Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
SUSE has released important security updates for its google-osconfig-agent and google-guest-agent due to multiple vulnerabilities. The updates address CVE-2026-41178, which allows denial-of-service (DoS) attacks via oversized inputs, and CVE-2026-33186, which enables authorization bypass through imp...
IBM has disclosed multiple critical vulnerabilities in its WebSphere Application Server, including CVE-2026-8633, which allows remote code execution via crafted HTTP requests. Other vulnerabilities, such as CVE-2026-9311, CVE-2026-9319, and CVE-2026-8644, enable attackers to bypass security controls...
Oracle released an important security patch for osbuild-composer in Oracle Linux 9 on August 6, 2026, addressing multiple vulnerabilities. The patch resolves critical issues linked to CVEs including CVE-2025-61726, CVE-2025-68121, and CVE-2026-4427. These vulnerabilities could allow privilege escala...
