Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
SUSE-SU-2026:2655-1 Vulnerability in python36 (SUSE-SU-2026:2655-1)
vulnerability in python36 (SUSE-SU-2026:2655-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.15-111.1` or later.
SUSE-SU-2026:2654-1 Vulnerability in libsoup2 (SUSE-SU-2026:2654-1)
vulnerability in libsoup2 (SUSE-SU-2026:2654-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.74.3-150600.4.36.1` or later.
SUSE-SU-2026:2653-1 Vulnerability in util-linux (SUSE-SU-2026:2653-1)
vulnerability in util-linux (SUSE-SU-2026:2653-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.37.2-150400.8.47.1` or later.
SUSE-SU-2026:2652-1 Vulnerability in haproxy (SUSE-SU-2026:2652-1)
vulnerability in haproxy (SUSE-SU-2026:2652-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.8.11+git0.01c1056a4-150600.3.15.1` or later.
SUSE-SU-2026:2651-1 Vulnerability in haproxy (SUSE-SU-2026:2651-1)
vulnerability in haproxy (SUSE-SU-2026:2651-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.22+git0.f8e3218e2-150400.3.28.1` or later.
GHSA-97cf-xxww-v429 Vulnerability in rollup-plugin-polyfill-connect (GHSA-97cf-xxww-v429)
vulnerability in rollup-plugin-polyfill-connect (GHSA-97cf-xxww-v429). Risk of unauthorized operations or information disclosure.
GHSA-3462-7h42-6cvg Vulnerability in react-icon-svgs (GHSA-3462-7h42-6cvg)
vulnerability in react-icon-svgs (GHSA-3462-7h42-6cvg). Risk of unauthorized operations or information disclosure.
RLSA-2026:29980 Vulnerability in golang (RLSA-2026:29980)
vulnerability in golang (RLSA-2026:29980). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.26.4-1.el10_2` or later.
RLSA-2026:29874 Vulnerability in nginx (RLSA-2026:29874)
vulnerability in nginx (RLSA-2026:29874). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2:1.26.3-6.el10_2.4` or later.
RLSA-2026:29195 Vulnerability in buildah (RLSA-2026:29195)
vulnerability in buildah (RLSA-2026:29195). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.43.1-2.el10_2` or later.
RLSA-2026:29702 Vulnerability in runc (RLSA-2026:29702)
vulnerability in runc (RLSA-2026:29702). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4:1.4.2-2.el9_8` or later.
RLSA-2026:29981 Vulnerability in golang (RLSA-2026:29981)
vulnerability in golang (RLSA-2026:29981). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0:1.26.4-1.el9_8` or later.
RLSA-2026:29844 Vulnerability in tigervnc (RLSA-2026:29844)
vulnerability in tigervnc (RLSA-2026:29844). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:1.15.0-7.el9_8.2` or later.
RLSA-2026:29940 Vulnerability in thunderbird (RLSA-2026:29940)
vulnerability in thunderbird (RLSA-2026:29940). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0:140.12.0-1.el9_8` or later.
RLSA-2026:29703 Vulnerability in containernetworking-plugins (RLSA-2026:29703)
vulnerability in containernetworking-plugins (RLSA-2026:29703). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1:1.9.0-3.el9_8` or later.
RLSA-2026:29455 Vulnerability in buildah (RLSA-2026:29455)
vulnerability in buildah (RLSA-2026:29455). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2:1.43.1-2.el9_8` or later.
RHSA-2026:30044 Red Hat Security Advisory: poppler security update
Red Hat Security Advisory: poppler security update
RHSA-2026:29952 Red Hat Security Advisory: compat-poppler022 security update
Red Hat Security Advisory: compat-poppler022 security update
DEBIAN-CVE-2026-57918 Vulnerability in libnfs (DEBIAN-CVE-2026-57918)
vulnerability in libnfs (DEBIAN-CVE-2026-57918). Confidential information can be exposed externally.
UBUNTU-CVE-2026-57918 Vulnerability in libnfs (UBUNTU-CVE-2026-57918)
vulnerability in libnfs (UBUNTU-CVE-2026-57918). Confidential information can be exposed externally.
SUSE-SU-2026:2648-1 Vulnerability in openssl-3 (SUSE-SU-2026:2648-1)
vulnerability in openssl-3 (SUSE-SU-2026:2648-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.3-150700.5.36.1` or later.
MAL-2026-6516 Vulnerability in inlifegram (MAL-2026-6516)
vulnerability in inlifegram (MAL-2026-6516). Risk of unauthorized operations or information disclosure. Exploitable via ``pyrogram``.
SUSE-SU-2026:2647-1 Vulnerability in nodejs22 (SUSE-SU-2026:2647-1)
vulnerability in nodejs22 (SUSE-SU-2026:2647-1). Risk of unauthorized operations or information disclosure. Exploitable via `Cookie header`. Mitigation: upgrade to `22.23.0-150600.13.18.1` or later.
UBUNTU-CVE-2026-6658 Vulnerability in nbconvert (UBUNTU-CVE-2026-6658)
vulnerability in nbconvert (UBUNTU-CVE-2026-6658). Risk of unauthorized operations or information disclosure. Exploitable via ``data_mermaid``.
