https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Wed, 19 Aug 2026 13:30:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76235 Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html https://vulnerability.circl.lu/vuln/cve-2026-76235 Wed, 19 Aug 2026 12:44:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76166 Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram https://vulnerability.circl.lu/vuln/cve-2026-76166 Wed, 19 Aug 2026 10:01:28 +0000 https://vulnerability.circl.lu/vuln/cve-2026-75900 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch https://vulnerability.circl.lu/vuln/cve-2026-75900 Wed, 19 Aug 2026 07:44:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-75589 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify https://vulnerability.circl.lu/vuln/cve-2026-75589 Wed, 19 Aug 2026 07:20:44 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72889 Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify https://vulnerability.circl.lu/vuln/cve-2026-72889 Wed, 19 Aug 2026 07:20:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-15571 Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client https://vulnerability.circl.lu/vuln/cve-2026-15571 Tue, 18 Aug 2026 20:40:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-16732 fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count https://vulnerability.circl.lu/vuln/cve-2026-16732 Tue, 18 Aug 2026 20:30:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-18504 fastify vulnerable to schema validation bypass via root primitive coercion mismatch fastify vulnerable to schema validation bypass via root primitive coercion mismatch https://vulnerability.circl.lu/vuln/cve-2026-18504 Tue, 18 Aug 2026 20:19:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66780 Submariner-operator: submariner-operator: flat broker trust model grants every spoke full crud on all endpoints, secrets, and endpointslices in broker namespace Submariner-operator: submariner-operator: flat broker trust model grants every spoke full crud on all endpoints, secrets, and endpointslices in broker namespace https://vulnerability.circl.lu/vuln/cve-2026-66780 Tue, 18 Aug 2026 17:32:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-66783 Submariner-operator: submariner-operator: arbitrary image override enables privileged code execution on every node Submariner-operator: submariner-operator: arbitrary image override enables privileged code execution on every node https://vulnerability.circl.lu/vuln/cve-2026-66783 Tue, 18 Aug 2026 17:06:02 +0000