Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.1 MS:CVE-2026-42508

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts_MS:CVE-2026-42508

{“lastseen”:”2026-05-29T09:14:58″,”description”:””,”published”:”2026-05-27T08:18:...

N/A N/A MSCVE
CRITICAL 9.2 MS:CVE-2026-9256

NGINX ngx_http_rewrite_module vulnerability_MS:CVE-2026-9256

{“lastseen”:”2026-05-29T09:14:58″,”description”:””,”published”:”2026-05-27T08:18:...

N/A N/A MSCVE
CRITICAL 9.2 MS:CVE-2026-8711

NGINX JavaScript vulnerability_MS:CVE-2026-8711

{“lastseen”:”2026-05-27T07:17:31″,”description”:””,”published”:”2026-05-23T08:02:...

N/A N/A MSCVE
HIGH 7.8 MS:CVE-2026-41054

Missing exit out of permission check in haveged could lead to root exploit_MS:CVE-2026-41054

{“lastseen”:”2026-05-24T09:15:35″,”description”:””,”published”:”2026-05-23T08:02:...

N/A N/A MSCVE
HIGH 7.5 MS:CVE-2026-3039

BIND 9 server memory exhaustion during GSS-API TKEY negotiation_MS:CVE-2026-3039

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
HIGH 7.5 MS:CVE-2026-5946

Invalid handling of CLASS != IN_MS:CVE-2026-5946

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
CRITICAL 9.8 MS:CVE-2026-3593

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation_MS:CVE-2026-3593

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
MEDIUM 5.3 MS:CVE-2026-5950

Unbounded resend loop in BIND 9 resolver_MS:CVE-2026-5950

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
HIGH 7.5 MS:CVE-2026-5947

SIG(0) validation during query flood may lead to undefined behavior_MS:CVE-2026-5947

{“lastseen”:”2026-05-23T07:16:22″,”description”:””,”published”:”2026-05-23T08:01:...

N/A N/A MSCVE
NONE MS:CVE-2026-47280

Azure Resource Manager Elevation of Privilege Vulnerability_MS:CVE-2026-47280

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

N/A N/A MSCVE