Information Disclosure
Monthly
Cacti, the open-source network monitoring and graphing solution, contains an unspecified vulnerability addressed in Alpine Linux package version 1.2.31-0. The vulnerability type, affected component, and attacker-accessible impact are not disclosed in the available intelligence. No public exploit has been identified at time of analysis, and CISA KEV listing is absent, leaving severity and exploitation conditions uncharacterized from the data provided.
CVE-2026-41083 is an uncharacterized vulnerability in the OCaml package as distributed by Alpine Linux. The vulnerability description provides no technical details about the flaw class, affected versions, or attacker-accessible impact. Alpine Linux has issued a fix, but the upstream fix version field reads '0', which is likely a data entry placeholder rather than a meaningful version string. No exploitation activity, CVSS scoring, or CWE classification is available at time of analysis.
WEasyPrint on Alpine Linux was patched at package version 69.0-r0, addressing an unspecified vulnerability in the HTML-to-PDF rendering library. The upstream vulnerability details, including attack vector, impact class, and affected upstream version range, are not disclosed in the available intelligence. No exploitation status, CVSS scoring, or CWE classification has been published at this time, making precise impact assessment impossible without consulting the upstream WEasyPrint changelog or a vendor advisory.
Arbitrary file write in Git LFS versions 0.5.2 through 3.7.0 allows a malicious repository to overwrite files outside the working tree when a user runs git lfs checkout or git lfs pull against a repository containing crafted symbolic or hard links that collide with LFS-tracked file paths. The flaw is fixed in v3.7.1 and is also exploitable in bare repositories under specific conditions. No public exploit identified at time of analysis, and EPSS is very low (0.05%), but the CVSS 4.0 score of 8.6 reflects the high integrity impact achievable through routine developer workflows.
netatalk on Alpine Linux received a security fix in package version 4.5.1-r0, addressing an unspecified vulnerability. The nature, impact, and attack surface of the underlying flaw are not disclosed in the available intelligence - no CVE description, CVSS vector, CWE classification, or advisory text has been published. Until vendor or NVD details are released, the scope of exposure cannot be determined beyond the fact that a fix exists for Alpine Linux users.
netatalk, the open-source Apple Filing Protocol (AFP) server for Unix/Linux systems, received a security fix in Alpine Linux package version 4.5.1-r0. The nature of the underlying vulnerability is undisclosed in available data - no CVE description, CVSS vector, CWE classification, or vendor advisory detail has been published. Security teams managing Alpine Linux hosts running netatalk should treat this as an uncharacterized fix of unknown severity requiring upgrade. No public exploit or active exploitation has been identified at time of analysis.
Netatalk, the open-source Apple Filing Protocol (AFP) server, received a security fix in Alpine Linux package version 4.5.1-r0 addressing CVE-2026-62320. The nature of the underlying vulnerability - its attack vector, impact class, and affected component - is not disclosed in available intelligence sources. No public exploit has been identified at time of analysis, and the fix was reported solely by the Alpine Linux vendor without a corresponding upstream advisory or NVD enrichment.
netatalk on Alpine Linux received a security fix in package version 4.5.1-r0, addressing an unspecified vulnerability. The nature of the flaw, affected components, and attacker capabilities cannot be determined from the available data - only the Alpine Linux vendor advisory source and fixed package version are confirmed. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis.
Vulnerability in .NET 9 Runtime on Alpine Linux was patched in Alpine package version 9.0.18-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only that Alpine's vendor advisory triggered a package update. No CVSS score, CWE classification, or exploitation details are available at time of analysis, making risk quantification impossible without consulting upstream Microsoft or Alpine advisories directly.
libgit2 on Alpine Linux received a security fix packaged as version 1.9.6-r0, addressing an unspecified vulnerability. The underlying vulnerability type, affected upstream version range, and attacker-reachable impact are not disclosed in the available intelligence. The sole confirmed data point is that Alpine Linux has issued a corrected package; no CVSS scoring, CWE classification, KEV listing, or exploit evidence is present in the source data.
libgit2, the portable C library implementing Git core methods, received a security fix in Alpine Linux package version 1.9.6-r0. The nature, severity, and impact of the underlying vulnerability are not disclosed in available data - only the patched package version is confirmed by the Alpine Linux vendor advisory. No public exploit, KEV listing, CVSS score, or CWE classification is available at time of analysis.
libgit2, the portable C library implementing Git core methods, has a security fix issued in Alpine Linux package version 1.9.6-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - only the fix version and the reporting vendor (Alpine) are confirmed. No CVSS score, CWE classification, or description of impact has been published, leaving the actual risk profile uncharacterized at time of analysis. No public exploit identified at time of analysis.
