Threats Tagged 'cve-2026-9150'
View all threats tagged with 'cve-2026-9150'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-9150'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-25707 is a high severity vulnerability in SUSE libzypp before version 17.38.10. It involves a relative path traversal flaw when processing repository metadata, which could allow remote attackers supplying malicious repositories to overwrite files on the system. This can lead to denial of service or privilege escalation. Join the discussion | GCVE Database | 06/29/2026, 10:04:59 UTC Added: 06/24/2026, 17:00:24 UTC |
0 This update includes the following RPMs: libsolv: * libsolv-0.7.39-3.hum1 (aarch64, x86_64) * libsolv-demo-0.7.39-3.hum1 (aarch64, x86_64) * libsolv-devel-0.7.39-3.hum1 (aarch64, x86_64) * libsolv-tools-0.7.39-3.hum1 (aarch64, x86_64) * libsolv-tools-base-0.7.39-3.hum1 (aarch64, x86_64) * perl-solv-0.7.39-3.hum1 (aarch64, x86_64) * python3-solv-0.7.39-3.hum1 (aarch64, x86_64) * ruby-solv-0.7.39-3.hum1 (aarch64, x86_64) * libsolv-0.7.39-3.hum1.src (src) Join the discussion | GCVE Database | 06/28/2026, 14:31:12 UTC Added: 06/29/2026, 22:09:52 UTC |
0 This security update addresses multiple vulnerabilities in libsolv, libzypp, and zypper components used by SUSE. The fixed issues include heap and stack-based buffer overflows, path traversal vulnerabilities, and arbitrary local file overwrite risks caused by crafted repository metadata or malformed files. The update also improves robustness against malformed repository data and enforces restrictions on repository path entries to prevent directory traversal outside allowed locations. These fixes mitigate potential crashes, memory corruption, and unauthorized file modifications. Join the discussion | GCVE Database | 06/23/2026, 14:09:32 UTC Added: 06/24/2026, 17:00:24 UTC |
0 This update includes the following RPMs: libsolv: * libsolv-0.7.38-2.hum1 (aarch64, x86_64) * libsolv-demo-0.7.38-2.hum1 (aarch64, x86_64) * libsolv-devel-0.7.38-2.hum1 (aarch64, x86_64) * libsolv-tools-0.7.38-2.hum1 (aarch64, x86_64) * libsolv-tools-base-0.7.38-2.hum1 (aarch64, x86_64) * perl-solv-0.7.38-2.hum1 (aarch64, x86_64) * python3-solv-0.7.38-2.hum1 (aarch64, x86_64) * ruby-solv-0.7.38-2.hum1 (aarch64, x86_64) * libsolv-0.7.38-2.hum1.src (src) Join the discussion | GCVE Database | 05/27/2026, 13:21:24 UTC Added: 06/24/2026, 16:59:31 UTC |
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system. Join the discussion | CVE Database V5 | 05/20/2026, 23:07:18 UTC Added: 05/20/2026, 23:18:33 UTC |
Showing 1 to 5 of 5 results