Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-23585 | not reported | — | No | Rejected reason: Withdrawn by requester. | 2026-09-02 |
| CVE-2026-23584 | not reported | — | No | Rejected reason: Withdrawn by requester. | 2026-09-02 |
| CVE-2026-23583 | not reported | — | No | Rejected reason: Withdrawn by requester. | 2026-09-02 |
| CVE-2026-59681 | high | 8.8 | No | A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute a... | 2026-09-02 |
| CVE-2026-59680 | high | 8.0 | No | An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() i... | 2026-09-02 |
| CVE-2026-25706 | high | 7.5 | No | Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Ac... | 2026-09-02 |
| CVE-2026-82747 | not reported | — | No | Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource ha... | 2026-09-01 |
| CVE-2026-82749 | not reported | — | No | Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent(...) scoping filter to match unintended records when... | 2026-09-01 |
| CVE-2026-82748 | not reported | — | No | Incorrect Authorization vulnerability in ash-project ash authorizes an aggregate under one read action while computing it under another, so... | 2026-09-01 |
| CVE-2026-82746 | not reported | — | No | Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic p... | 2026-09-01 |
| CVE-2026-82745 | not reported | — | No | Improper Access Control vulnerability in ash-project ash lets a create action overwrite an existing record when the ETS or Mnesia data layer... | 2026-09-01 |
| CVE-2026-82744 | not reported | — | No | Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a... | 2026-09-01 |
| CVE-2026-82743 | not reported | — | No | Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while t... | 2026-09-01 |
| CVE-2026-82742 | not reported | — | No | Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attacker exhaust node memory by matching a filter that spans mult... | 2026-09-01 |
| CVE-2026-82741 | not reported | — | No | Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.... | 2026-09-01 |
| CVE-2026-82740 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested {:array, {:array,... | 2026-09-01 |
| CVE-2026-82739 | not reported | — | No | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed fiel... | 2026-09-01 |
| CVE-2026-82738 | not reported | — | No | Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by storing a non-versio... | 2026-09-01 |
| CVE-2026-82737 | not reported | — | No | Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by subm... | 2026-09-01 |
| CVE-2026-82736 | not reported | — | No | Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string val... | 2026-09-01 |