XSA-498 affects Xen as packaged in Alpine Linux, with a vendor-confirmed fix tracked under CVE-2026-42491. The underlying vulnerability details are not publicly disclosed in the available intelligence - no description, CVSS vector, CWE, or exploit information has been provided. Alpine Linux has issued a package update, but the nature, impact, and exploitability of the flaw cannot be characterized from the data at hand.
Xen hypervisor on Alpine Linux was patched in package version 4.22.0-r0, addressing a security issue tracked as XSA-496 and CVE-2026-42492. The upstream Xen Security Advisory XSA-496 identifies the root cause, but the provided intelligence data contains no description, CVSS vector, CWE, or exploit details, making authoritative impact assessment impossible from this source alone. Security teams should consult the official XSA-496 advisory at xenbits.xen.org for the authoritative vulnerability description and scope.
Xen Hypervisor on Alpine Linux contains a vulnerability addressed by XSA-495, patched in Alpine package xen-4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attacker impact are not disclosed in the available intelligence - only the Alpine vendor fix is confirmed. Security teams running Xen on Alpine Linux should treat this as a hypervisor-level security issue warranting prompt patching, given that XSA advisories historically cover privilege escalation, information disclosure, or denial-of-service conditions affecting guest-to-host isolation.
Xen Hypervisor, as packaged in Alpine Linux, received a security fix in package version 4.22.0-r0 addressing the issue tracked as XSA-497. The underlying vulnerability details, including attack vector, impact class, and affected Xen upstream versions, are not disclosed in the available intelligence - only Alpine's vendor advisory confirms a fix was shipped. Without the full XSA-497 advisory, the scope of exploitation risk cannot be characterized beyond the patch signal itself.
Xen Hypervisor contains a security vulnerability tracked as XSA-497, addressed in Alpine Linux's xen package version 4.22.0-r0. The specific vulnerability class, affected component, and impact are not disclosed in the available intelligence - only the Alpine Linux vendor advisory confirms a fix exists. Security teams running Xen on Alpine Linux should treat this as a priority patch given the hypervisor attack surface, which can include guest-to-host escapes, privilege escalation, or denial of service depending on the XSA class. No public exploit has been identified at time of analysis.
Xen Hypervisor, as packaged in Alpine Linux, has been patched in version 4.22.0-r0 to address a vulnerability tracked as XSA-497. The specific nature of the flaw - its impact class, affected subsystem, and attacker capability - is not disclosed in the available intelligence. Alpine Linux's vendor advisory confirms the fix but provides no further technical detail, leaving the actual vulnerability behavior uncharacterized at time of analysis.
Xen Hypervisor contains a vulnerability addressed by XSA-497, fixed in Alpine Linux's xen package at version 4.22.0-r0. The specific nature of the flaw - its attack vector, impact class, and exploitation conditions - is not disclosed in available intelligence; the sole confirmed data point is the Alpine Linux vendor fix. No CVSS score, CWE classification, or detailed technical description is available, preventing characterization of attacker capability or affected scope. No public exploit or CISA KEV listing has been identified at time of analysis.
Xen Hypervisor on Alpine Linux received a security fix packaged as xen 4.22.0-r0, addressing the issue tracked as XSA-497. The underlying vulnerability details, impact class, and affected attack surface are not disclosed in the available intelligence - only the vendor fix confirmation from Alpine Linux is present. Without the XSA-497 advisory content, the specific impact to confidentiality, integrity, or availability cannot be characterized from this data alone.
Xen Hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62426), addressed in Alpine's xen package version 4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attack impact are not disclosed in the available intelligence - the sole confirmed data point is the Alpine Linux vendor fix. No exploitation status, CVSS score, or CWE classification is available at time of analysis.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62427), addressed in Alpine Linux's xen package at version 4.22.0-r0. The nature, root cause, and impact of the flaw are not disclosed in the available data - the only confirmed intelligence is the Alpine Linux vendor fix. No CVSS scoring, CWE classification, KEV status, or exploit information is available at time of analysis.
