VulnSea

enterprise_linux vulnerabilities

CVEs whose affected-version data names the enterprise_linux package (go, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

678 CVEsRSS

CVE-2026-50261High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while chang…

▾ Twilightx.org · x_serverEPSS 0.15%via NVD
CVE-2026-50260High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client…

▾ Twilightx.org · x_serverEPSS 0.15%via NVD
CVE-2026-50259High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at…

▾ Twilightx.org · x_serverEPSS 0.17%via NVD
CVE-2026-50258High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to Xkb…

▾ Twilightx.org · x_serverEPSS 0.16%via NVD
CVE-2026-50257High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence()

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to se…

▾ Twilightx.org · x_serverEPSS 0.14%via NVD
CVE-2026-50256High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The ser…

▾ Twilightx.org · x_serverEPSS 0.16%via NVD
CVE-2026-41178High· 7.5
3mo ago

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denia…

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length i…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.34%via CSAF
CVE-2026-5419Low· 3.7
3mo ago

A flaw was found in gnutls

A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through ob…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream E4S (v.9.4)EPSS 0.38%via NVD
CVE-2026-4408Critical· 9.0PoC
4mo ago

A flaw was found in Samba

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution characte…

▾ Abyssalredhat · openshift_container_platformEPSS 2.5%via NVD
CVE-2026-2340Medium· 6.5
4mo ago

A flaw was found in Samba’s vfs_worm module

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename o…

▾ Sunlitredhat · openshift_container_platformEPSS 0.94%via NVD
CVE-2026-1933High· 7.1
4mo ago

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete re…

▾ Twilightredhat · openshift_container_platformEPSS 0.86%via NVD
CVE-2026-3012High· 8.0
4mo ago

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store…

▾ Twilightredhat · openshift_container_platformEPSS 0.26%via NVD
CVE-2026-48864High· 7.8
4mo ago

A flaw was found in libsolv

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` …

▾ Twilightopensuse · libsolvEPSS 0.23%via NVD
CVE-2026-39831High· 8.1
4mo ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check (CVE-2026-39831)

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardw…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.42%via CSAF
CVE-2026-46595High· 7.1⚖ disputed
4mo ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.50%via CSAF
CVE-2026-9149Medium· 6.5
4mo ago

A flaw was found in libsolv

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allo…

▾ Sunlitopensuse · libsolvEPSS 0.31%via NVD
CVE-2026-9150Medium· 6.5
4mo ago

A flaw was found in libsolv

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SH…

▾ Sunlitopensuse · libsolvEPSS 0.41%via NVD
CVE-2026-42009High· 7.5
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not cor…

▾ Twilightgnu · gnutlsEPSS 1.3%via NVD
CVE-2026-44431Medium· 5.3
4mo ago

urllib3 is an HTTP client library for Python

urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive hea…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 8)EPSS 0.33%via NVD
CVE-2026-41293High· 7.3PoC⚖ disputed
4mo ago

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293)

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid.

▾ MidnightRed Hat · Red Hat Enterprise Linux AppStream EUS (v. 10.0)EPSS 1.7%via CSAF
CVE-2026-8177High· 7.5
4mo ago

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read…

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 10)EPSS 0.65%via NVD
CVE-2026-42308Medium· 6.2
4mo ago

Pillow: Pillow: Denial of Service via integer overflow in font processing (CVE-2026-42308)

A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condi…

▾ SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.11%via CSAF
CVE-2026-39823Medium· 5.4
4mo ago

html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)

A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper esc…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.31%via CSAF
CVE-2026-39826Medium· 5.4
4mo ago

html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)

A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block,…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.37%via CSAF
CVE-2026-39825Medium· 6.5
4mo ago

net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2…

A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs becaus…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4.22EPSS 0.41%via CSAF
CVE-2026-42010High· 7.1
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a spec…

▾ Twilightgnu · gnutlsEPSS 1.1%via NVD
CVE-2026-3833Medium· 6.5PoC
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `perm…

▾ Twilightgnu · gnutlsEPSS 0.56%via NVD
CVE-2026-33845High· 7.5
4mo ago

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may…

▾ Twilightgnu · gnutlsEPSS 0.80%via NVD
CVE-2026-6357Medium· 5.8
5mo ago

pip: pip: Arbitrary code execution or information disclosure via malicious wheel package installation (CVE-2026-6357)

A flaw was found in pip. Prior to version 26.1, pip's self-update check functionality would execute after installing wheel packages. This process involved importing newly installed Python modules. A malicious actor could craft a specially …

▾ SunlitRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.14%via CSAF
CVE-2026-31555Medium· 5.5
5mo ago

kernel: futex: Clear stale exiting pointer in futex_lock_pi() retry path (CVE-2026-31555)

A flaw was found in the Linux kernel. A local user could exploit a race condition within the `futex_lock_pi()` retry path. This vulnerability occurs because a stale pointer to an exiting process is not cleared, leading to a kernel warning.…

▾ SunlitRed Hat · Red Hat Enterprise Linux BaseOS (v. 9)EPSS 0.13%via CSAF
enterprise_linux vulnerabilities (CVEs) — page 17 · VulnSea