VulnSea

enterprise_linux vulnerabilities

CVEs whose affected-version data names the enterprise_linux package (go, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

678 CVEsRSS

CVE-2026-6732Medium· 6.5
5mo ago

A flaw was found in libxml2

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing …

▾ Sunlitxmlsoft · libxml2EPSS 0.94%via NVD
CVE-2026-31503Medium· 5.5
5mo ago

kernel: udp: Fix wildcard bind conflict check when using hash2 (CVE-2026-31503)

A flaw was found in the Linux kernel's User Datagram Protocol (UDP) implementation. When a significant number of UDP sockets are bound to specific local addresses on the same port, the kernel's conflict detection mechanism can fail. This a…

▾ SunlitRed Hat · Red Hat Enterprise Linux BaseOS (v. 10)EPSS 0.16%via CSAF
CVE-2026-6843Medium· 5.5
5mo ago

A flaw was found in nano

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading…

▾ Sunlitgnu · nanoEPSS 0.15%via NVD
CVE-2026-6844Medium· 5.5
5mo ago

A flaw was found in the `readelf` utility of the binutils package

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, …

▾ Sunlitgnu · binutilsEPSS 0.15%via NVD
CVE-2026-6845Medium· 5.0
5mo ago

A flaw was found in binutils, specifically within the `readelf` utility

A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format …

▾ Sunlitgnu · binutilsEPSS 0.14%via NVD
CVE-2026-31431High· 7.8CISA KEVPoC
5mo ago

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in op…

▾ Abyssalredhat · openshift_container_platformEPSS 3.4%via NVD
CVE-2026-6846High· 7.8
5mo ago

A flaw was found in binutils

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this…

▾ Twilightgnu · binutilsEPSS 0.20%via NVD
CVE-2026-33813High· 7.5
5mo ago

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

▾ TwilightRed Hat · Red Hat Enterprise Linux 8EPSS 0.62%via NVD
CVE-2026-41082High· 7.3
5mo ago

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

▾ Twilightocaml · opamEPSS 0.22%via NVD
CVE-2026-6245Medium· 5.5
5mo ago

A flaw was found in the System Security Services Daemon (SSSD)

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-ter…

▾ Sunlitfedoraproject · sssdEPSS 0.15%via NVD
CVE-2026-34486High· 7.5CISA KEVPoC
5mo ago

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to …

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to …

▾ Abyssalapache · tomcatEPSS 6.6%via NVD
CVE-2026-4878Medium· 6.7
5mo ago

A flaw was found in libcap

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file c…

▾ Sunlitlibcap_project · libcapEPSS 0.14%via NVD
CVE-2026-32289Medium· 5.4
5mo ago

html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals (CVE…

A flaw was found in the `html/template` package. This vulnerability arises from improper tracking of context and brace depth within JavaScript (JS) template literals. A remote attacker could exploit these issues to cause content to be inco…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4EPSS 0.33%via CSAF
CVE-2026-32281Medium· 5.9
5mo ago

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)

A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive r…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream EUS (v.9.6)EPSS 0.37%via CSAF
CVE-2026-32282High· 7.8
5mo ago

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before ac…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 10)EPSS 0.17%via CSAF
CVE-2026-39373High· 7.5⚖ disputed
5mo ago

JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens (CVE-2026-39373)

A flaw was found in JWCrypto, a Python library for JSON Web Key (JWK), JSON Web Signature (JWS), and JSON Web Encryption (JWE) specifications. An unauthenticated attacker can exploit this vulnerability by sending specially crafted JWE toke…

▾ TwilightRed Hat · Red Hat Ansible Automation Platform 2.5 for RHEL 8EPSS 0.43%via CSAF
CVE-2026-5745Medium· 5.5
5mo ago

A flaw was found in libarchive

A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default…

▾ Sunlitlibarchive · libarchiveEPSS 0.17%via NVD
CVE-2026-33815High· 8.3
5mo ago

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability (CVE-2026-33815)

A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.20EPSS 0.86%via CSAF
CVE-2026-5704Medium· 5.0
5mo ago

A flaw was found in tar

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, pot…

▾ Sunlitgnu · tarEPSS 0.40%via NVD
CVE-2026-2625Medium· 4.0
5mo ago

A flaw was found in rust-rpm-sequoia

A flaw was found in rust-rpm-sequoia. An attacker can exploit this vulnerability by providing a specially crafted Red Hat Package Manager (RPM) file. During the RPM signature verification process, this crafted file can trigger an error i…

▾ Sunlitredhat · hardened_imagesEPSS 0.11%via NVD
CVE-2026-35092High· 7.5
5mo ago

A flaw was found in Corosync

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to cr…

▾ Twilightcorosync · corosyncEPSS 1.3%via NVD
CVE-2026-35091High· 8.2
5mo ago

A flaw was found in Corosync

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This …

▾ Twilightcorosync · corosyncEPSS 1.1%via NVD
CVE-2026-5121High· 7.5
5mo ago

A flaw was found in libarchive

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead t…

▾ Twilightlibarchive · libarchiveEPSS 1.4%via NVD
CVE-2026-21710High· 7.5PoC
5mo ago

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`. When this occurs, `dest["__proto__"]` resolves to `O…

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`. When this occurs, `dest["__proto__"]` resolves to `O…

▾ Midnightnodejs · node.jsEPSS 25%via NVD
CVE-2026-4948Medium· 5.5
6mo ago

A flaw was found in firewalld

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify …

▾ Sunlitfirewalld · firewalldEPSS 0.18%via NVD
CVE-2026-28369High· 8.7
6mo ago

A flaw was found in Undertow

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP s…

▾ Twilightredhat · build_of_apache_camel_-_hawtioEPSS 0.89%via NVD
CVE-2026-28368High· 8.7
6mo ago

A flaw was found in Undertow

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretati…

▾ Twilightredhat · build_of_apache_camel_-_hawtioEPSS 0.89%via NVD
CVE-2026-0968Low· 3.1
6mo ago

A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation

A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an `SSH_FXP_NAME` message during a file listing operation. This missing null check c…

▾ Sunlitlibssh · libsshEPSS 0.44%via NVD
CVE-2026-0967Medium· 5.5
6mo ago

A flaw was found in libssh

A flaw was found in libssh. A remote attacker, by controlling client configuration files or known_hosts files, could craft specific hostnames that when processed by the `match_pattern()` function can lead to inefficient regular expressio…

▾ Sunlitlibssh · libsshEPSS 0.22%via NVD
CVE-2026-0965Low· 3.3
6mo ago

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability c…

▾ Sunlitlibssh · libsshEPSS 0.16%via NVD
enterprise_linux vulnerabilities (CVEs) — page 18 · VulnSea