Xen Hypervisor contains a vulnerability addressed by XSA-500, with Alpine Linux releasing a fix in xen package version 4.22.0-r0. The underlying technical details, affected subsystem, and attacker-achievable impact are not disclosed in the available intelligence - only the patch version and reporting vendor are confirmed. Security teams running Xen on Alpine Linux should apply the available update pending fuller disclosure from the Xen Security Team.
Alpine Linux has issued a package update fixing an unspecified Xen vulnerability tracked as XSA-502, resolved in the Alpine package xen-4.22.0-r0. The underlying flaw corresponds to Xen Security Advisory 502, but the specific vulnerability class, impact, and affected component have not been disclosed in the available intelligence. Without CVSS scoring, CWE classification, or an upstream XSA advisory body, the precise attacker capability - whether guest escape, privilege escalation, denial of service, or information disclosure - cannot be determined from the data provided.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-503, addressed in Alpine Linux via the xen 4.22.0-r0 package update. The underlying nature of the flaw - including its attack vector, impact class, and exploitation requirements - is not disclosed in the available intelligence data. Alpine Linux has confirmed the fix through a package update, but no CVSS score, CWE classification, or vulnerability description has been published in the provided data. No public exploit identified at time of analysis.
Xen hypervisor, as packaged in Alpine Linux, was patched in version 4.22.0-r0 addressing the issue tracked as XSA-504 and CVE-2026-62431. The available intelligence is extremely sparse - only the Alpine Linux vendor report confirms a fix was issued; the underlying vulnerability class, attack vector, and impact remain undisclosed in the provided data. No public description, CVSS vector, or CWE has been furnished, making a definitive characterization of exploitability or impact impossible at this time.
XSA-505 is a Xen Project Security Advisory addressed in Alpine Linux by upgrading the xen package to version 4.22.0-r0. The specific vulnerability class, attack vector, and impact are not disclosed in the available data - the sole confirmed fact is that Alpine Linux vendors have issued a fix. Without the Xen Project's upstream advisory text, the nature of the flaw (e.g., guest-to-host escape, DoS, privilege escalation within a guest) cannot be determined. No public exploit code or CISA KEV listing has been identified at time of analysis.
Xen Hypervisor on Alpine Linux was patched in package version 4.22.0-r0 addressing the issue tracked as XSA-506. The underlying vulnerability details, affected Xen versions, and precise impact are not disclosed in the available intelligence - only the Alpine Linux fix package is identified. Security teams running Xen on Alpine Linux should treat this as a security-relevant update pending full XSA-506 advisory disclosure.
PHP 8.3 on Alpine Linux was patched in package version 8.3.32-r0, addressing an unspecified vulnerability tracked as CVE-2026-12184. The underlying vulnerability type, affected functionality, and attacker-achievable impact are not disclosed in the available intelligence - only the fixed Alpine package version is confirmed. No exploitation has been identified, and no CVSS score or CWE classification has been published at the time of this analysis.
Xen Hypervisor on Alpine Linux is affected by an uncharacterized security vulnerability addressed by Xen Security Advisory XSA-507. The fix is delivered via Alpine Linux package xen version 4.22.0-r0. The nature of the vulnerability, affected attack surface, and potential impact cannot be determined from available intelligence - only the package-level fix is confirmed by the Alpine vendor.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-501, which has been remediated in Alpine Linux's xen package at version 4.22.0-r0. The specific nature, impact class, and attack surface of this vulnerability are not disclosed in the available intelligence data - only the patch version and the originating vendor report from Alpine Linux are confirmed. Given the XSA (Xen Security Advisory) designation, this affects Xen's hypervisor stack and may carry implications for guest-to-host or guest-to-guest isolation, though this cannot be confirmed from current data. No active exploitation has been identified at time of analysis.
Xen Hypervisor was patched in Alpine Linux via package version xen 4.22.0-r0 addressing the security issue tracked as XSA-501. The specific vulnerability class, affected component, and attacker capabilities are not disclosed in the available intelligence - only the fix package version is confirmed by the Alpine Linux vendor advisory. Security teams running Xen on Alpine Linux should treat this as a priority upgrade given that Xen Security Advisories (XSAs) historically address hypervisor-level issues with potentially significant guest-escape or privilege-escalation impact.
