Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
SUSE released an important security update for kubevirt-1.6 on August 17, 2026, addressing multiple vulnerabilities. Notably, CVE-2025-47911 allows denial of service due to inefficient HTML parsing, while CVE-2025-47914 can lead to a panic from out-of-bounds reads in SSH agent requests. Both vulnera...
SUSE Linux Micro and OpenSUSE Linux Server have released important security updates for Podman, addressing multiple vulnerabilities including CVE-2025-47913 and CVE-2025-47914, which were published in November 2025. These vulnerabilities could lead to client process termination and potential panic d...
openSUSE has released important updates for the cheat package to address several vulnerabilities. The updates fix issues related to client process termination, potential unbounded memory consumption, and out of bounds reads, as well as updating dependencies for Go modules. Affected CVEs include CVE-...
