🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Rocky Linux 8 📖 ~4 min read • Source: Rocky Linux RXSA RLSA-2026:1412 Related CVEs: CVE-2025-1220 CVE-2025-14177 CVE-2025-14178 CVE-2025-14180 CVE-2025-1735 CVE-2025-6491 CVE-2024-11233 CVE-2024-11234 +12 more Upstream summary: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-2582 Upstream summary: The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read • Source: Microsoft KB5078775 • MSRC update-guide entry Related CVEs: CVE-2026-23668 CVE-2026-23669 CVE-2026-23672 CVE-2026-23673 CVE-2026-24285 CVE-2026-24289 CVE-2026-24291 CVE-2026-24294 +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Concurrent execution using shared resource […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24986 Upstream summary: KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session. Thus, someone watching it be created […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0256 CVE-2009-3736 Upstream summary: GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp. Table […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19061 Related CVEs: CVE-2026-4437 CVE-2026-4438 CVE-2025-15281 CVE-2026-0861 CVE-2026-0915 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
🟡 Medium ⏱ 10–30 min Last verified: 25 February 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-8159 CVE-2026-8161 CVE-2026-8162 Upstream summary: [email protected] and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser. A crafted multipart […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Red Hat Enterprise Linux 10 📖 ~4 min read • Source: Red Hat advisory RHSA RHSA-2026:19024 Related CVEs: CVE-2026-2920 CVE-2026-2921 CVE-2026-2922 CVE-2026-2923 CVE-2026-3082 CVE-2026-3083 CVE-2026-3085 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟠 High ⏱ 15–60 min Last verified: 25 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8175-1 Related CVEs: CVE-2026-5107 CVE-2025-61103 CVE-2025-61099 CVE-2025-61106 CVE-2025-61100 CVE-2025-61104 CVE-2025-61102 CVE-2025-61101 +8 more Upstream summary: It was discovered that FRR did not correctly handle certain network requests. A remote attacker […]
🟢 Low ⏱ 5–15 min Last verified: 25 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7670-1 Related CVEs: CVE-2025-47268 CVE-2025-48964 Upstream summary: It was discovered that the iputils ping utility incorrectly handled certain ICMP Echo Reply packets. A remote attacker could possibly use this issue […]
