Risk Discovery

CISA Advisories

US-CERT

FullDisclosure

OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read

OpenBSD sppp_pap_input: PAP authentication bypass

SEC Consult SA-20260618-0 :: Hardcoded Root Cloud Credentials in Application Binaries in Silver Leaf Technologies - Worksnaps.net Worksnaps

SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4

SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3

SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225

APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211

PHP 8.5.7 `levenshtein()` signed-integer overflow

PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow

PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow

US CERT Weekly

Open Source Security

Re: check_icmp (Monitoring Plugins): host-count overflow leads to heap buffer overflow in setuid-root binary

CVE-2026-54161: NUT upsmon: remote OS command injection via ups.alarm in NOTIFYCMD - fixed in PR #3499 (affects 2.8.3–2.8.5)

Vinyl Cache / Varnish Cache HTTP/2 parsing deficiency [CVE-2026-50052]

Fwd: libevent 2.1.13-stable contains several security fixes

CVE-2025-15646: HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion

CVE-2026-56016: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

check_icmp (Monitoring Plugins): host-count overflow leads to heap buffer overflow in setuid-root binary

CVE-2026-54399: Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration

CVE-2026-54428: Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK

Re: hostapd: OOB write in Wi-Fi 7 MLD association parsing (pre-auth DoS)

© 2026 RiskDiscovery | Sponsored by: Deception Logic