Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A significant authorization bypass vulnerability (CVE-2026-33186) has been identified in multiple SUSE Elemental systems, including the elemental-system-agent, elemental-toolkit, and elemental-register. This flaw arises from improper validation of the HTTP/2 path pseudo-header, allowing unauthorized...
An important security update for azure-storage-azcopy has been released, addressing two critical vulnerabilities: CVE-2026-39821 and CVE-2026-56852. CVE-2026-39821 allows for validation bypass and privilege escalation due to improper handling of Punycode-encoded labels, while CVE-2026-56852 can lead...
SUSE has issued security updates for Helm and BIND, addressing several vulnerabilities. The Helm update (SUSE-SU-2026:23984-1) released on September 30, 2026, covers 16 CVEs, including CVE-2026-35204, which has a CVSS score of 8.4, indicating a high severity. The BIND update (SUSE-SU-2026:4597-1), r...
SUSE has released updates for two components, google-guest-agent and google-osconfig-agent, addressing a moderate vulnerability identified as CVE-2026-56852. This vulnerability involves improper handling of input containing invalid UTF-8 bytes, which can lead to an infinite loop. Affected systems in...
