🟢 Low ⏱ 5–15 min Last verified: 5 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-40918 Upstream summary: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD5 hash of the PID, the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.9.6-r0 📖 ~4 min read • Source: Alpine secdb entry — libssh 0.9.6-r0 Related CVEs: CVE-2021-3634 CVE-2020-16135 CVE-2020-1730 CVE-2019-14889 CVE-2018-10933 CVE-2026-0964 CVE-2026-0965 CVE-2026-0966 +12 more Upstream summary: Alpine community repository for vedge ships libssh 0.9.6-r0 which […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8266-1 Related CVEs: CVE-2024-27388 CVE-2024-46816 CVE-2024-49938 CVE-2024-50008 CVE-2024-50142 CVE-2026-23209 CVE-2026-23268 CVE-2026-23269 +12 more Upstream summary: Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7944-1 Related CVEs: CVE-2025-68615 CVE-2022-44792 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 +5 more Upstream summary: Bahae Bahrini discovered that Net-SNMP could be made to write out of bounds. If a […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7974-1 Related CVEs: CVE-2026-0992 CVE-2026-0990 CVE-2025-8732 CVE-2026-0989 CVE-2025-7425 CVE-2025-9714 CVE-2025-6021 CVE-2025-49794 +12 more Upstream summary: It was discovered that libxml2 incorrectly handled maliciously crafted SGML catalog files. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:5513 Related CVEs: CVE-2025-14905 Upstream summary: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read • Source: Microsoft KB5087541 • MSRC update-guide entry Related CVEs: CVE-2026-35421 CVE-2026-41089 CVE-2026-41096 CVE-2026-32161 CVE-2026-40403 CVE-2026-21530 CVE-2026-33834 CVE-2026-33839 +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2026 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2014:0319-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-0092 CVE-2015-0294 CVE-2016-8610 CVE-2025-9820 CVE-2025-32990 CVE-2024-12243 CVE-2021-4209 CVE-2017-7869 +12 more Upstream summary: lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle […]
🟠 High ⏱ 15–60 min Last verified: 5 March 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8032-1 Related CVEs: CVE-2025-69228 CVE-2025-69225 CVE-2025-69226 CVE-2025-69229 CVE-2025-69223 CVE-2025-69224 CVE-2025-69227 CVE-2023-49081 +8 more Upstream summary: Charles Chan discovered that AIOHTTP incorrectly handled the decompression of compressed requests. A remote attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 5 March 2026 Affected versions: Oracle Linux 9 📖 ~4 min read • Source: ELSA advisory ELSA-2026-0445 Related CVEs: CVE-2025-39806 CVE-2025-39840 CVE-2025-39883 CVE-2025-40240 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
