https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 25 Aug 2026 15:38:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write https://vulnerability.circl.lu/vuln/cve-2026-79655 Tue, 25 Aug 2026 13:49:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-79652 Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired https://vulnerability.circl.lu/vuln/cve-2026-79652 Tue, 25 Aug 2026 11:07:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass https://vulnerability.circl.lu/vuln/cve-2026-16231 Tue, 25 Aug 2026 10:00:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos https://vulnerability.circl.lu/vuln/cve-2026-78701 Tue, 25 Aug 2026 07:33:02 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78322 File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers https://vulnerability.circl.lu/vuln/cve-2026-78322 Tue, 25 Aug 2026 07:21:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash Cri-o: cri-o: unvalidated image env var causes daemon crash https://vulnerability.circl.lu/vuln/cve-2026-17113 Mon, 24 Aug 2026 21:22:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader https://vulnerability.circl.lu/vuln/cve-2026-78475 Mon, 24 Aug 2026 17:20:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit https://vulnerability.circl.lu/vuln/cve-2026-78465 Mon, 24 Aug 2026 16:28:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615) https://vulnerability.circl.lu/vuln/cve-2026-19685 Mon, 24 Aug 2026 16:12:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-71366 Awx: notification backends allow ssrf and credential leakage Awx: notification backends allow ssrf and credential leakage https://vulnerability.circl.lu/vuln/cve-2026-71366 Mon, 24 Aug 2026 15:42:44 +0000