🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: Oracle Linux 10 📖 ~4 min read • Source: ELSA advisory ELSA-2025-8608 Related CVEs: CVE-2025-4919 CVE-2025-4918 CVE-2025-5266 CVE-2025-5267 CVE-2025-5263 CVE-2025-5264 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: CentOS Stream 9 📖 ~4 min read • Source: AlmaLinux/RHEL advisory ALSA-2026:14200 Related CVEs: CVE-2026-32280 CVE-2026-32282 CVE-2026-32283 CVE-2026-25679 CVE-2025-61726 CVE-2025-61729 CVE-2025-68121 CVE-2025-26625 +12 more Upstream summary: Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory RHSA-2026:0697 (see also SUSE bugzilla) Related CVEs: CVE-2025-68973 CVE-2010-2547 CVE-2013-4402 CVE-2018-12020 CVE-2022-34903 CVE-2014-4617 CVE-2015-1606 CVE-2015-1607 +3 more Upstream summary: In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5087471 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41089 CVE-2026-32161 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-34329 CVE-2026-34330 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Heap-based buffer […]
🟠 High ⏱ 15–60 min Last verified: 20 January 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2021-23336 CVE-2021-28861 CVE-2021-29921 +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]
🟠 High ⏱ 5–30 min Last verified: 19 January 2026 Affected versions: RHEL 10 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kf5-kauth — Insecure handling of arguments in helpers Related CVEs: CVE-2017-8422 CVE-2019-7443 Upstream summary: Albert Astals Cid reports: KAuth allows to pass parameters with arbitrary types to helpers running as […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 10.0 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-5123 CVE-2019-20916 CVE-2021-3572 CVE-2023-5752 CVE-2026-1703 Upstream summary: pkgsrc audit-packages flagged py{25,26,27,31,32}-pip<1.3 for vulnerability class 'insecure-temp-files'. Reference: http://secunia.com/advisories/52674/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 15–45 min Last verified: 19 January 2026 Affected versions: IBM AIX 7.3 Affected: 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2025-36096, IBM Support Bulletin CVE: CVE-2025-36096 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an […]
🟢 Low ⏱ 5–15 min Last verified: 19 January 2026 Affected versions: FreeBSD 15 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mcollective — cert valication issue Related CVEs: CVE-2014-3251 Upstream summary: Melissa Stone reports: The MCollective aes_security public key plugin does not correctly validate certs against the CA. By exploiting this […]
