Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
On June 23, 2026, Fedora released critical security updates for Caddy, addressing 22 CVEs in Fedora 43 and 17 CVEs in Fedora 44. The vulnerabilities include privilege escalation, information disclosure, and denial of service. Key CVEs include CVE-2026-27585, CVE-2026-30851, and CVE-2026-40097, which...
Fedora has released updates addressing critical vulnerabilities in docker-buildx and docker-buildkit. CVE-2026-39828 allows unauthorized command execution via discarded SSH permissions, while CVE-2026-39829 enables denial of service through crafted public keys. Both vulnerabilities were published on...
Fedora has released updates for the moby-engine addressing critical vulnerabilities, including CVE-2026-39828, CVE-2026-39829, and CVE-2026-39830, all published on May 22, 2026. These vulnerabilities allow unauthorized command execution and denial of service attacks via SSH. The affected versions ar...