GStreamer's gst-plugins-good package on Alpine Linux received a security fix in version 1.26.3-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - no description, CVSS vector, CWE classification, or exploit details have been published at time of analysis. The fix is confirmed only by Alpine Linux's vendor advisory, making the actual impact, affected attack surface, and exploitability unknown pending further disclosure.
GStreamer's gst-plugins-good package on Alpine Linux received a security fix in version 1.26.3-r0, addressing an unspecified vulnerability. The nature of the flaw, affected functionality, and attacker impact are not disclosed in the available data - only the vendor patch record from Alpine Linux confirms a security-relevant change. No CVSS score, CWE classification, or exploit intelligence is available to characterize severity or exploitability at this time.
GStreamer gst-plugins-good received a security fix in Alpine Linux package version 1.26.3-r0. The specific vulnerability class, impact, and affected functionality within this multimedia plugin collection are not disclosed in available intelligence sources. Alpine Linux vendor confirmed the fix, but no CVSS scoring, CWE classification, or technical description has been published, making full impact assessment impossible at this time.
CVE-2026-39895 affects Cacti as packaged for Alpine Linux, with a fix available in Alpine package version 1.2.31-0. The underlying vulnerability type, attack vector, and impact are not disclosed in the available data - the sole intelligence source is an Alpine Linux vendor report confirming the fix. No CVSS score, CWE, or detailed description has been published at the time of this analysis, making it impossible to characterize the precise risk without additional vendor or NVD disclosure.
Cacti, the PHP-based network monitoring and graphing solution, has received a security fix in Alpine Linux's packaging at version 1.2.31-0. The nature of the underlying vulnerability - its attack vector, impact, and exploitability - is not disclosed in available intelligence. No CVSS score, CWE classification, or vendor security advisory beyond the Alpine Linux package changelog has been identified at time of analysis, making authoritative risk assessment impossible without further data.
Cacti, the open-source network monitoring and graphing tool, has a vulnerability addressed in Alpine Linux package version 1.2.31-0 (corresponding to Cacti upstream 1.2.31). The nature, impact, and attack surface of this vulnerability are not disclosed in available intelligence - no CVE description, CWE classification, or CVSS scoring has been published at time of analysis. No public exploit has been identified and this CVE is not listed in the CISA KEV catalog.
Cacti, the open-source network monitoring and graphing solution, has been patched in Alpine Linux at package version 1.2.31-0. The nature of the underlying vulnerability is not disclosed in available intelligence - no CVE description, CVSS vector, CWE classification, or vendor advisory beyond the Alpine security tracker entry has been identified at time of analysis. Security teams running Cacti on Alpine Linux should treat this as an uncharacterized but vendor-confirmed fix requiring upgrade. No public exploit or active exploitation has been identified.
Cacti, a widely-deployed network monitoring and graphing tool, has been patched in Alpine Linux's package ecosystem at version 1.2.31-0. The underlying vulnerability details - including attack vector, impact class, and exploitation mechanism - are not disclosed in the available intelligence. No CVSS score, CWE classification, or vendor description has been published at time of analysis, making precise impact characterization impossible. No public exploit or CISA KEV listing is associated with this CVE.
Cacti, the open-source network graphing and monitoring solution, received a security fix in Alpine Linux package version 1.2.31-0. The nature, impact class, and root cause of this vulnerability are not disclosed in the available intelligence data - the sole data point is the Alpine Linux vendor advisory confirming a patched package. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis, making independent risk assessment impossible without additional vendor disclosure.
Cacti, the open-source network monitoring and graphing solution, contains an unspecified vulnerability addressed in Alpine Linux package version 1.2.31-0. The vulnerability type, affected component, and attacker-accessible impact are not disclosed in the available intelligence. No public exploit has been identified at time of analysis, and CISA KEV listing is absent, leaving severity and exploitation conditions uncharacterized from the data provided.
CVE-2026-41083 is an uncharacterized vulnerability in the OCaml package as distributed by Alpine Linux. The vulnerability description provides no technical details about the flaw class, affected versions, or attacker-accessible impact. Alpine Linux has issued a fix, but the upstream fix version field reads '0', which is likely a data entry placeholder rather than a meaningful version string. No exploitation activity, CVSS scoring, or CWE classification is available at time of analysis.
