OPENSUSE-SU-2026:12070-1
Vulnerability from csaf_opensuse - Published: 2026-10-06 00:00 - Updated: 2026-10-07 08:42Summary
velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media
Description of the patch: These are all security issues fixed in the velociraptor-0.76.7.0.git145.b60ef1146-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-12070
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
8.7 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
low
8.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
low
6.5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
8.2 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
5.6 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.8 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
4.9 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
4 products, the same list as for
CVE-2025-0914
Threats
Impact
moderate
References
124 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the velociraptor-0.76.7.0.git145.b60ef1146-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-12070",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12070-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-0914 page",
"url": "https://www.suse.com/security/cve/CVE-2025-0914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12143 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14257 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14257/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-17535 page",
"url": "https://www.suse.com/security/cve/CVE-2026-17535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18348 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18348/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18636 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18638 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18638/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18639 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-18860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-18860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27601 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-29074 page",
"url": "https://www.suse.com/security/cve/CVE-2026-29074/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41650 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45623 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-49356 page",
"url": "https://www.suse.com/security/cve/CVE-2026-49356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-5329 page",
"url": "https://www.suse.com/security/cve/CVE-2026-5329/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53550 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55602 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56852 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56852/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59869 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6290 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6290/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64951 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64952 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-64954 page",
"url": "https://www.suse.com/security/cve/CVE-2026-64954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65903 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65912 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65913 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-65914 page",
"url": "https://www.suse.com/security/cve/CVE-2026-65914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-67314 page",
"url": "https://www.suse.com/security/cve/CVE-2026-67314/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-67320 page",
"url": "https://www.suse.com/security/cve/CVE-2026-67320/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6863 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-69152 page",
"url": "https://www.suse.com/security/cve/CVE-2026-69152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-69153 page",
"url": "https://www.suse.com/security/cve/CVE-2026-69153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6948 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73086 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73086/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73646 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-73650 page",
"url": "https://www.suse.com/security/cve/CVE-2026-73650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7572 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7573 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84369 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-84370 page",
"url": "https://www.suse.com/security/cve/CVE-2026-84370/"
}
],
"title": "velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media",
"tracking": {
"current_release_date": "2026-10-07T08:42:32Z",
"generator": {
"date": "2026-10-06T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:12070-1",
"initial_release_date": "2026-10-06T00:00:00Z",
"revision_history": [
{
"date": "2026-10-06T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-07T08:42:32Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"product": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"product_id": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:rapid7:velociraptor:0.76.7.0.git145.b60ef1146:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/velociraptor@0.76.7.0.git145.b60ef1146-1.1?arch=aarch64\u0026upstream=velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"product": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"product_id": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:rapid7:velociraptor:0.76.7.0.git145.b60ef1146:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/velociraptor@0.76.7.0.git145.b60ef1146-1.1?arch=ppc64le\u0026upstream=velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"product": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"product_id": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:rapid7:velociraptor:0.76.7.0.git145.b60ef1146:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/velociraptor@0.76.7.0.git145.b60ef1146-1.1?arch=s390x\u0026upstream=velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64",
