Alle CVE’s van de afgelopen zes maanden, dagelijks bijgewerkt.

4 van 4 getoond

• GemiddeldCVE-2026-90813CVSS-score 4.314 sep 2026

  A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order:

  CWE-179CWE-180
• HoogCVE-2026-49414CVSS-score 7.827 jun 2026

  The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was

  CWE-179freebsd freebsd
• LaagCVE-2026-3832CVSS-score 3.730 apr 2026

  A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses

  CWE-179gnu gnutlsredhat hardened_imagesredhat openshift_container_platform
• GemiddeldCVE-2026-32305CVSS-score 5.320 mrt 2026

  Traefik is an HTTP reverse proxy and load balancer. Versions 2.11.40 and below, 3.0.0-beta1 through 3.6.11, and 3.7.0-ea.1 are vulnerable to mTLS bypass through the TLS SNI pre-sniffing logic related to fragmented ClientHello packets. When a TLS ClientHello is

  CWE-287CWE-1188CWE-179traefik traefik