Permalink CVE-2026-8086

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Exploit Code Maturity (E): Proof-of-Concept (P)
• Remediation Level (RL): Official Fix (O)
• Report Confidence (RC): Confirmed (C)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 12 hours ago
• @LeSuisse ignored
  3 packages

  • haskellPackages.hgdal
  • ocamlPackages.gdal
  • ocamlPackages_latest.gdal
  4 hours ago

OSGeo gdal SWapi.c SWnentries heap-based overflow

• VDB-361839 | OSGeo gdal SWapi.c SWnentries heap-based overflow vdb-entrytechnical-description
• VDB-361839 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
• Submit #808038 | OSGeo GDAL 3.13.0dev Heap-based Buffer Overflow third-party-advisoryexploit
• https://github.com/OSGeo/gdal/issues/14356 issue-trackingexploit
• https://github.com/OSGeo/gdal/pull/14361 issue-trackingpatch
• https://github.com/biniamf/pocs/tree/main/gdal-swinqdims_bof exploit
• https://github.com/OSGeo/gdal/commit/9491e794f1757f08063ea2f7a274ad2994afa636 patch
• https://github.com/OSGeo/gdal/releases/tag/v3.12.4RC1 patch
• https://github.com/OSGeo/gdal/ product

---

gdal

• ==3.12.4RC1
• ==3.13.0dev-4

Permalink CVE-2026-42011

7.4 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): None (N)

updated 4 hours ago by @LeSuisse Activity log

• Created suggestion 12 hours ago
• @LeSuisse ignored
  4 packages

  • guile-gnutls
  • python312Packages.python3-gnutls
  • python314Packages.python3-gnutls
  • python313Packages.python3-gnutls
  4 hours ago

Gnutls: gnutls: security bypass due to incorrect name constraint handling

• https://access.redhat.com/security/cve/CVE-2026-42011 vdb-entryx_refsource_REDHAT
• RHBZ#2467437 issue-trackingx_refsource_REDHAT

---

rhcos

gnutls

Permalink CVE-2026-42285

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

GoBGP: Panic in AdjRib.Update via malformed BGP Update message (Nil Pointer Dereference)

• https://github.com/osrg/gobgp/security/advisories/GHSA-p3w2-64xm-833j x_refsource_CONFIRMexploit
• https://github.com/osrg/gobgp/releases/tag/v4.5.0 x_refsource_MISC

---

gobgp

• === 4.4.0

Permalink CVE-2026-41505

8.7 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): None (N)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

RELATE: Predictable Token Generation in auth.py and exam.py

• https://github.com/inducer/relate/security/advisories/GHSA-rvx5-95mm-p77v x_refsource_CONFIRM
• https://github.com/inducer/relate/commit/2f68e16cd3b96d25c188c1aa3f7e13cdb15cdaeb x_refsource_MISC

---

relate

• ==< 2f68e16cd3b96d25c188c1aa3f7e13cdb15cdaeb

Permalink CVE-2026-8094

created 12 hours ago Activity log

• Created suggestion 12 hours ago

Other issue in the WebRTC component

• https://bugzilla.mozilla.org/show_bug.cgi?id=2035939
• https://www.mozilla.org/security/advisories/mfsa2026-41/

---

Firefox

• =<*

Permalink CVE-2026-8090

7.3 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

Use-after-free in the DOM: Networking component

• https://bugzilla.mozilla.org/show_bug.cgi?id=2034352
• https://www.mozilla.org/security/advisories/mfsa2026-40/
• https://www.mozilla.org/security/advisories/mfsa2026-41/
• https://www.mozilla.org/security/advisories/mfsa2026-42/

---

Firefox

• =<115.*
• =<140.*
• =<*

Permalink CVE-2026-7415

9.8 CRITICAL

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

Open MQTT orchestration without read/write ACLs in Yarbo robot firmware

• https://github.com/Bin4ry/yarbo-nat-in-my-back-yard third-party-advisoryexploit
• https://takeonme.org/gcves/GCVE-1337-2026-0000000000000000000000000000000000000… third-party-advisory

---

Firmware

• =<2.3.9

Permalink CVE-2026-41586

created 12 hours ago Activity log

• Created suggestion 12 hours ago

ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

• https://github.com/hyperledger/fabric/security/advisories/GHSA-prf8-cf2x-rhx7 x_refsource_CONFIRMexploit
• https://hyperledger.github.io/fabric-gateway x_refsource_MISC

---

fabric

• ==>= 1.0.0, <= 2.2.26

Permalink CVE-2026-41642

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

GoBGP: Remote Denial of Service (Panic) via Malformed Well-known Path Attribute

• https://github.com/osrg/gobgp/security/advisories/GHSA-7235-89m6-f4px x_refsource_CONFIRMexploit
• https://github.com/osrg/gobgp/releases/tag/v4.4.0 x_refsource_MISC

---

gobgp

• === 4.3.0

Permalink CVE-2026-41143

8.8 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): Low (L)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): High (H)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): Low (L)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): High (H)
• Modified Availability (MA): High (H)

created 12 hours ago Activity log

• Created suggestion 12 hours ago

YesWiki vulnerable to authenticated SQL Injection via id_fiche in EntryManager::formatDataBeforeSave()

• https://github.com/YesWiki/yeswiki/security/advisories/GHSA-f58v-p6j9-24c2 x_refsource_CONFIRMexploit
• https://github.com/YesWiki/yeswiki/releases/tag/v4.6.1 x_refsource_MISC

---

yeswiki

• ==< 4.6.1