WEasyPrint on Alpine Linux was patched at package version 69.0-r0, addressing an unspecified vulnerability in the HTML-to-PDF rendering library. The upstream vulnerability details, including attack vector, impact class, and affected upstream version range, are not disclosed in the available intelligence. No exploitation status, CVSS scoring, or CWE classification has been published at this time, making precise impact assessment impossible without consulting the upstream WEasyPrint changelog or a vendor advisory.
Arbitrary file write in Git LFS versions 0.5.2 through 3.7.0 allows a malicious repository to overwrite files outside the working tree when a user runs git lfs checkout or git lfs pull against a repository containing crafted symbolic or hard links that collide with LFS-tracked file paths. The flaw is fixed in v3.7.1 and is also exploitable in bare repositories under specific conditions. No public exploit identified at time of analysis, and EPSS is very low (0.05%), but the CVSS 4.0 score of 8.6 reflects the high integrity impact achievable through routine developer workflows.
netatalk on Alpine Linux received a security fix in package version 4.5.1-r0, addressing an unspecified vulnerability. The nature, impact, and attack surface of the underlying flaw are not disclosed in the available intelligence - no CVE description, CVSS vector, CWE classification, or advisory text has been published. Until vendor or NVD details are released, the scope of exposure cannot be determined beyond the fact that a fix exists for Alpine Linux users.
netatalk, the open-source Apple Filing Protocol (AFP) server for Unix/Linux systems, received a security fix in Alpine Linux package version 4.5.1-r0. The nature of the underlying vulnerability is undisclosed in available data - no CVE description, CVSS vector, CWE classification, or vendor advisory detail has been published. Security teams managing Alpine Linux hosts running netatalk should treat this as an uncharacterized fix of unknown severity requiring upgrade. No public exploit or active exploitation has been identified at time of analysis.
Netatalk, the open-source Apple Filing Protocol (AFP) server, received a security fix in Alpine Linux package version 4.5.1-r0 addressing CVE-2026-62320. The nature of the underlying vulnerability - its attack vector, impact class, and affected component - is not disclosed in available intelligence sources. No public exploit has been identified at time of analysis, and the fix was reported solely by the Alpine Linux vendor without a corresponding upstream advisory or NVD enrichment.
netatalk on Alpine Linux received a security fix in package version 4.5.1-r0, addressing an unspecified vulnerability. The nature of the flaw, affected components, and attacker capabilities cannot be determined from the available data - only the Alpine Linux vendor advisory source and fixed package version are confirmed. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis.
Vulnerability in .NET 9 Runtime on Alpine Linux was patched in Alpine package version 9.0.18-r0. The specific vulnerability class, impact, and attack surface are not disclosed in the available intelligence - only that Alpine's vendor advisory triggered a package update. No CVSS score, CWE classification, or exploitation details are available at time of analysis, making risk quantification impossible without consulting upstream Microsoft or Alpine advisories directly.
libgit2 on Alpine Linux received a security fix packaged as version 1.9.6-r0, addressing an unspecified vulnerability. The underlying vulnerability type, affected upstream version range, and attacker-reachable impact are not disclosed in the available intelligence. The sole confirmed data point is that Alpine Linux has issued a corrected package; no CVSS scoring, CWE classification, KEV listing, or exploit evidence is present in the source data.
libgit2, the portable C library implementing Git core methods, received a security fix in Alpine Linux package version 1.9.6-r0. The nature, severity, and impact of the underlying vulnerability are not disclosed in available data - only the patched package version is confirmed by the Alpine Linux vendor advisory. No public exploit, KEV listing, CVSS score, or CWE classification is available at time of analysis.
libgit2, the portable C library implementing Git core methods, has a security fix issued in Alpine Linux package version 1.9.6-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - only the fix version and the reporting vendor (Alpine) are confirmed. No CVSS score, CWE classification, or description of impact has been published, leaving the actual risk profile uncharacterized at time of analysis. No public exploit identified at time of analysis.
XSA-498 affects Xen as packaged in Alpine Linux, with a vendor-confirmed fix tracked under CVE-2026-42491. The underlying vulnerability details are not publicly disclosed in the available intelligence - no description, CVSS vector, CWE, or exploit information has been provided. Alpine Linux has issued a package update, but the nature, impact, and exploitability of the flaw cannot be characterized from the data at hand.
