Avahi has Uncontrolled Recursion in lookup_handle_cname function
Affected-version evidence changed
CVE-2026-24401
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityAvahi has Uncontrolled Recursion in lookup_handle_cname function
Affected-version evidence changed
CVE-2026-24401
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityAvahi: simple protocol server ignores accepts unlimited connections and logs failures without limit2 source records
Affected-version evidence changed
CVE-2025-59529
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Advisory content revised
CVE-2025-59529
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: ISO: fix refcounting of iso_conn
Affected-version evidence changed
CVE-2026-74534
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityCa-certificates: distrust emudhra intermediate ca certificates due to security concerns3 source records
Affected-version evidence changed
CVE-2026-114406
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Affected-version evidence changed
CVE-2026-114406
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Affected-version evidence changed
CVE-2026-114406
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityCamunda Broken Access Control via Cockpit
Affected-version evidence changed
CVE-2026-109433
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityCommand Execution via Admin Console Input in Okta Access Gateway
Newly collected advisory
CVE-2026-115547
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityConda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled template rendering with SYNC_TOKEN
Newly collected advisory
CVE-2026-53942
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)
Newly collected advisory
CVE-2026-114357
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityEndpoint Security Cleartext Storage of FileVault Recovery Key in Log File
Affected-version evidence changed
CVE-2026-96293
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityFirmware verification vulnerability2 source records
Newly collected advisory
CVE-2026-55981
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Newly collected advisory
CVE-2026-63243
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityFortinet
Revised by Microsoft · Fortinet PSIRT advisories
Changed after ChangeIntel first saw it
SecurityGFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx
Affected-version evidence changed
CVE-2026-48530
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityGFI Archiver < 15.14 Stored XSS via MailInsights.aspx2 source records
Affected-version evidence changed
CVE-2026-48539
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Newly collected advisory
CVE-2026-112333
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGithub.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides
Affected-version evidence changed
CVE-2026-108334
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityGoobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS
Newly collected advisory
CVE-2026-55486
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityImproper Sanitization leads to Command Injection in AOS-8 Web Interface
Affected-version evidence changed
CVE-2026-79956
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityInsights-operator: gather serviceaccount has cluster-wide secret read plus nodes/proxy and cluster-reader
Affected-version evidence changed
CVE-2026-93017
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityKeycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
Affected-version evidence changed
CVE-2026-18963
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityLocal Privilege Escalation in CGM CLININET
Newly collected advisory
CVE-2025-30054
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
Affected-version evidence changed
CVE-2026-109219
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMultiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
Affected-version evidence changed
CVE-2026-79889
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityNGINX map directive and regex matching vulnerability
Affected-version evidence changed
CVE-2026-93479
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityNode.js security announcements
Revised by Microsoft · Node.js security announcements
Changed after ChangeIntel first saw it
SecurityOauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
Affected-version evidence changed
CVE-2026-83589
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.