Linuxsecurity Multiple SUSE yast2-users Vulnerabilities Addressed in September 2026 Updates
Article Content
- •CVE-2026-59680 allows OS command injection via LDAP attributes.
- •Multiple SUSE and openSUSE versions are affected, requiring urgent updates.
- •CVE-2026-37458 poses a DoS threat in Quagga software.
On September 1, 2026, SUSE released updates addressing a critical OS command injection vulnerability (CVE-2026-59680) affecting yast2-users. This vulnerability allows attackers to exploit LDAP-supplied attributes, potentially leading to unauthorized command execution. Multiple versions of SUSE Linux Enterprise Server and openSUSE are affected, with updates released for versions 12 SP5, 15 SP4, 15 SP5, 15 SP6, and 15 SP7. The updates are crucial for maintaining system security and preventing exploitation. Another vulnerability, CVE-2026-37458, related to the Quagga routing software, was also disclosed, allowing for denial-of-service attacks. The updates are rated important, and users are urged to apply them promptly to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (11)
Following this threat?
Track SuSE and CVE-2026-37458 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical RCE Vulnerability in Langflow Exposed CVE-2026-105740 is a critical remote code execution (RCE) vulnerability affecting Langflow versions prior to 1.9.0. Authenticated users can exploit this flaw by adding an MCP server with the 'Stdio' transport, allowing arbitrary OS commands to be executed without validation. The vulnerability was published on October… 
OS Command Injection Flaw in SiteGuard WAF Exploited EG Secure Solutions disclosed that attackers are exploiting an OS command injection vulnerability in SiteGuard Server Edition, tracked as CVE-2026-106931. This flaw allows attackers to execute commands with root or SYSTEM privileges, affecting versions 2.20 and later, with the statistics feature enabled by default.…