openSUSE Security Updates Address Remote Code Exec and CSS Injection Vulnerabilities

Linuxsecurity

openSUSE Security Updates Address Remote Code Exec and CSS Injection Vulnerabilities

First seen 20 Jul 2026, 07:01 UTC • •70.5

Article Content

1 / 3

Browse articles

ThreatCluster •July 21, 2026 at 03:08 UTC

•CVE-2026-0252 allows remote code execution in python-django-haystack.
•CVE-2026-0251 presents a moderate CSS injection risk in python-weasyprint.
•Users must apply patches immediately to secure affected openSUSE systems.

openSUSE has released security updates for two vulnerabilities affecting its systems. The first, CVE-2026-0252, is a critical remote code execution vulnerability in the python-django-haystack package, which could allow attackers to execute arbitrary code. The second, CVE-2026-0251, is a moderate CSS injection vulnerability in the python-weasyprint package, potentially allowing for unauthorized content manipulation. Both vulnerabilities affect openSUSE Backports SLE-15-SP7. Users are advised to apply the patches using YaST online_update or zypper patch commands. The vulnerabilities were disclosed on July 19, 2026, and the updates are now available for installation. Immediate action is recommended to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 63d ago How this analysis works

Timeline

2026-07-19

Security updates released for openSUSE vulnerabilities

openSUSE issued patches for CVE-2026-0252 and CVE-2026-0251, addressing critical and moderate vulnerabilities respectively.

2026-07-19

CVE-2026-0252 disclosed

A critical remote code execution vulnerability in python-django-haystack was made public, affecting openSUSE Backports SLE-15-SP7.

2026-07-19

CVE-2026-0251 disclosed

A moderate CSS injection vulnerability in python-weasyprint was disclosed, also impacting openSUSE Backports SLE-15-SP7.

More articles in this cluster (2)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Organization (1)

OpenSUSE

Affected Platform (1)

Linux

Relationships

Zero-day Exploit targets Linux
Zero-day Exploit related to OpenSUSE

Following this threat?

Track OpenSUSE in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…