NetBSD 9.4

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-11683 CVE-2026-4177 Upstream summary: pkgsrc audit-packages flagged p5-YAML-Syck<1.36 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-11683 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-3466 CVE-2023-27371 CVE-2025-59777 CVE-2025-62689 Upstream summary: pkgsrc audit-packages flagged libmicrohttpd<0.9.32 for vulnerability class 'multiple-vulnerabilities'. Reference: http://secunia.com/advisories/55903/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2013-4288 CVE-2021-4034 CVE-2021-3560 CVE-2018-19788 CVE-2019-6133 CVE-2025-7519 CVE-2018-1116 CVE-2021-4115 Upstream summary: pkgsrc audit-packages flagged polkit<0.112 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4288 Table of contents Symptom & Impact Environment & Reproduction […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-9136 Upstream summary: pkgsrc audit-packages flagged retroarch<1.21.0 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-9136 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-11424 CVE-2022-29217 CVE-2026-32597 Upstream summary: pkgsrc audit-packages flagged py{27,33,34,35}-JWT<1.5.1 for vulnerability class 'weak-encryption'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-11424 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-0350 CVE-2017-1000472 CVE-2025-6375 CVE-2025-45766 Upstream summary: pkgsrc audit-packages flagged poco<1.4.6p4 for vulnerability class 'man-in-the-middle-attack'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0350 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2023-53154 CVE-2025-57052 CVE-2023-26819 CVE-2023-50471 CVE-2023-50472 CVE-2024-31755 Upstream summary: pkgsrc audit-packages flagged cJSON<1.7.18 for vulnerability class 'heap-buffer-overflow'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-53154 Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2021-3185 CVE-2023-44446 CVE-2023-40474 CVE-2023-40475 CVE-2023-40476 CVE-2023-44429 CVE-2026-2923 CVE-2026-3081  +3 more Upstream summary: pkgsrc audit-packages flagged gst-plugins1-bad<1.16.3 for vulnerability class 'arbitrary-code-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-3185 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2026-23949 Upstream summary: pkgsrc audit-packages flagged py{27,310,311,312,313,314}-jaraco.context<6.1.0 for vulnerability class 'directory-traversal'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23949 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-12105 CVE-2026-4271 CVE-2017-2885 CVE-2018-12910 CVE-2019-17266 CVE-2025-32906 CVE-2025-8197 CVE-2025-11021  +12 more Upstream summary: pkgsrc audit-packages flagged libsoup-[0-9]* for vulnerability class 'use-after-free'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-12105 Table of contents Symptom & Impact Environment […]