Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
openSUSE has issued a moderate security update for zk, addressing CVE-2025-58181, a denial-of-service vulnerability. The update includes enhancements such as diagnostics for missing backlinks and self-referential links, along with a version bump for the golang.org/x/crypto dependency. Users are advi...
openSUSE has released important updates for the cheat package to address several vulnerabilities. The updates fix issues related to client process termination, potential unbounded memory consumption, and out of bounds reads, as well as updating dependencies for Go modules. Affected CVEs include CVE-...
A vulnerability in the Google Guest Agent was discovered by Jakub Ciolek, allowing it to crash when receiving specially crafted network traffic. The issue arises from the Go Cryptography module failing to validate GSSAPI authentication requests during SSH operations, potentially enabling denial of s...
