Vulnerabilidades que afectan a Ubuntu 24.04

CVE-2026-78661 Sin clasificar 2026-10-27

containerd

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on…

Sin parche todavía.

CVE-2026-97045 Sin clasificar 2026-10-27

containerd

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a…

Sin parche todavía.

CVE-2026-101513 Sin clasificar 2026-10-26

MariaDB

CVE-2026-101513 affects MySQL Cluster (InnoDB). Affects MySQL 8.0.

Sin parche todavía.

CVE-2026-110928 Sin clasificar 2026-10-26

OpenSSH

authorized_keys restrict does not apply to tunnel forwarding

Sin parche todavía.

CVE-2026-101625 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101626 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101677 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101678 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101768 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101804 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2026-101806 Sin clasificar 2026-10-23

MariaDB

(Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)

Sin parche todavía.

CVE-2023-7356 Sin clasificar 2026-10-22

Kernel Linux

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE…

Sin parche todavía.

CVE-2026-90439 Media 6.5 2026-10-22

Nginx

(NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)

Sin parche todavía.

CVE-2026-109618 Crítica 9.8 2026-10-21

PHP

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-109619 Alta 8.1 2026-10-21

PHP

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-19630 Alta 7.5 2026-10-21

BIND

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of…

Corregida en Debian 13 y Debian 14.

CVE-2026-94300 Alta 8.1 2026-10-21

BIND

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still…

Corregida en Debian 13 y Debian 14.

CVE-2026-96888 Alta 7.5 2026-10-21

BIND

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions…

Corregida en Debian 13 y Debian 14.

CVE-2026-97313 Alta 7.5 2026-10-21

BIND

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be…

Corregida en Debian 13 y Debian 14.

CVE-2026-101607 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101608 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101609 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101610 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101611 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101612 Media 4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101613 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101614 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101615 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101616 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101617 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101618 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101619 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101620 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3; MySQL Cluster…

Sin parche todavía.

CVE-2026-101621 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101622 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101623 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101624 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101627 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101629 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-101637 Media 5.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-101679 Alta 7.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101721 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101722 Media 4.3 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101724 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101725 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101726 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101727 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101728 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101729 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101730 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101731 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101732 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101733 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101747 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101748 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101750 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101751 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101752 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101753 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-101754 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101756 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-101760 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL…

Sin parche todavía.

CVE-2026-101761 Media 5.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101762 Media 5.3 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101766 Media 4.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101770 Alta 8.1 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101771 Alta 8.1 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101772 Alta 8.1 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101773 Alta 7.1 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12…

Sin parche todavía.

CVE-2026-101774 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101775 Alta 7.4 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101776 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12…

Sin parche todavía.

CVE-2026-101777 Media 5.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101778 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101779 Baja 2.7 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101780 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101781 Alta 8.8 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101784 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101785 Alta 8.3 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101787 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101788 Media 5.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101789 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101794 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101795 Media 6.7 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101796 Alta 7.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101797 Alta 7.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101798 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101799 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101800 Media 6.8 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101801 Media 4.9 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3…

Sin parche todavía.

CVE-2026-101802 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2026-101803 Media 6.5 2026-10-20

MariaDB

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1…

Sin parche todavía.

CVE-2025-1218 Sin clasificar 2026-10-19

PHP

php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities

Corregida en Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-110924 Media 4.8 2026-10-16

OpenSSH

A flaw was found in OpenSSH. With GSSAPI authentication enabled, a failed GSSAPI attempt can leave delegated credentials stored for the connection even though user authorization did not succeed. A…

Sin parche todavía.

CVE-2026-110927 Media 4.3 2026-10-16

OpenSSH

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use…

Sin parche todavía.

CVE-2026-85745 Media 4.3 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer when processing…

Corregida en Debian 14.

CVE-2026-85746 Crítica 9.9 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated output buffer when…

Corregida en Debian 14.

CVE-2026-85748 Crítica 9.9 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave stale references in…

Sin parche todavía.

CVE-2026-85985 Media 5.4 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file()…

Corregida en Debian 14.

CVE-2026-86047 Alta 7.7 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are…

Corregida en Debian 14.

CVE-2026-92262 Crítica 9.9 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected because it allows the…

Corregida en Debian 14.

