Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-9033

6.0 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Adjacent (A)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Adjacent (A)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.

References

Omada Gateway Firmware Downloads (EN) patch
Omada Gateway Firmware Downloads (US) patch
https://www.tp-link.com/us/support/faq/5256/ vendor-advisory

Affected products

ER605 v2

<2.4.4 Build 20260630 Rel.14398

DR3150 v1

<1.0.1 Build 20260722 Rel.16854

ER605W v2

<2.0.4 Build 20260723 Rel.43763

ER706W v1

<1.2.11 Build 20260723 Rel.41567

ER7206 v2

<2.3.5 Build 20260625 Rel.43136

ER7406 v1

<1.3.4 Build 20260625 Rel.43136

ER8411 v1

<1.4.1 Build 20260708 Rel.64832

DR3650v v1

<1.2.0 Build 20260630 Rel.83311

ER707-M2 v1

<1.4.4 Build 20260625 Rel.43063

ER7212PC v2

<2.4.3 Build 20260722 Rel.40250

ER706W-4G v1

<1.2.6 Build 20260723 Rel.41321

ER706W-4G v2

<2.1.11 Build 20260723 Rel.41624

ER7412-M2 v1

<1.2.0 Build 20260630 Rel.82947

DR3220v-4G v1

<1.2.0 Build 20260630 Rel.82652

DR3650v-4G v1

<1.2.0 Build 20260630 Rel.83347

ER706WP-4G v1

<1.1.11 Build 20260723 Rel.41624

ER701-5G-Outdoor v1

<1.0.3 Build 20260723 Rel.40931

ER603WP-4G-Outdoor v1

<1.0.2 Build 20260723 Rel.43271

ER703WP-4G-Outdoor v1

<1.1.7 Build 20260723 Rel.41712

Dismissed

(exclusively hosted service)

Permalink CVE-2026-69558

8.6 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): None (N)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): None (N)
Modified Availability (MA): None (N)

created 3 weeks, 3 days ago Activity log

Created & dismissed (exclusively hosted service) suggestion 3 weeks, 3 days ago

Microsoft Partner Center Information Disclosure Vulnerability

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.

References

Microsoft Partner Center Information Disclosure Vulnerability patchvendor-advisory

Affected products

Microsoft Partner Center

==-

Dismissed

(no matching packages found)

Permalink CVE-2026-19697

6.8 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload

The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform Stored Cross-Site Scripting attacks against any user opening it, including administrators.

References

https://wpscan.com/vulnerability/d144679c-10ef-4a69-b0e9-fd9e18a2aafc/ exploittechnical-descriptionvdb-entry

Affected products

GutenKit

<2.5.0

Dismissed

(no matching packages found)

Permalink CVE-2026-73402

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

References

https://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointment… vdb-entry

Affected products

wp-base-booking-of-appointments-services-and-events

=<6.3.2

Dismissed

(no matching packages found)

Permalink CVE-2026-18285

7.8 HIGH

CVSS version (CVSS): 3.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability

Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Aeon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the load_rehab_pile_dataset method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28749.

References

ZDI-26-468 x_research-advisory
vendor-provided URL vendor-advisory

Affected products

aeon

==1.3.0

Dismissed

(exclusively hosted service)

Permalink CVE-2026-68789

9.9 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 3 days ago Activity log

Created & dismissed (exclusively hosted service) suggestion 3 weeks, 3 days ago

Azure SQL Database Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.

References

Azure SQL Database Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Azure SQL Database

==-

Dismissed

(exclusively hosted service)

Permalink CVE-2026-65816

10.0 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Exploit Code Maturity (E): Unproven (U)
Remediation Level (RL): Official Fix (O)
Report Confidence (RC): Confirmed (C)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 3 days ago Activity log

Created & dismissed (exclusively hosted service) suggestion 3 weeks, 3 days ago

Azure Arc Elevation of Privilege Vulnerability

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

References

Azure Arc Elevation of Privilege Vulnerability patchvendor-advisory

Affected products

Azure Web Apps

==-

Dismissed

(no matching packages found)

Permalink CVE-2025-15689

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.

References

https://patchstack.com/database/wordpress/theme/capella/vulnerability/wordpress… vdb-entry

Affected products

Capella

=<2.5.5

Dismissed

(no matching packages found)

Permalink CVE-2026-70653

4.8 MEDIUM

CVSS version (CVSS): 4.0
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

libvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanline_read_old and read q[-1] before any prior pixel exists. A crafted Radiance image loaded through VipsForeignLoadRad can therefore disclose four bytes of adjacent heap data, most likely other image data. This issue is fixed in version 8.18.3.

References

https://github.com/libvips/libvips/security/advisories/GHSA-fh99-55jf-5hj3 x_refsource_CONFIRM
https://github.com/libvips/libvips/pull/5037 x_refsource_MISC
https://github.com/libvips/libvips/commit/dc945573e15d598054e701c65b90a35b16b19304 x_refsource_MISC
https://github.com/libvips/libvips/releases/tag/v8.18.3 x_refsource_MISC

Affected products

libvips

==< 8.18.3

Dismissed

(no matching packages found)

Permalink CVE-2026-66604

7.1 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Changed (C)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 3 weeks, 3 days ago Activity log

Created & dismissed (no matching packages found) suggestion 3 weeks, 3 days ago

WordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.

References

https://patchstack.com/database/wordpress/plugin/geodirectory/vulnerability/wor… vdb-entry

Affected products

geodirectory

=<2.8.173

Dismissed suggestions

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products

References

Affected products