A local privilege escalation vulnerability named 'Fragnesia' has been reported in the Linux Kernel involving ESP-in-TCP. No detailed technical information or affected versions are provided.
This entry references issues related to AWS Research and Engineering Studio (RES) but provides no specific details about the nature of the issues, vulnerabilities, or exploits.
This entry references issues with the Amazon Athena ODBC Driver but provides no specific details about the nature of the issues, affected versions, or impact.
This vulnerability involves FreeRTOS-Plus-TCP and includes a MAC address validation bypass and an integer underflow in ICMP echo reply handling. No detailed technical information or affected versions are provided.
This content describes a virtual conference event focused on Zero Trust security strategies and identity verification. The event aims to provide actionable insights on implementing Zero Trust architectures and leveraging AI for identity-based threat defense. It is not a security vulnerability or threat but rather an industry event announcement.
CVE-2026-110809 is a denial of service vulnerability in sgl-project SGLang affecting versions 0.5.0 through 0.5.19. The flaw exists in the Session.create_req function within the Session Cleanup component. The vulnerability can be exploited remotely without user interaction and requires low privileges. A public exploit is available, but a fix is pending acceptance of a pull request.
CVE-2026-110807 is a denial of service vulnerability in the sgl-project SGLang affecting versions 0.5.0 through 0.5.19. The issue arises from manipulation of the session_params argument in the generate Endpoint component, specifically in the file python/sglang/srt/managers/io_struct.py. The vulnerability can be exploited remotely without user interaction and requires low attack complexity and privileges. Although exploit code is publicly available, the project has not yet responded with a fix.
CVE-2026-0322 is a high-severity remote code execution vulnerability in Palo Alto Networks PAN-OS management interface. It allows authenticated attackers with network access to execute code as root on affected firewall devices. Exploitation requires valid credentials and network access to the management interface. Palo Alto Networks has released security updates for multiple PAN-OS versions and recommends restricting management interface access to trusted internal IPs. Limited exploitation has been observed in the wild. No known workarounds exist, but Threat Prevention signatures offer limited detection capabilities.
Heym versions from 0.0.55 up to but not including 0.0.121 contain a privilege escalation vulnerability. Shared collaborators can overwrite a workflow's error_workflow_id because this field is not restricted to owners only. This allows attackers to redirect error workflows to their own workflows containing HTTP nodes, leading to exfiltration of the owner's decrypted credentials when the parent workflow errors.
Renovate versions before 44.79.0 contain a server-side request forgery (SSRF) vulnerability. This flaw allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or customDatasources. Exploitation can lead to attackers accessing instance metadata service endpoints to obtain AWS credentials or leak sensitive information through Renovate logs. The vulnerability has a high severity with a CVSS score of 8.4. A patch is available to address this issue.
CVE-2026-110867 is a critical authorization bypass vulnerability in renovatebot's renovate tool before version 44.60.1. It allows attackers controlling an externally sourced preset to bypass environment variable restrictions by placing env inside a shared preset. This enables overriding sensitive environment variables such as PATH, LD_PRELOAD, NODE_OPTIONS, or GIT_SSL_CAINFO in child processes on self-hosted instances.
Renovate versions before 44.61.3 contain a vulnerability that allows bypassing the minimumReleaseAge protection mechanism when a user requests a PR rebase via the rebase/retry checkbox. This flaw can enable malicious dependency versions to be introduced into pull requests and executed in continuous integration environments before the intended release age has elapsed.
CVE-2026-110865 is a high-severity vulnerability in renovatebot's renovate tool before version 44.60.1. It allows repository users to bypass the allowedHeaders restriction by embedding hostRules headers inside shared presets. This enables attackers to inject custom HTTP headers into requests sent by Renovate to other hosts.
Better Auth sso versions from 1.7.0-rc.2 up to but not including 1.7.3 contain an authentication bypass vulnerability. This flaw allows authenticated users to impersonate other users by registering a personal SSO provider that mimics a legitimate provider's OIDC issuer or SAML entity ID. The vulnerability arises because the account lookup process ignores the providerId, enabling attackers to create sessions for victim accounts by asserting their subject or NameID.
CVE-2026-110861 is a race condition vulnerability in better-auth's drizzle-adapter and kysely-adapter affecting versions from 1.6.17 up to but not including 1.7.7 and 1.7.0 respectively. The flaw lies in the database-backed rate limiting on PostgreSQL where the check for rate limits is not atomic with the counter update. This allows remote attackers to send concurrent requests that bypass the intended rate limits on sensitive authentication endpoints such as password sign-in, two-factor verification, one-time code, and password reset.
GitPython versions from 3.1.62 up to but not including 3.2.0 contain a vulnerability in the Submodule.move() function where symbolic links in intermediate path components are not properly rejected. This flaw allows an untrusted repository to commit a symlink that points outside the working tree, potentially causing the relocation of a submodule checkout outside the intended directory and corrupting the index and .gitmodules file.
GitPython versions before 3.2.0 contain an argument injection vulnerability in the Head.checkout() function. This flaw allows remote attackers to read arbitrary files by supplying a specially crafted branch name that is interpreted as a git option. Specifically, an attacker can host a repository with a default branch named --pathspec-from-file=<path>, causing cloning applications that check out the active branch to leak file contents via GitCommandError messages.
GitPython versions from 3.1.30 up to but not including 3.2.0 contain a critical remote code execution vulnerability in the Remote.pull() method. The vulnerability arises because the unsafe-option guard only inspects keyword arguments and not positional refspec arguments, allowing attackers controlling the refspec to inject OS commands via the --upload-pack option. This can lead to execution of arbitrary commands as the calling process over local-path or SSH transports.
GitPython versions before 3.2.0 contain a remote code execution vulnerability due to improper validation of input types. The Git.ls_remote function forwards URLs without validating unsafe protocols, allowing attackers to supply malicious ext:: remote-helper URLs to execute commands. Additionally, merge_base and IndexFile.move functions accept unguarded option injection. This vulnerability has a high severity with a CVSS score of 7.7.