CVE-2026-97380 Alta 8.8 2026-10-16

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an…

Corregida en Debian 14.

CVE-2026-110923 Media 6.5 2026-10-15

OpenSSH

A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the…

Sin parche todavía.

CVE-2026-110925 Media 5.4 2026-10-15

OpenSSH

A flaw was found in OpenSSH. A username entered on the ssh command line can still contain '$' or a non-trailing backslash. When a configuration expands %u inside ProxyCommand or Match exec, those…

Sin parche todavía.

CVE-2026-110926 Media 5.3 2026-10-15

OpenSSH

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel…

Sin parche todavía.

CVE-2025-40778 Sin clasificar 2026-10-14

BIND

bind9 vulnerabilities

Corregida en Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-15176 Alta 8.1 2026-10-14

Nginx

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-93479 Alta 8.1 2026-10-14

Nginx

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-97205 Alta 8.1 2026-10-14

Nginx

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server Side Includes…

Corregida en Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-97629 Media 6.5 2026-10-14

Nginx

Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL…

Corregida en Debian 13, Debian 14, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-95837 Alta 7.8 2026-10-12

containerd

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from…

Sin parche todavía.

CVE-2026-95838 Sin clasificar 2026-10-12

containerd

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whiteout…

Sin parche todavía.

CVE-2026-107814 Alta 8.4 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service…

Sin parche todavía.

CVE-2026-107815 Alta 8.5 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary…

Corregida en Debian 14.

CVE-2026-107816 Media 6.4 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing…

Corregida en Debian 14.

CVE-2026-107817 Media 4.4 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables…

Corregida en Debian 14.

CVE-2026-107818 Alta 8.4 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster…

Corregida en Debian 14.

CVE-2026-107819 Media 5.9 2026-10-09

MariaDB

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL…

Sin parche todavía.

CVE-2026-107821 Alta 8 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and…

Corregida en Debian 14.

CVE-2026-107822 Media 6.4 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege…

Corregida en Debian 14.

CVE-2026-107823 Alta 7.2 2026-10-09

MariaDB

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded…

Corregida en Debian 14.

CVE-2026-78659 Alta 7.5 2026-10-08

containerd

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each…

Corregida en Ubuntu 22.04 y Ubuntu 24.04.

CVE-2026-78660 Alta 7.5 2026-10-08

containerd

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our…

Corregida en Ubuntu 22.04 y Ubuntu 24.04.

CVE-2026-78663 Crítica 9.1 2026-10-08

containerd

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a…

Corregida en Ubuntu 22.04 y Ubuntu 24.04.

CVE-2026-78669 Alta 7.5 2026-10-08

containerd

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing…

Corregida en Ubuntu 22.04 y Ubuntu 24.04.

CVE-2026-97032 Alta 7.5 2026-10-08

containerd

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without…

Sin parche todavía.

CVE-2023-53629 Sin clasificar 2026-10-07

Kernel Linux

Kernel Live Patch Security Notice

Corregida en Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-106583 Alta 7.8 2026-10-07

OpenSSH

In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-92542 Sin clasificar 2026-10-07

Docker

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent…

Sin parche todavía.

CVE-2026-92543 Sin clasificar 2026-10-07

Docker

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all…

Sin parche todavía.

CVE-2026-106552 Media 6.5 2026-10-06

OpenSSH

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106553 Alta 7.5 2026-10-06

OpenSSH

In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106555 Alta 7.5 2026-10-06

OpenSSH

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106582 Baja 3.7 2026-10-06

OpenSSH

In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106584 Baja 3.3 2026-10-06

OpenSSH

In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain…

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106585 Media 6.5 2026-10-06

OpenSSH

In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106586 Media 4.3 2026-10-06

OpenSSH

In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-106587 Baja 3.6 2026-10-06

OpenSSH

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-93315 Sin clasificar 2026-10-05

Docker

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the…

Sin parche todavía.

CVE-2026-93316 Sin clasificar 2026-10-05

Docker

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.

Sin parche todavía.

CVE-2026-93317 Sin clasificar 2026-10-05

Docker

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that…

Sin parche todavía.

CVE-2026-93318 Sin clasificar 2026-10-05

Docker

A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot…

Sin parche todavía.

CVE-2026-93319 Sin clasificar 2026-10-05

Docker

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

Sin parche todavía.

CVE-2026-93320 Sin clasificar 2026-10-05

Docker

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device…

Sin parche todavía.

CVE-2026-93321 Sin clasificar 2026-10-05

Docker

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

Sin parche todavía.

CVE-2026-93322 Sin clasificar 2026-10-05

Docker

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

Sin parche todavía.

CVE-2026-93323 Sin clasificar 2026-10-05

Docker

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate…

Sin parche todavía.

CVE-2026-93326 Sin clasificar 2026-10-05

Docker

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote…

Sin parche todavía.

CVE-2026-42356 Baja 3.7 2026-10-01

Apache HTTP Server

Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a…

Corregida en Debian 13 y Debian 14.

CVE-2026-42528 Media 4.3 2026-10-01

Apache HTTP Server

A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recommended to upgrade to…

Corregida en Debian 13 y Debian 14.

CVE-2026-46729 Alta 7.5 2026-10-01

Apache HTTP Server

NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Corregida en Debian 13 y Debian 14.

CVE-2026-47360 Alta 7.5 2026-10-01

Apache HTTP Server

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove changes across internal redirects, the…

Corregida en Debian 13 y Debian 14.

CVE-2026-48005 Alta 7.5 2026-10-01

Apache HTTP Server

Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a denial of service…

Corregida en Debian 13 y Debian 14.

CVE-2026-56153 Alta 7.5 2026-10-01

Apache HTTP Server

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Corregida en Debian 13 y Debian 14.

CVE-2026-56154 Crítica 9.8 2026-10-01

Apache HTTP Server

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-56449 Alta 7.5 2026-10-01

Apache HTTP Server

Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68.

Corregida en Debian 13 y Debian 14.

CVE-2026-57941 Crítica 9.8 2026-10-01

Apache HTTP Server

Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Corregida en Debian 13, Debian 14, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-58415 Media 5.3 2026-10-01

Apache HTTP Server

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read WebDAV dead properties…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-59797 Crítica 9.8 2026-10-01

Apache HTTP Server

Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-63045 Alta 7.5 2026-10-01

Apache HTTP Server

Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-63292 Alta 7.5 2026-10-01

Apache HTTP Server

Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-63686 Alta 7.5 2026-10-01

Apache HTTP Server

A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-63718 Alta 7.5 2026-10-01

Apache HTTP Server

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with…

Corregida en Debian 13, Debian 14, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-73636 Alta 8.1 2026-10-01

Apache HTTP Server

Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-73637 Alta 7.3 2026-10-01

Apache HTTP Server

Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-79768 Media 5.3 2026-10-01

Apache HTTP Server

Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-93546 Alta 8.8 2026-10-01

Apache HTTP Server

Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property…

Corregida en Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-35189 Media 5.3 2026-09-29

OpenSSL

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2025-14181 Media 6.5 2026-09-25

PHP

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-17545 Sin clasificar 2026-09-25

PHP

On Windows, PHP's filesystem and stream APIs do not reject reserved device names such as CON, PRN, AUX, NUL, COM1 to COM9, LPT1 to LPT9, CONIN$ and CONOUT$ when they appear as a component of a path…

Sin parche todavía.

CVE-2026-53493 Sin clasificar 2026-09-25

containerd

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before…

Corregida en Debian 14.

CVE-2026-6103 Media 4.3 2026-09-25

PHP

phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-91765 Alta 7.5 2026-09-25

PHP

cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-91766 Media 5.9 2026-09-25

PHP

When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-91767 Media 6.5 2026-09-25

PHP

php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal characters are…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-91768 Media 6.5 2026-09-25

PHP

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-91769 Media 4.3 2026-09-25

PHP

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-92842 Media 5.9 2026-09-25

PHP

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-93682 Media 5.8 2026-09-25

PHP

When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04, Ubuntu 26.04 y Ubuntu 26.10.

CVE-2026-96883 Alta 8.8 2026-09-25

PostgreSQL

pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the…

Sin parche todavía.

CVE-2026-61628 Alta 8.1 2026-09-22

Nginx

nginx ignition is a user interface for the nginx web server. Prior to version 2.41.1, `POST /api/users/onboarding/finish` is registered as anonymous (unauthenticated) and creates a user with full…

Sin parche todavía.

CVE-2026-61629 Alta 7.5 2026-09-22

Nginx

nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in front of every HTTP request and calls…

Sin parche todavía.

CVE-2026-61630 Media 4.2 2026-09-22

Nginx

nginx ignition is a user interface for the nginx web server. In versions 2.33.0 through 2.35.0, any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity…

Sin parche todavía.

CVE-2026-19033 Media 6.5 2026-09-16

BIND

For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an…

Corregida en Debian 13 y Debian 14.

CVE-2026-19662 Media 5.9 2026-09-16

BIND

An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server…

Corregida en Debian 13 y Debian 14.

CVE-2026-19666 Alta 7.5 2026-09-16

BIND

On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue…

Corregida en Debian 13 y Debian 14.

CVE-2026-19667 Alta 7.5 2026-09-16

BIND

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is…

Corregida en Debian 13 y Debian 14.

CVE-2026-19668 Media 5.3 2026-09-16

BIND

A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and…

Corregida en Debian 13 y Debian 14.

CVE-2026-19941 Media 5.9 2026-09-16

BIND

An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level of the zone name to mask the…

Corregida en Debian 13 y Debian 14.

CVE-2026-75029 Media 5.3 2026-09-16

BIND

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended…

Corregida en Debian 13 y Debian 14.

CVE-2026-77119 Media 5.9 2026-09-16

BIND

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9…

Corregida en Debian 13 y Debian 14.

CVE-2026-78301 Media 5.8 2026-09-16

BIND

A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone…

Corregida en Debian 13 y Debian 14.

CVE-2026-80274 Alta 7.5 2026-09-16

BIND

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the…

Corregida en Debian 13 y Debian 14.

CVE-2026-81563 Alta 7.5 2026-09-16

BIND

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly…

Corregida en Debian 13 y Debian 14.

CVE-2026-81736 Alta 7.5 2026-09-16

BIND

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This…

Corregida en Debian 13 y Debian 14.

CVE-2026-79994 Sin clasificar 2026-09-15

Docker

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace…

Sin parche todavía.

CVE-2026-42533 Sin clasificar 2026-09-14

Nginx

A security issue was fixed in nginx.

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-53495 Sin clasificar 2026-09-14

containerd

containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in…

Corregida en Debian 14.

CVE-2026-17543 Sin clasificar 2026-09-10

PHP

php8.1, php8.3, php8.5 vulnerabilities

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-73281 Sin clasificar 2026-09-03

OpenSSH

openssh vulnerabilities

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-84308 Media 6.3 2026-09-02

PHP

(phpseclib is a PHP secure communications library. Prior to 3.0.57 and ...)

Sin parche todavía.

CVE-2026-84361 Sin clasificar 2026-09-02

PHP

(Composer is a dependency Manager for the PHP language. From 1.0 until ...)

Sin parche todavía.

CVE-2026-13204 Sin clasificar 2026-08-31

BIND

bind9 vulnerability

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2025-68263 Sin clasificar 2026-08-27

Kernel Linux

Kernel Live Patch Security Notice

Corregida en Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14456 Sin clasificar 2026-08-25

OpenSSL

openssl vulnerabilities

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2025-8714 Sin clasificar 2026-08-20

PostgreSQL

postgresql-14, postgresql-16, postgresql-18 vulnerabilities

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-10723 Sin clasificar 2026-08-19

BIND

bind9 vulnerabilities

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

USN-8563-3 Sin clasificar 2026-08-19

Nginx

nginx vulnerability

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

USN-8563-4 Sin clasificar 2026-08-19

Nginx

nginx regression

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-17106 Sin clasificar 2026-08-18

Docker

The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The…

Sin parche todavía.

CVE-2026-14662 Alta 8.8 2026-08-13

PostgreSQL

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14663 Media 6.5 2026-08-13

PostgreSQL

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14664 Alta 8.8 2026-08-13

PostgreSQL

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14666 Media 4.2 2026-08-13

PostgreSQL

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14668 Alta 8.1 2026-08-13

PostgreSQL

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14669 Alta 8.8 2026-08-13

PostgreSQL

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14670 Alta 8.8 2026-08-13

PostgreSQL

Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14671 Alta 8.8 2026-08-13

PostgreSQL

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14672 Media 5.3 2026-08-13

PostgreSQL

Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count. This requires the probed…

Corregida en Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14673 Baja 3.8 2026-08-13

PostgreSQL

Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14676 Alta 8.8 2026-08-13

PostgreSQL

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array…

Sin parche todavía.

CVE-2026-14677 Alta 8.8 2026-08-13

PostgreSQL

Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14678 Media 4.3 2026-08-13

PostgreSQL

Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14679 Alta 8.2 2026-08-13

PostgreSQL

Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14680 Alta 8.8 2026-08-13

PostgreSQL

Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-14681 Media 4.2 2026-08-13

PostgreSQL

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that…

Sin parche todavía.

CVE-2026-15741 Alta 8.8 2026-08-13

PostgreSQL

SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-15742 Alta 8.8 2026-08-13

PostgreSQL

Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-16238 Alta 8.8 2026-08-13

PostgreSQL

Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange…

Sin parche todavía.

CVE-2026-16239 Alta 8.8 2026-08-13

PostgreSQL

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-16241 Baja 3.8 2026-08-13

PostgreSQL

Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-18024 Media 4.3 2026-08-13

PostgreSQL

Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-18408 Alta 8.8 2026-08-13

PostgreSQL

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-19385 Alta 8.8 2026-08-13

PostgreSQL

Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-6464 Alta 8.1 2026-08-13

PostgreSQL

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-6469 Baja 3.8 2026-08-13

PostgreSQL

Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user. This wrongly allows the table owner to run DROP…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-6470 Media 4.3 2026-08-13

PostgreSQL

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-6471 Alta 7.2 2026-08-13

PostgreSQL

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-73282 Media 4.8 2026-08-11

OpenSSH

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-73283 Baja 2.5 2026-08-11

OpenSSH

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

USN-8626-1 Sin clasificar 2026-08-10

systemd

vulnerabilidades de systemd

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-54876 Alta 7.5 2026-08-05

OpenSSL

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact…

Sin parche todavía.

CVE-2026-17544 Sin clasificar 2026-07-30

PHP

Entradas proporcionadas por el atacante a bccomp() podrían provocar una escritura fuera de límites con corrupción de stack y heap en versiones de PHP desde 8.4.* antes de 8.4.24 y desde 8.5.* antes…

Sin parche todavía.

CVE-2026-7260 Media 5.5 2026-07-30

PHP

Los enlaces simbólicos circulares en archivos phar podrían provocar una recursión sin límite, agotando el stack de C y provocando el bloqueo del proceso PHP, en versiones de PHP desde 8.2.* antes de…

Corregida en Debian 11, Debian 12, Debian 13 y Debian 14.

USN-8625-1 Sin clasificar 2026-07-30

OpenSSL

vulnerabilidad de openssl

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2024-14040 Sin clasificar 2026-07-26

Kernel Linux

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: nexthop: Aumentar el peso a u16 En redes CLOS, a medida que se producen fallos de enlace en varios puntos de la red, los pesos…

Sin parche todavía.

CVE-2026-10822 Media 6.5 2026-07-22

BIND

Si BIND encuentra una estructura de datos inválida particular en un registro DNS, aceptará los datos inválidos, y posteriormente puede abortar y cerrarse. BIND primero necesitará almacenar un…

Corregida en Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-11331 Alta 7.5 2026-07-22

BIND

Un atacante que sepa (o adivine) que un resolutor usa RPZ con políticas CNAME comodín puede crear nombres de consulta lo suficientemente largos como para provocar una condición de error NAMETOOLONG…

Corregida en Debian 11, Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-11622 Alta 7.5 2026-07-22

BIND

Un resolutor validador de DNSSEC que esté bajo un ataque de subdominios aleatorios contra una zona firmada con DNSSEC puede sufrir un uso descontrolado de memoria. El atacante necesita ser capaz de…

Corregida en Debian 11, Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-11721 Alta 7.5 2026-07-22

BIND

Es posible que la zona de un atacante responda a una consulta con un RRSIG que tenga un número de etiquetas menor que la zona en la que está contenido el RRSIG. Esto hace que `named` produzca un…

Corregida en Debian 11, Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-12617 Alta 7.5 2026-07-22

BIND

El problema es una terminación inesperada del programa basada en el orden y/o el contenido específico en respuestas a consultas de registros CNAME o DNAME, y A. Específicamente, si un cliente…

Corregida en Debian 11, Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-13321 Alta 8.6 2026-07-22

BIND

El resolutor de BIND acepta registros NSEC firmados válidamente donde el campo "Next Domain Name" apunta fuera de la zona del firmante. Este problema afecta a BIND 9 versiones 9.11.0 a 9.18.50…

Corregida en Debian 11, Debian 12, Debian 13, Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-15791 Sin clasificar 2026-07-21

Docker

Un mensaje manipulado en la API de compilación de bajo nivel de BuildKit puede usarse para eliminar el contenido del directorio /tmp. La acción que normalmente se puede usar para eliminar archivos…

Sin parche todavía.

CVE-2026-15792 Sin clasificar 2026-07-21

Docker

Un cliente o frontend malicioso de BuildKit podría crear una solicitud que podría provocar que el daemon de BuildKit se bloquee con un panic.

Sin parche todavía.

CVE-2026-15793 Sin clasificar 2026-07-21

Docker

Los frontends o clientes personalizados de BuildKit que usan la API de bajo nivel sin procesar pueden establecer git.checkoutbundle=true al hacer checkout de fuentes Git. Si la fuente Git es…

Sin parche todavía.

CVE-2026-46936 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: DDL). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-47012 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Optimizer). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…

Sin parche todavía.

CVE-2026-47023 Media 4.9 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…

Sin parche todavía.

CVE-2026-47052 Media 4.9 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: InnoDB). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster…

Sin parche todavía.

CVE-2026-47064 Media 6.5 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Optimizer). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…

Sin parche todavía.

CVE-2026-60145 Media 4.9 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Optimizer). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…

Sin parche todavía.

CVE-2026-60163 Alta 8.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Group Replication Plugin). Las versiones compatibles afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60177 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Clone Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60178 Media 6.6 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Clone Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60182 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Clone Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60183 Media 6.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Clone Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60184 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60185 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60186 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Group Replication Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60187 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60188 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60189 Media 4.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60190 Baja 2.2 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60191 Media 4.1 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60315 Alta 8.2 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: X Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60316 Alta 7.2 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: X Plugin). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60331 Media 6.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60332 Media 6.4 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Group Replication GCS). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-60585 Media 6.6 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-60747 Media 6.2 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-61081 Baja 2.7 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Performance Schema). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-61094 Alta 7.2 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Replication). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1…

Sin parche todavía.

CVE-2026-61096 Baja 2.9 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: Pluggable Auth). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10…

Sin parche todavía.

CVE-2026-61109 Media 6.5 2026-07-21

MariaDB

Vulnerabilidad en el producto MySQL Server, MySQL Cluster de Oracle MySQL (componente: Server: JSON). Las versiones soportadas que se ven afectadas son MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…

Sin parche todavía.

CVE-2026-12184 Sin clasificar 2026-07-20

PHP

vulnerabilidades de php8.1, php8.3, php8.5

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

USN-8563-1 Sin clasificar 2026-07-20

Nginx

vulnerabilidades de nginx

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

USN-8563-2 Sin clasificar 2026-07-20

Nginx

regresión de nginx

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-56434 Media 6.5 2026-07-15

Nginx

NGINX Plus y NGINX Open Source tienen una vulnerabilidad en el módulo ngx_http_ssi_module. Esta vulnerabilidad puede existir cuando se configuran Server-Side Includes (SSI), proxy_pass y la directiva…

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-60005 Alta 8.2 2026-07-15

Nginx

NGINX Plus y NGINX Open Source tienen una vulnerabilidad en el módulo ngx_http_slice_module. Cuando se configuran la directiva slice y capturas de expresión regular sin nombre, o cuando ocurre una…

Corregida en Debian 14, Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.

CVE-2026-59995 Sin clasificar 2026-07-13

OpenSSH

Vulnerabilidades de openssh

Corregida en Ubuntu 22.04, Ubuntu 24.04 y Ubuntu 26.04.