"product": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64",
"product_id": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:rapid7:velociraptor:0.76.7.0.git145.b60ef1146:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/velociraptor@0.76.7.0.git145.b60ef1146-1.1?arch=x86_64\u0026upstream=velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64"
},
"product_reference": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le"
},
"product_reference": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x"
},
"product_reference": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
},
"product_reference": "velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-0914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-0914"
}
],
"notes": [
{
"category": "general",
"text": "An improper access control issue in the VQL shell feature in Velociraptor Versions \u003c 0.73.4 allowed authenticated users to execute the execve() plugin in deployments where this was explicitly forbidden by configuring the prevent_execve flag in the configuration file. This setting is not usually recommended and is uncommonly used, so this issue will only affect users who do set it. This issue is fixed in release 0.73.4.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-0914",
"url": "https://www.suse.com/security/cve/CVE-2025-0914"
},
{
"category": "external",
"summary": "SUSE Bug 1238058 for CVE-2025-0914",
"url": "https://bugzilla.suse.com/1238058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2025-0914"
},
{
"cve": "CVE-2026-12143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12143"
}
],
"notes": [
{
"category": "general",
"text": "form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (\") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `\"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12143",
"url": "https://www.suse.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "SUSE Bug 1269794 for CVE-2026-12143",
"url": "https://bugzilla.suse.com/1269794"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-12143"
},
{
"cve": "CVE-2026-14257",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14257"
}
],
"notes": [
{
"category": "general",
"text": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input (\u0027{a,b}\u0027.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14257",
"url": "https://www.suse.com/security/cve/CVE-2026-14257"
},
{
"category": "external",
"summary": "SUSE Bug 1272738 for CVE-2026-14257",
"url": "https://bugzilla.suse.com/1272738"
},
{
"category": "external",
"summary": "SUSE Bug 1276011 for CVE-2026-14257",
"url": "https://bugzilla.suse.com/1276011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-14257"
},
{
"cve": "CVE-2026-17535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-17535"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor\u0027s NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images.\n\nTypically Velociraptor\u0027s NTFS parser is used on live NTFS filesystems, limiting the opportunity of attackers corrupting the filesystem. However, in some applications (e.g. dead disk forensics https://docs.velociraptor.app/docs/forensic/deaddisk/ ) Velociraptor may be used on untrusted NTFS image files. \n\nIf an attacker is able to inject maliciously corrupted NTFS Volumes they can cause a crash and a Denial of Service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-17535",
"url": "https://www.suse.com/security/cve/CVE-2026-17535"
},
{
"category": "external",
"summary": "SUSE Bug 1275251 for CVE-2026-17535",
"url": "https://bugzilla.suse.com/1275251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-17535"
},
{
"cve": "CVE-2026-18348",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18348"
}
],
"notes": [
{
"category": "general",
"text": "Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18348",
"url": "https://www.suse.com/security/cve/CVE-2026-18348"
},
{
"category": "external",
"summary": "SUSE Bug 1274823 for CVE-2026-18348",
"url": "https://bugzilla.suse.com/1274823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-18348"
},
{
"cve": "CVE-2026-18636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18636"
}
],
"notes": [
{
"category": "general",
"text": "The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore. To prevent users from reading sensitive files or accessing other orgs, the requested path is prefix checked against a list of denied prefixes. This prefix check can be bypassed allowing a user to access usually denied files. If the user has read permission in the ROOT org, this allows access to other orgs, in which the user may not have permission.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18636",
"url": "https://www.suse.com/security/cve/CVE-2026-18636"
},
{
"category": "external",
"summary": "SUSE Bug 1275254 for CVE-2026-18636",
"url": "https://bugzilla.suse.com/1275254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-18636"
},
{
"cve": "CVE-2026-18638",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18638"
}
],
"notes": [
{
"category": "general",
"text": "Any authenticated Velociraptor user - including one holding only the readerrole - can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18638",
"url": "https://www.suse.com/security/cve/CVE-2026-18638"
},
{
"category": "external",
"summary": "SUSE Bug 1275274 for CVE-2026-18638",
"url": "https://bugzilla.suse.com/1275274"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-18638"
},
{
"cve": "CVE-2026-18639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18639"
}
],
"notes": [
{
"category": "general",
"text": "When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the \"email_verified\" claim and do not actually verify the email.\n\nThis allows a user to impersonate another user by setting their email address within the IdP, allowing account takeover.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18639",
"url": "https://www.suse.com/security/cve/CVE-2026-18639"
},
{
"category": "external",
"summary": "SUSE Bug 1275078 for CVE-2026-18639",
"url": "https://bugzilla.suse.com/1275078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-18639"
},
{
"cve": "CVE-2026-18860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-18860"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor allows multi-tenant deployments named \"Orgs\".\n\nBy default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment.\n\nUsers can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORG_ADMIN permission on the ROOT org.\n\nThis issue results from the Velociraptor server allowing for the deletion of Orgs by incorrectly checking the ORG_ADMIN permission of callers within the calling ORG instead of the ROOT org. However, Org admins of child orgs were able to add this permission to their ACL token within their own org. This allows an administrator in a child org, which is not also an administrator in the ROOT org, to delete other orgs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-18860",
"url": "https://www.suse.com/security/cve/CVE-2026-18860"
},
{
"category": "external",
"summary": "SUSE Bug 1275255 for CVE-2026-18860",
"url": "https://bugzilla.suse.com/1275255"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-18860"
},
{
"cve": "CVE-2026-27601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27601"
}
],
"notes": [
{
"category": "general",
"text": "Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the _.flatten and _.isEqual functions use recursion without a depth limit. Under very specific conditions, detailed below, an attacker could exploit this in a Denial of Service (DoS) attack by triggering a stack overflow. Untrusted input must be used to create a recursive datastructure, for example using JSON.parse, with no enforced depth limit. The datastructure thus created must be passed to _.flatten or _.isEqual. In the case of _.flatten, the vulnerability can only be exploited if it is possible for a remote client to prepare a datastructure that consists of arrays at all levels AND if no finite depth limit is passed as the second argument to _.flatten. In the case of _.isEqual, the vulnerability can only be exploited if there exists a code path in which two distinct datastructures that were submitted by the same remote client are compared using _.isEqual. For example, if a client submits data that are stored in a database, and the same client can later submit another datastructure that is then compared to the data that were saved in the database previously, OR if a client submits a single request, but its data are parsed twice, creating two non-identical but equivalent datastructures that are then compared. Exceptions originating from the call to _.flatten or _.isEqual, as a result of a stack overflow, are not being caught. This vulnerability is fixed in 1.13.8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27601",
"url": "https://www.suse.com/security/cve/CVE-2026-27601"
},
{
"category": "external",
"summary": "SUSE Bug 1259157 for CVE-2026-27601",
"url": "https://bugzilla.suse.com/1259157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-27601"
},
{
"cve": "CVE-2026-29074",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-29074"
}
],
"notes": [
{
"category": "general",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities, without guards against entity expansion or recursion. This can result in a small XML file (811 bytes) stalling the application and even crashing the Node.js process with JavaScript heap out of memory. This issue has been patched in versions 2.8.1, 3.3.3, and 4.0.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-29074",
"url": "https://www.suse.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "SUSE Bug 1259289 for CVE-2026-29074",
"url": "https://bugzilla.suse.com/1259289"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-29074"
},
{
"cve": "CVE-2026-41650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41650"
}
],
"notes": [
{
"category": "general",
"text": "fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the \"--\u003e\" sequence in comment content or the \"]]\u003e\" sequence in CDATA sections when building XML from JavaScript objects. This allows XML injection when user-controlled data flows into comments or CDATA elements, leading to XSS, SOAP injection, or data manipulation. This issue has been patched in version 5.7.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41650",
"url": "https://www.suse.com/security/cve/CVE-2026-41650"
},
{
"category": "external",
"summary": "SUSE Bug 1264489 for CVE-2026-41650",
"url": "https://bugzilla.suse.com/1264489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-41650"
},
{
"cve": "CVE-2026-45623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45623"
}
],
"notes": [
{
"category": "general",
"text": "PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the /*# sourceMappingURL=PATH */ comment from any CSS string passed to process() and dereferences PATH against the local filesystem with no scheme, allowlist, or traversal check. An attacker who controls the CSS input can cause the host process to read any file readable by Node and leak the first ~10 bytes of its content through the resulting JSON.parse SyntaxError message. The bug also yields a precise file-existence oracle and a controllable-read primitive that may be combined with large-file targets for DoS. The behaviour is triggered with PostCSS\u0027s default options - no from, no map, no plugins required - and is therefore reachable from any pipeline that runs untrusted CSS through PostCSS (CMS themes, user-uploaded styles, browser-extension/userstyle processors, build pipelines for third-party packages, blog comment renderers, etc.). This issue has been fixed in version 8.5.12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45623",
"url": "https://www.suse.com/security/cve/CVE-2026-45623"
},
{
"category": "external",
"summary": "SUSE Bug 1273225 for CVE-2026-45623",
"url": "https://bugzilla.suse.com/1273225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45623"
},
{
"cve": "CVE-2026-49356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-49356"
}
],
"notes": [
{
"category": "general",
"text": "Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc.6 and 7.29.6, @babel/core affected by an arbitrary file read via a sourceMappingURL comment. Using @babel/core to compile maliciously crafted code can allow an attacker to read any source map from the system that is running Babel, if the attacker controls the input source code, can read the output source code, and knows the path of the source map file that they want to read. This vulnerability is fixed in 8.0.0-rc.6 and 7.29.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-49356",
"url": "https://www.suse.com/security/cve/CVE-2026-49356"
},
{
"category": "external",
"summary": "SUSE Bug 1272314 for CVE-2026-49356",
"url": "https://bugzilla.suse.com/1272314"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-49356"
},
{
"cve": "CVE-2026-5329",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-5329"
}
],
"notes": [
{
"category": "general",
"text": "Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (primarily Linux) that allows an authenticated remote attacker to write to arbitrary internal server queues via a crafted monitoring message with a malicious queue name. The server handler that receives client monitoring messages does not sufficiently validate the queue name supplied by the client, allowing a rogue client to write arbitrary messages to privileged internal queues. This may lead to remote code execution on the Velociraptor server. Rapid7 Hosted Velociraptor instances are not affected by this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-5329",
"url": "https://www.suse.com/security/cve/CVE-2026-5329"
},
{
"category": "external",
"summary": "SUSE Bug 1261858 for CVE-2026-5329",
"url": "https://bugzilla.suse.com/1261858"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-5329"
},
{
"cve": "CVE-2026-53550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53550"
}
],
"notes": [
{
"category": "general",
"text": "js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (\u003c\u003c) by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size and can block a Node.js worker/event loop for seconds with a relatively small payload (tens of KB), resulting in denial of service. The issue is in merge handling inside lib/loader.js. This vulnerability is fixed in 4.2.0 and 3.15.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53550",
"url": "https://www.suse.com/security/cve/CVE-2026-53550"
},
{
"category": "external",
"summary": "SUSE Bug 1268806 for CVE-2026-53550",
"url": "https://bugzilla.suse.com/1268806"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-53550"
},
{
"cve": "CVE-2026-55602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55602"
}
],
"notes": [
{
"category": "general",
"text": "http-proxy-middleware is node.js http-proxy middleware. From 0.16.0 until 2.0.10, 3.0.6, and 4.1.0, http-proxy-middleware documents router proxy-table entries as host, path, or host+path selectors, but the host+path implementation uses unanchored substring matching on attacker-controlled request metadata. As a result, a crafted Host header that is only a superstring match for a configured host+path key can still route a request to an unintended backend. This vulnerability is fixed in 2.0.10, 3.0.6, and 4.1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55602",
"url": "https://www.suse.com/security/cve/CVE-2026-55602"
},
{
"category": "external",
"summary": "SUSE Bug 1272315 for CVE-2026-55602",
"url": "https://bugzilla.suse.com/1272315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-55602"
},
{
"cve": "CVE-2026-56852",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56852"
}
],
"notes": [
{
"category": "general",
"text": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56852",
"url": "https://www.suse.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "SUSE Bug 1271661 for CVE-2026-56852",
"url": "https://bugzilla.suse.com/1271661"
},
{
"category": "external",
"summary": "SUSE Bug 1280553 for CVE-2026-56852",
"url": "https://bugzilla.suse.com/1280553"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-56852"
},
{
"cve": "CVE-2026-59869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59869"
}
],
"notes": [
{
"category": "general",
"text": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59869",
"url": "https://www.suse.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "SUSE Bug 1271373 for CVE-2026-59869",
"url": "https://bugzilla.suse.com/1271373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-59869"
},
{
"cve": "CVE-2026-6290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6290"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user\u0027s current ACL token. This allows an authenticated GUI user with access in one org, to use the query() plugin, in a notebook cell, to run VQL queries on other orgs which they may not have access to. The user\u0027s permissions in the other org are\nthe same as the permissions they have in the org containing the notebook.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6290",
"url": "https://www.suse.com/security/cve/CVE-2026-6290"
},
{
"category": "external",
"summary": "SUSE Bug 1262261 for CVE-2026-6290",
"url": "https://bugzilla.suse.com/1262261"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-6290"
},
{
"cve": "CVE-2026-64951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64951"
}
],
"notes": [
{
"category": "general",
"text": "A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.\n\nThe problem is a Divide by Zero bug in the ShouldPadFile() function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64951",
"url": "https://www.suse.com/security/cve/CVE-2026-64951"
},
{
"category": "external",
"summary": "SUSE Bug 1275284 for CVE-2026-64951",
"url": "https://bugzilla.suse.com/1275284"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2026-64951"
},
{
"cve": "CVE-2026-64952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64952"
}
],
"notes": [
{
"category": "general",
"text": "The hunt_delete() VQL function allows deleting hunts. \n\nVelociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the \"investigator\" role) instead of the \"DELETE_RESULTS\" permission (usually only assigned to \"administrators\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64952",
"url": "https://www.suse.com/security/cve/CVE-2026-64952"
},
{
"category": "external",
"summary": "SUSE Bug 1275285 for CVE-2026-64952",
"url": "https://bugzilla.suse.com/1275285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-64952"
},
{
"cve": "CVE-2026-64954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-64954"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLLECT_CLIENT permission. However, this is not enforced when the user can run a VQL query which resets the authorization provider.\n\nThis allows a user who can run arbitrary VQL (usually with the \"analyst\" role) to launch new collections (usually requires the \"investigator\" role). This vulnerability is an escalation from an analyst to investigator role.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-64954",
"url": "https://www.suse.com/security/cve/CVE-2026-64954"
},
{
"category": "external",
"summary": "SUSE Bug 1275282 for CVE-2026-64954",
"url": "https://bugzilla.suse.com/1275282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-64954"
},
{
"cve": "CVE-2026-65903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65903"
}
],
"notes": [
{
"category": "general",
"text": "DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function where short-circuit evaluation allows forbidden tags to bypass FORBID_TAGS restrictions. Attackers can craft input containing tags listed in FORBID_TAGS that are also added via ADD_TAGS function, causing them to be retained in sanitized output.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65903",
"url": "https://www.suse.com/security/cve/CVE-2026-65903"
},
{
"category": "external",
"summary": "SUSE Bug 1273395 for CVE-2026-65903",
"url": "https://bugzilla.suse.com/1273395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-65903"
},
{
"cve": "CVE-2026-65912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65912"
}
],
"notes": [
{
"category": "general",
"text": "DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADD_ATTR is provided as a predicate function via EXTRA_ELEMENT_HANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe protocols like javascript: to survive sanitization and execute as DOM-based XSS when the link is activated.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65912",
"url": "https://www.suse.com/security/cve/CVE-2026-65912"
},
{
"category": "external",
"summary": "SUSE Bug 1273395 for CVE-2026-65912",
"url": "https://bugzilla.suse.com/1273395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-65912"
},
{
"cve": "CVE-2026-65913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65913"
}
],
"notes": [
{
"category": "general",
"text": "DOMPurify before 3.3.2 contains a prototype pollution vulnerability in USE_PROFILES mode that allows attackers to bypass attribute filtering by polluting Array.prototype properties. Attackers can set Array.prototype properties like onclick to true, causing DOMPurify to accept event handlers as allowlisted attributes and resulting in DOM-based XSS when sanitized markup is rendered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65913",
"url": "https://www.suse.com/security/cve/CVE-2026-65913"
},
{
"category": "external",
"summary": "SUSE Bug 1273395 for CVE-2026-65913",
"url": "https://bugzilla.suse.com/1273395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-65913"
},
{
"cve": "CVE-2026-65914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-65914"
}
],
"notes": [
{
"category": "general",
"text": "DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper context during reparsing, reactivating dangerous markup with event handlers to execute JavaScript.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-65914",
"url": "https://www.suse.com/security/cve/CVE-2026-65914"
},
{
"category": "external",
"summary": "SUSE Bug 1273395 for CVE-2026-65914",
"url": "https://bugzilla.suse.com/1273395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-65914"
},
{
"cve": "CVE-2026-67314",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-67314"
}
],
"notes": [
{
"category": "general",