SUSE-SU-2026:22445-1 Vulnerability in python-tornado6 (SUSE-SU-2026:22445-1)
vulnerability in python-tornado6 (SUSE-SU-2026:22445-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.4-slfo.1.1_5.1` or later.
CVE-2026-11702 Vulnerability in CVE-2026-11702 (CVE-2026-11702)
vulnerability in CVE-2026-11702 (CVE-2026-11702). Confidential information can be exposed externally.
CVE-2026-1869 Vulnerability in wordpress (CVE-2026-1869)
vulnerability in wordpress (CVE-2026-1869). Risk of unauthorized operations or information disclosure.
CVE-2026-11625 Vulnerability in CVE-2026-11625 (CVE-2026-11625)
vulnerability in CVE-2026-11625 (CVE-2026-11625). Confidential information can be exposed externally.
CVE-2026-57880 Vulnerability in dos (CVE-2026-57880)
vulnerability in dos (CVE-2026-57880). Successful exploitation can lead to full system takeover.
CVE-2026-57881 Vulnerability in dos (CVE-2026-57881)
vulnerability in dos (CVE-2026-57881). Successful exploitation can lead to full system takeover.
CVE-2026-57877 Vulnerability in dos (CVE-2026-57877)
vulnerability in dos (CVE-2026-57877). Risk of unauthorized operations or information disclosure.
CVE-2026-57878 Vulnerability in dos (CVE-2026-57878)
vulnerability in dos (CVE-2026-57878). Successful exploitation can lead to full system takeover.
CVE-2026-57879 Vulnerability in dos (CVE-2026-57879)
vulnerability in dos (CVE-2026-57879). Successful exploitation can lead to full system takeover.
CVE-2026-2053 SSRF (Server-Side Request Forgery) in wso2 (CVE-2026-2053)
SSRF in wso2 (CVE-2026-2053). Risk of unauthorized operations or information disclosure.
CVE-2026-57876 Out-of-Bounds Write in dos (CVE-2026-57876)
out-of-bounds write in dos (CVE-2026-57876). Risk of unauthorized operations or information disclosure.
CVE-2026-57875 Vulnerability in dos (CVE-2026-57875)
vulnerability in dos (CVE-2026-57875). Risk of unauthorized operations or information disclosure.
CVE-2026-57874 Vulnerability in dos (CVE-2026-57874)
vulnerability in dos (CVE-2026-57874). Risk of unauthorized operations or information disclosure.
CVE-2026-10835 Vulnerability in wordpress (CVE-2026-10835)
vulnerability in wordpress (CVE-2026-10835). Confidential information can be exposed externally.
CVE-2026-57872 Path Traversal in path-traversal (CVE-2026-57872)
path traversal in path-traversal (CVE-2026-57872). Confidential information can be exposed externally.
CVE-2026-8380 Vulnerability in wordpress (CVE-2026-8380)
vulnerability in wordpress (CVE-2026-8380). Data can be tampered with by attackers.
CVE-2026-49486 Vulnerability in apache-airflow-providers-ftp (CVE-2026-49486)
vulnerability in apache-airflow-providers-ftp (CVE-2026-49486). Confidential information can be exposed externally. Exploitable via ``ftplib.FTP_TLS``. Mitigation: upgrade to `3.15.1` or later.
CVE-2026-57873 Vulnerability in dos (CVE-2026-57873)
vulnerability in dos (CVE-2026-57873). Risk of unauthorized operations or information disclosure.
CVE-2026-10823 Vulnerability in wordpress (CVE-2026-10823)
vulnerability in wordpress (CVE-2026-10823). Confidential information can be exposed externally.
CVE-2025-10268 Vulnerability in wordpress (CVE-2025-10268)
vulnerability in wordpress (CVE-2025-10268). Risk of unauthorized operations or information disclosure.
openSUSE-SU-2026:21072-1 Vulnerability in trivy (openSUSE-SU-2026:21072-1)
vulnerability in trivy (openSUSE-SU-2026:21072-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.71.2-160000.1.1` or later.
SUSE-SU-2026:22430-1 Vulnerability in python-tornado6 (SUSE-SU-2026:22430-1)
vulnerability in python-tornado6 (SUSE-SU-2026:22430-1). Risk of unauthorized operations or information disclosure. Exploitable via `Authorization header`. Mitigation: upgrade to `6.4-6.1` or later.
SUSE-SU-2026:22429-1 Vulnerability in sg3_utils (SUSE-SU-2026:22429-1)
vulnerability in sg3_utils (SUSE-SU-2026:22429-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.48~20221101+2.5a7572d6-1.1` or later.
UBUNTU-CVE-2026-11625 Vulnerability in libbytes-random-secure-perl (UBUNTU-CVE-2026-11625)
vulnerability in libbytes-random-secure-perl (UBUNTU-CVE-2026-11625). Confidential information can be exposed externally.
openSUSE-SU-2026:21071-1 Vulnerability in ImageMagick (openSUSE-SU-2026:21071-1)
vulnerability in ImageMagick (openSUSE-SU-2026:21071-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.1.2.0-160000.10.1` or later.
openSUSE-SU-2026:21070-1 Vulnerability in tar (openSUSE-SU-2026:21070-1)
vulnerability in tar (openSUSE-SU-2026:21070-1). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.35-160000.4.1` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →