Menu
View
Theme
Text size
The paper in your inbox every morning
Straight from the source · Glossary

The Tech Gazette

CVSS

Vol. I No. 26 Saturday, October 17, 2026 Closing 12:53 PM UTC · next edition 10:00 AM UTC

Common Vulnerability Scoring System: a 0 to 10 score of how severe a security flaw is.

Read more at first.org →

In the news

  1. IstioOct 15, 2026News
    ISTIO-SECURITY-2026-007
  2. Incidentoss-security (Openwall)Oct 9, 2026Security Desk
    CVE-2026-103413: Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml
  3. Incidentoss-security (Openwall)Oct 9, 2026Security Desk
    CVE-2026-103412: Apache Camel Karavan: project file name path traversal when committing a project to Git
  4. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-92415: Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
  5. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-92414: Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
  6. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
  7. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-105243: Apache log4net: Oversize EventLogAppender record silently discarded
  8. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter
  9. Incidentoss-security (Openwall)Oct 7, 2026Security Desk
    CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
  10. IncidentCISAOct 1, 2026Security Desk
    CISA Malcolm
  11. Incidentoss-security (Openwall)Oct 1, 2026Security Desk
    CVE-2026-94276: Apache APISIX: Openid-connect introspection validation issue
  12. Incidentoss-security (Openwall)Oct 1, 2026Security Desk
    CVE-2026-94250: Apache APISIX: Batch response aggregation can exhaust worker memory
  13. Incidentoss-security (Openwall)Oct 1, 2026Security Desk
    CVE-2026-94212: Apache APISIX: unauthenticated impersonation issue in saml-auth
  14. Incidentoss-security (Openwall)Oct 1, 2026Security Desk
    CVE-2026-82806: Apache APISIX: cross-request permission pollution via static permission list mutation
  15. Incidentoss-security (Openwall)Oct 1, 2026Security Desk
    CVE-2026-88789: Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening
  16. Incidentoss-security (Openwall)Sep 30, 2026Security Desk
    CVE-2026-102508: Apache PLC4X: OPC UA secure channel: integrity bypass, unverifiable server certificate, and silent downgrade
  17. Incidentoss-security (Openwall)Sep 29, 2026Security Desk
    CVE-2026-94053: Apache MINA SSHD: LDAP injection in sshd-ldap
  18. Incidentoss-security (Openwall)Sep 29, 2026Security Desk
    CVE-2026-94052: Apache MINA SSHD: LDAP password authentication ineffective
  19. Incidentoss-security (Openwall)Sep 29, 2026Security Desk
    CVE-2026-93994: Apache MINA SSHD: Repeated-publickey policy bypass on server
  20. Incidentoss-security (Openwall)Sep 29, 2026Security Desk
    CVE-2026-77185: Apache MINA SSHD: Asynchronous authentication can bypass signature verification