"text": "axios versions \u003e=1.15.2 and \u003c1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js). When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth object that omits the username and/or password properties, axios reads the inherited Object.prototype.username and Object.prototype.password values and uses them to construct an outbound \u0027Authorization: Basic ...\u0027 header. axios itself does not pollute prototypes. The practical impact is outbound request tampering: an attacker who controls the polluted prototype values can inject attacker-chosen Basic auth credentials or replace an existing Authorization header. Credential disclosure is only possible under additional application-specific conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-67314",
"url": "https://www.suse.com/security/cve/CVE-2026-67314"
},
{
"category": "external",
"summary": "SUSE Bug 1273631 for CVE-2026-67314",
"url": "https://bugzilla.suse.com/1273631"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-67314"
},
{
"cve": "CVE-2026-67320",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-67320"
}
],
"notes": [
{
"category": "general",
"text": "axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as {...config} or Object.assign({}, config) converts the hardened config back into a regular object. axios then dispatches that object without re-hardening it, and the Node HTTP adapter reads config.proxy through the prototype chain. If an attacker can pollute Object.prototype.proxy, affected requests can be routed through an attacker-controlled proxy. For plaintext HTTP requests, the proxy can observe Authorization headers, Basic auth from config.auth, method, absolute URL, Host, and request body, and can return its own response. This does not establish browser impact or HTTPS header/body disclosure under normal TLS validation. Affected versions are \u003e=0.31.1 (fixed in 0.33.0) and \u003e=1.15.2 (fixed in 1.18.0).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-67320",
"url": "https://www.suse.com/security/cve/CVE-2026-67320"
},
{
"category": "external",
"summary": "SUSE Bug 1273720 for CVE-2026-67320",
"url": "https://bugzilla.suse.com/1273720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-67320"
},
{
"cve": "CVE-2026-6863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6863"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization (the lowest authenticated role, holding only READ_RESULTS permission ) can issue a single authenticated HTTP GET that can read any files from other orgs - even if they have no explicit permissions in the target org.\n\n\n\nHowever, the problem does not occur in reverse - a user with read access to a sub org is unable to read from other org or the root org.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6863",
"url": "https://www.suse.com/security/cve/CVE-2026-6863"
},
{
"category": "external",
"summary": "SUSE Bug 1264363 for CVE-2026-6863",
"url": "https://bugzilla.suse.com/1264363"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-6863"
},
{
"cve": "CVE-2026-69152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-69152"
}
],
"notes": [
{
"category": "general",
"text": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-69152",
"url": "https://www.suse.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "SUSE Bug 1276011 for CVE-2026-69152",
"url": "https://bugzilla.suse.com/1276011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-69152"
},
{
"cve": "CVE-2026-69153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-69153"
}
],
"notes": [
{
"category": "general",
"text": "PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attacker can cause PreviousMap.loadFile() to read an unintended source-map file by supplying an absolute or directory-traversal sourceMappingURL. The resulting map\u0027s sources and sourcesContent may then be exposed to the application. This issue is fixed in version 8.5.19.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-69153",
"url": "https://www.suse.com/security/cve/CVE-2026-69153"
},
{
"category": "external",
"summary": "SUSE Bug 1276129 for CVE-2026-69153",
"url": "https://bugzilla.suse.com/1276129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-69153"
},
{
"cve": "CVE-2026-6948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6948"
}
],
"notes": [
{
"category": "general",
"text": "Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server\u0027s agent control channel.\n\n\n\nThis allows a compromised or rogue Velociraptor client to crash the server via out-of-memory (OOM) by sending crafted messages through the normal client communication channel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6948",
"url": "https://www.suse.com/security/cve/CVE-2026-6948"
},
{
"category": "external",
"summary": "SUSE Bug 1263858 for CVE-2026-6948",
"url": "https://bugzilla.suse.com/1263858"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-6948"
},
{
"cve": "CVE-2026-73086",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73086"
}
],
"notes": [
{
"category": "general",
"text": "nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 2147483648 to become -2147483648 and corrupt the process-wide CSPRNG poolOffset in fillPool(), which causes subsequent session tokens, CSRF tokens, API keys, and unique identifiers to become the deterministic string \"uuuuuuuuuuuuuuuuuuuuu\" until the process restarts. This issue is fixed in versions 3.3.12 and 5.1.11.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73086",
"url": "https://www.suse.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "SUSE Bug 1276035 for CVE-2026-73086",
"url": "https://bugzilla.suse.com/1276035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73086"
},
{
"cve": "CVE-2026-73646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73646"
}
],
"notes": [
{
"category": "general",
