undisclosed vulnerability (ZAI-2026-0TRNIA)

Not disclosed. Details are not yet publicly disclosed...

MongoDB: undisclosed vulnerability (ZAI-2026-DLUG7Y)

Not disclosed. Details are not yet publicly disclosed...

libevent: undisclosed vulnerability (ZAI-2026-69JPUA)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-F75VZH)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-ZISLGH)

Not disclosed. Details are not yet publicly disclosed...

RT-Thread: undisclosed vulnerability (ZAI-2026-W9EG74)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-3VZWCV)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-S8EUR8)

Not disclosed. Details are not yet publicly disclosed...

Suricata: undisclosed vulnerability (ZAI-2026-IJX8OE)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-CVWMUM)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-75JOCY)

Not disclosed. Details are not yet publicly disclosed...

JeecgBoot: undisclosed vulnerability (ZAI-2026-RF3FJB)

Not disclosed. Details are not yet publicly disclosed...

360 Speed Browser: undisclosed vulnerability (ZAI-2026-15GJLO)

Not disclosed. Details are not yet publicly disclosed...

wolfSSL: undisclosed vulnerability (ZAI-2026-2GK04J)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-MIE16I)

Not disclosed. Details are not yet publicly disclosed...

FFmpeg: undisclosed vulnerability (ZAI-2026-07EB06)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-N6V2BZ)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-Z6T3RE)

Not disclosed. Details are not yet publicly disclosed...

JeecgBoot: undisclosed vulnerability (ZAI-2026-H5TF34)

Not disclosed. Details are not yet publicly disclosed...

Baidu Browser: undisclosed vulnerability (ZAI-2026-ZL8C1X)

Not disclosed. Details are not yet publicly disclosed...

Dnsmasq: undisclosed vulnerability (ZAI-2026-E64UY8)

Not disclosed. Details are not yet publicly disclosed...

memcached: undisclosed vulnerability (ZAI-2026-D3EVQY)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-8QCMFK)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-ZDH6F9)

Not disclosed. Details are not yet publicly disclosed...

GStreamer: undisclosed vulnerability (ZAI-2026-8HUOEY)

Not disclosed. Details are not yet publicly disclosed...

Redis: undisclosed vulnerability (ZAI-2026-TOCS8A)

Not disclosed. Details are not yet publicly disclosed...