Vulnerabilities

TI-2026-15935 CVE-2026-19617 · GHSA-2f2v-c79p-8x4x

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

LOW 24

A flaw was found in libdm.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00158 Published 2026-08-14 Partial fix · 2.03.43-1.hum1 CWE-770

TI-2026-15900 CVE-2026-19548 · GHSA-j77f-3ffj-4jg4

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

LOW 24

Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00167 Published 2026-08-12 Partial fix · 2.46.1-1.4.hum1 CWE-416

TI-2026-49901 CVE-2026-71227 · GHSA-c5mv-c5vm-62w5

Infinite loop in Stephan Muelle libkcapi

LOW 23

A flaw was found in libkcapi.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00197 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +5 CWE-835

TI-2026-49900 CVE-2026-71226 · GHSA-rg4h-x337-qh8m

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

LOW 31

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00147 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +7 CWE-416

TI-2026-49899 CVE-2026-71225 · GHSA-qv62-qmw8-96h9

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

LOW 29

A flaw was found in libkcapi.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00345 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +5 CWE-330

TI-2026-42667 CVE-2026-59851 · GHSA-x5cr-v39m-53gw

Libssh: libssh: authentication bypass via missing gssapi principal check

MEDIUM 41

A flaw was found in libssh.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00489 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-863

TI-2026-42666 CVE-2026-59850 · GHSA-cr6p-6527-344m

Libssh: libssh: use-after-free via data callbacks on closed channels

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-416

TI-2026-42665 CVE-2026-59849 · GHSA-jp6g-7mqj-wj53

Libssh: libssh: denial of service via automatic certificate authentication loop

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00438 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-835

TI-2026-42664 CVE-2026-59848 · GHSA-4h4r-q9xg-gfmm

Libssh: libssh: denial of service via sftp responses with unknown request ids

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00341 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-770

TI-2026-42663 CVE-2026-59847 · GHSA-mq2j-7vq4-77m8

Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

LOW 39

A flaw was found in libssh.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00332 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-253

TI-2026-42662 CVE-2026-59846 · GHSA-fvwj-j79q-57v7

Libssh: libssh: information disclosure via proxycommand %r username expansion

LOW 17

A flaw was found in libssh.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.0012 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-78

TI-2026-42660 CVE-2026-59844 · GHSA-qp28-hpg5-j7xc

Libssh: libssh: denial of service via oversized sftp read length

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-789

TI-2026-42661 CVE-2026-59845 · GHSA-97fp-2vw9-q5jg

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00104 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-390

TI-2026-42659 CVE-2026-59843 · GHSA-4846-7xwg-pw5m

Libssh: libssh: denial of service via zero advertised channel packet size

LOW 30

A flaw was found in libssh.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00567 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.9.6-17.el8_10 +2 CWE-835

TI-2026-42658 CVE-2026-59842 · GHSA-x94w-cg8g-g593

Libssh: libssh: information disclosure via short gssapi curve25519 public key

LOW 25

A flaw was found in libssh.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00493 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.1-4.hum1 CWE-125

TI-2026-12931 CVE-2026-15370 · GHSA-6j7f-8jjp-mm8c

Libssh: libssh: stack buffer overflow in sftp server longname construction

LOW 33

A flaw was found in libssh.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00168 Published 2026-07-21 Fixed in 0.12.0-3.el10_2, 0.12.2-1.hum1 CWE-121

TI-2026-11598 CVE-2026-13757 · GHSA-p2wm-69qx-x25w

P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing

LOW 27

A flaw was found in p11-kit.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2026-06-29 Partial fix · 0.26.4-1.el10_2, 0.26.4-1.el9_8 +32 CWE-674

TI-2026-11517 CVE-2026-13595 · GHSA-qpmf-9p9c-455w

Util-linux: util-linux: heap use-after-free in libblkid nested partition probing

LOW 29

A flaw was found in the libblkid library of util-linux.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00144 Published 2026-06-29 Partial fix · 2.40.2-18.el10_2.20, 1793825318 +1 CWE-416

TI-2026-40179 CVE-2026-55654 · GHSA-5mx2-7g4j-9m39

Out-of-bounds read in Red Hat Enterprise Linux 10

LOW 19

A flaw was found in OpenSSH.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00652 Published 2026-06-23 Partial fix · 9.9p1-25.el10_2, 9.9p1-9.el9_8 +5 CWE-125

TI-2026-40178 CVE-2026-55653 · GHSA-28f3-55mq-pp68

Double free in Red Hat Enterprise Linux 10

LOW 29

A flaw was found in OpenSSH.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0053 Published 2026-06-23 Partial fix · 9.9p1-25.el10_2, 9.9p1-7.el10_0.5 +46 CWE-415

TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

MEDIUM 51

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.06537 Published 2026-06-17 Fixed in 1.31.2, 1.30.3 +2 CWE-122

TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

LOW 35

A flaw was found in libsolv.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2026-05-26 Fixed in 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +60 CWE-787

TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4

NGINX ngx_http_rewrite_module vulnerability

MEDIUM 55

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10856 Published 2026-05-22 Partial fix · 37.0.1.1, R36 P5 +3 CWE-122

TI-2026-08044 CVE-2026-9149 · GHSA-9q56-xf64-q987

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

MEDIUM 62

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00312 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +1 CWE-122

TI-2026-08045 CVE-2026-9150 · GHSA-p4w9-3pj8-mhq7

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

LOW 29

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00409 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +2 CWE-121

Vulnerabilities

Filters