🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-28370 Upstream summary: In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11149 Upstream summary: This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5087055 • MSRC update-guide entry Related CVEs: CVE-2026-32177 CVE-2026-35433 Affected components: Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft summary: Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8042-1 Related CVEs: CVE-2026-24675 CVE-2026-24682 CVE-2026-24679 CVE-2026-24681 CVE-2026-24683 CVE-2026-24684 CVE-2026-24680 CVE-2026-24491 +12 more Upstream summary: It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-15095 CVE-2017-7525 CVE-2019-10172 Upstream summary: A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code […]
🟢 Low ⏱ 5–15 min Last verified: 6 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7962-1 Related CVEs: CVE-2025-66570 Upstream summary: It was discovered that cpp-httplib did not correctly handle HTTP headers. A remote attacker could possibly use this issue to bypass authorization and impersonate […]
🟠 High ⏱ 15–60 min Last verified: 6 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2025-10026 Related CVEs: CVE-2024-12718 CVE-2025-4330 CVE-2025-4138 CVE-2025-4517 CVE-2025-4435 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read • Source: Microsoft KB5073722 • MSRC update-guide entry Related CVEs: CVE-2026-20822 CVE-2026-21265 CVE-2026-0386 CVE-2026-20804 CVE-2026-20805 CVE-2026-20809 CVE-2026-20812 CVE-2026-20814 +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Use after […]
🟡 Medium ⏱ 10–30 min Last verified: 6 April 2026 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2026-4463 Related CVEs: CVE-2025-15366 CVE-2025-15367 CVE-2026-0865 CVE-2026-1299 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 7 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:13895 Related CVEs: CVE-2026-35535 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative […]
