Nyhetsnavet - säkerhetsflöden

IT-säkerhet och cybersäkerhet i realtid — CVE-varningar, sårbarhetsrapporter, incidenter och hotinformation från NVD, CISA, BleepingComputer och fler SOC-källor.

Senaste 1h Senaste 6h Senaste 24h Senaste 7d Senaste 30d Endast lokalt Analys/ledare Endast följda källor

Sökning: 000 / 120 / 700 Tid: Senaste 1h Rensa filter

1 källa använder cache

Toppnyheter Säkerhet

GitHub Security Advisories 26 min

GitHub Security Advisories

CVE-2026-102414: pbkdf2 rehashes long passwords on every iteration, enabling denial of service

### Summary This is the same bug as Django had (CVE-2013-1443). ### Details A long password can cause a DoS because it is not using cached HMAC, length limits, or pre-hashing passwords longer than the block size of...

2026-10-06 15:40 26 min

GitHub Security Advisories

CVE-2026-105747: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

2026-10-06 15:41 · 25 min

GitHub Security Advisories

CVE-2026-10561: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

2026-10-06 15:38 · 28 min

Poster

140

Källor

Senast uppdaterad

2026-10-06 15:59

NVD (National Vulnerability Database)10

SecurityWeek Vulnerabilities10

CERT-SE10

CISA KEV-katalog10

CISA Alerts10

Microsoft MSRC10

CVE-toppar

CVE-2023-466045

CVE-2026-648925

CVE-2026-648935

CVE-2026-1024893

CVE-2026-1024903

Senaste CVE

CVE-2026-96889

GitHub Security Advisories · 2026-10-06 15:43

GHSA-wq5f-xc86-pv6w: sharp : Vulnerability in librsvg dependency CVE-2026-96889

CVE-2026-105747

GitHub Security Advisories · 2026-10-06 15:41

CVE-2026-105747: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

CVE-2026-102422

GitHub Security Advisories · 2026-10-06 15:40

CVE-2026-102422: shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

CVE-2026-102414

GitHub Security Advisories · 2026-10-06 15:40

CVE-2026-102414: pbkdf2 rehashes long passwords on every iteration, enabling denial of service

CVE-2026-10561

GitHub Security Advisories · 2026-10-06 15:38

CVE-2026-10561: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

Fel per källa

Fortinet PSIRTFortinet PSIRT:

Säkerhet 3 artiklar

GitHub Security Advisories

CVE-2026-105747: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

### Summary When docling detects the input format of a gzip-compressed tar archive (METS-GBS), and later when the METS-GBS backend opens it, it calls `tarfile.TarFile.getmembers()`. That builds the full member list in...

2026-10-06 15:41 25 min

GitHub Security Advisories

CVE-2026-102414: pbkdf2 rehashes long passwords on every iteration, enabling denial of service

2026-10-06 15:40 26 min

GitHub Security Advisories

CVE-2026-10561: Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

### Summary Langflow's built-in Python interpreter components — `PythonREPLComponent` (Python Interpreter) and the legacy `PythonREPLToolComponent` (Python REPL Tool) — executed arbitrary user- or model-supplied...

2026-10-06 15:38 28 min

GitHub Security Advisories