🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8229-1 Related CVEs: CVE-2026-5958 Upstream summary: Michał Majchrowicz and Marcin Wyczechowski discovered that sed incorrectly handled symbolic links when performing in-place edits. A local attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-8177 CVE-2015-3451 Upstream summary: XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7599-1 Related CVEs: CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 CVE-2020-26137 CVE-2018-20060 +2 more Upstream summary: Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled while using […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1201-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-28686 CVE-2026-28690 CVE-2026-31853 CVE-2026-28691 CVE-2026-30883 CVE-2026-28493 CVE-2026-28494 CVE-2026-28687 +12 more Upstream summary: ImageMagick is free and open-source software used for editing and manipulating digital […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: SLES 16 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1440-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1135 Upstream summary: Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:4672 Related CVEs: CVE-2025-61726 CVE-2025-61728 CVE-2025-68121 CVE-2024-24785 CVE-2025-61729 CVE-2025-65637 CVE-2025-47913 CVE-2025-52881 +5 more Upstream summary: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. […]
🟡 Medium ⏱ 10–30 min Last verified: 24 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-5587 Related CVEs: CVE-2026-23893 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5060526 • MSRC update-guide entry Related CVEs: CVE-2025-49735 CVE-2025-33071 CVE-2025-33070 CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32715 CVE-2025-32716 +12 more Affected components: Windows Server 2016 (Server Core installation) Windows Server 2016 Microsoft summary: Use after […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:4110 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2025-8714 CVE-2025-8715 CVE-2025-1094 CVE-2024-10976 +12 more Upstream summary: PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * postgresql: PostgreSQL missing validation […]
