@stackflag.bsky.socialCVE-2026-43501 - linux
The Ubuntu kernel packages (linux-hwe, linux-hwe-edge, linux-kvm, linux-oracle, and linux-fips) contain a security flaw that could allow an attacker to take over the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-31637 - linux
The Linux kernel's RXRPC component could process encrypted tickets even when decryption fails, allowing attackers to feed crafted data into the system. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-93318 - buildkit
If a malicious container image tricks BuildKit into trusting incorrect layer identifiers, the next build that uses that image can load the attacker’s code…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-66070 - rabbitmq-server
If the RabbitMQ management interface is set to allow all origins, it mistakenly returns the requesting website’s address and says credentials are…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-8924 - curl
The curl command-line tool on Debian 13 and related packages can be fooled into running harmful code if it processes a specially crafted web address. This puts any system…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-56711 - vlc media player
Versions 3.0.0 through 3.0.23 of VLC can miscalculate the space needed for certain image files, allowing a specially made PNG to cause the program to write data…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-39830 - golang-go.crypto
A security issue affects the Go SSH client. A malicious SSH peer could send unexpected data, causing the client to freeze and leading to resource leaks. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-39832 - golang-go.crypto
The Go SSH agent key forwarding feature had a security issue that could allow a key to be used on a remote host without restrictions. This has been fixed to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-39831 - golang-go.crypto
The golang.org/x/crypto/ssh library allows FIDO/U2F security keys to be used without the user's physical presence, which bypasses the security key's intended…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-39833 - golang-go.crypto
The golang.org/x/crypto/ssh/agent library in Go did not enforce a security setting for signing keys. This meant that keys could be used to sign without requiring…
Too many irrelevant or confusing CVEs? Use stackflag.com