"text": "PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap() passes attacker-controlled sourceMappingURL values to join(dirname(opts.from), annotation), and loadFile() permits traversed or absolute .map paths, allowing untrusted CSS processed without map: false to disclose sourcesContent from arbitrary reachable .map files through result.map. This issue is fixed in version 8.5.18.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73646",
"url": "https://www.suse.com/security/cve/CVE-2026-73646"
},
{
"category": "external",
"summary": "SUSE Bug 1275888 for CVE-2026-73646",
"url": "https://bugzilla.suse.com/1275888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-73646"
},
{
"cve": "CVE-2026-73650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-73650"
}
],
"notes": [
{
"category": "general",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.3, 3.3.4, and 4.0.2, the removeScripts plugin, named removeScriptElement in versions 1 through 3, can leave executable content in optimized SVGs because it does not remove namespaced or prefixed script elements such as \u003csvg:script\u003e and, in versions 3 and 4, matches JavaScript URIs case sensitively. Applications that process untrusted SVG input with this plugin enabled and serve the result can allow scripts to execute when another user opens the SVG, exposing local storage or cookies. This issue is fixed in versions 2.8.3, 3.3.4, and 4.0.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-73650",
"url": "https://www.suse.com/security/cve/CVE-2026-73650"
},
{
"category": "external",
"summary": "SUSE Bug 1275326 for CVE-2026-73650",
"url": "https://bugzilla.suse.com/1275326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-73650"
},
{
"cve": "CVE-2026-7572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7572"
}
],
"notes": [
{
"category": "general",
"text": "An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a local attacker to cause a Denial of Service (DoS) via a process crash by providing a specially crafted .evtx file to the parse_evtx VQL plugin.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7572",
"url": "https://www.suse.com/security/cve/CVE-2026-7572"
},
{
"category": "external",
"summary": "SUSE Bug 1264226 for CVE-2026-7572",
"url": "https://bugzilla.suse.com/1264226"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-7572"
},
{
"cve": "CVE-2026-7573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7573"
}
],
"notes": [
{
"category": "general",
"text": "An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to retrieve the complete ACL policy (roles and permissions) for any user across all organizations by supplying targeted Name and Org parameters via a network request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7573",
"url": "https://www.suse.com/security/cve/CVE-2026-7573"
},
{
"category": "external",
"summary": "SUSE Bug 1264227 for CVE-2026-7573",
"url": "https://bugzilla.suse.com/1264227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-7573"
},
{
"cve": "CVE-2026-84369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84369"
}
],
"notes": [
{
"category": "general",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions 2 and 3 and implemented in plugins/removeScripts.js, removes SVG and XHTML script elements but does not inspect executable HTML content inside SVG foreignObject elements. Event-handler attributes such as onload and onbeforetoggle, srcdoc documents, and executable URLs in the action, data, formaction, href, and src attributes can remain in attacker-controlled SVG input. When an application uses the plugin as its only protection and serves the optimized SVG in an active browser context, the payload can execute script in the viewer\u0027s origin, expose data, modify content, or perform actions as the victim. This issue is fixed in versions 2.8.4, 3.3.5, and 4.1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84369",
"url": "https://www.suse.com/security/cve/CVE-2026-84369"
},
{
"category": "external",
"summary": "SUSE Bug 1278277 for CVE-2026-84369",
"url": "https://bugzilla.suse.com/1278277"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-84369"
},
{
"cve": "CVE-2026-84370",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-84370"
}
],
"notes": [
{
"category": "general",
"text": "SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions 2 and 3, incompletely filters executable links in plugins/removeScripts.js and lib/svgo/tools.js. The plugin does not recognize namespace-prefixed SVG anchor elements such as svg:a with href or namespaced *:href values, and it does not remove ASCII tab, line-feed, or carriage-return characters before checking URL schemes. Browsers remove those characters before parsing a scheme, allowing an executable link to pass the plugin\u0027s check. When an application processes attacker-controlled SVG input and serves the result in an active browser context, a victim who activates the surviving link can execute script in the SVG\u0027s origin, expose data, modify content, or perform actions as the victim. This issue is fixed in versions 2.8.4, 3.3.5, and 4.1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-84370",
"url": "https://www.suse.com/security/cve/CVE-2026-84370"
},
{
"category": "external",
"summary": "SUSE Bug 1278284 for CVE-2026-84370",
"url": "https://bugzilla.suse.com/1278284"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.aarch64",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.ppc64le",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.s390x",
"openSUSE Tumbleweed:velociraptor-0:0.76.7.0.git145.b60ef1146-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-06T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-84370"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…