Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Two significant vulnerabilities were discovered in openCryptoki, a PKCS#11 Cryptographic Token Interface implementation. CVE-2026-40253 involves integer underflows that could lead to out-of-bounds reads, while CVE-2026-23893 allows privilege escalation through improper symlink handling. Both vulnera...
SUSE has released updates addressing a critical buffer overflow vulnerability (CVE-2026-25506) in the munge package, affecting multiple SUSE Linux versions. The vulnerability, which was published on February 10, 2026, could allow for potential exploitation if not patched. Users are advised to apply...
openSUSE has released updates for openCryptoki to address two critical vulnerabilities. CVE-2026-22791, published on January 13, 2026, can lead to heap corruption or denial-of-service, while CVE-2026-23893, published on January 22, 2026, allows for privilege escalation or data exposure via symlink f...