Xen hypervisor on Alpine Linux was patched in package version 4.22.0-r0, addressing a security issue tracked as XSA-496 and CVE-2026-42492. The upstream Xen Security Advisory XSA-496 identifies the root cause, but the provided intelligence data contains no description, CVSS vector, CWE, or exploit details, making authoritative impact assessment impossible from this source alone. Security teams should consult the official XSA-496 advisory at xenbits.xen.org for the authoritative vulnerability description and scope.
Xen Hypervisor on Alpine Linux contains a vulnerability addressed by XSA-495, patched in Alpine package xen-4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attacker impact are not disclosed in the available intelligence - only the Alpine vendor fix is confirmed. Security teams running Xen on Alpine Linux should treat this as a hypervisor-level security issue warranting prompt patching, given that XSA advisories historically cover privilege escalation, information disclosure, or denial-of-service conditions affecting guest-to-host isolation.
Xen Hypervisor, as packaged in Alpine Linux, received a security fix in package version 4.22.0-r0 addressing the issue tracked as XSA-497. The underlying vulnerability details, including attack vector, impact class, and affected Xen upstream versions, are not disclosed in the available intelligence - only Alpine's vendor advisory confirms a fix was shipped. Without the full XSA-497 advisory, the scope of exploitation risk cannot be characterized beyond the patch signal itself.
Xen Hypervisor contains a security vulnerability tracked as XSA-497, addressed in Alpine Linux's xen package version 4.22.0-r0. The specific vulnerability class, affected component, and impact are not disclosed in the available intelligence - only the Alpine Linux vendor advisory confirms a fix exists. Security teams running Xen on Alpine Linux should treat this as a priority patch given the hypervisor attack surface, which can include guest-to-host escapes, privilege escalation, or denial of service depending on the XSA class. No public exploit has been identified at time of analysis.
Xen Hypervisor, as packaged in Alpine Linux, has been patched in version 4.22.0-r0 to address a vulnerability tracked as XSA-497. The specific nature of the flaw - its impact class, affected subsystem, and attacker capability - is not disclosed in the available intelligence. Alpine Linux's vendor advisory confirms the fix but provides no further technical detail, leaving the actual vulnerability behavior uncharacterized at time of analysis.
Xen Hypervisor contains a vulnerability addressed by XSA-497, fixed in Alpine Linux's xen package at version 4.22.0-r0. The specific nature of the flaw - its attack vector, impact class, and exploitation conditions - is not disclosed in available intelligence; the sole confirmed data point is the Alpine Linux vendor fix. No CVSS score, CWE classification, or detailed technical description is available, preventing characterization of attacker capability or affected scope. No public exploit or CISA KEV listing has been identified at time of analysis.
Xen Hypervisor on Alpine Linux received a security fix packaged as xen 4.22.0-r0, addressing the issue tracked as XSA-497. The underlying vulnerability details, impact class, and affected attack surface are not disclosed in the available intelligence - only the vendor fix confirmation from Alpine Linux is present. Without the XSA-497 advisory content, the specific impact to confidentiality, integrity, or availability cannot be characterized from this data alone.
Xen Hypervisor on Alpine Linux is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62426), addressed in Alpine's xen package version 4.22.0-r0. The specific vulnerability class, affected Xen upstream version range, and attack impact are not disclosed in the available intelligence - the sole confirmed data point is the Alpine Linux vendor fix. No exploitation status, CVSS score, or CWE classification is available at time of analysis.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-499 (CVE-2026-62427), addressed in Alpine Linux's xen package at version 4.22.0-r0. The nature, root cause, and impact of the flaw are not disclosed in the available data - the only confirmed intelligence is the Alpine Linux vendor fix. No CVSS scoring, CWE classification, KEV status, or exploit information is available at time of analysis.
Xen Hypervisor contains a vulnerability addressed by XSA-500, with Alpine Linux releasing a fix in xen package version 4.22.0-r0. The underlying technical details, affected subsystem, and attacker-achievable impact are not disclosed in the available intelligence - only the patch version and reporting vendor are confirmed. Security teams running Xen on Alpine Linux should apply the available update pending fuller disclosure from the Xen Security Team.
Alpine Linux has issued a package update fixing an unspecified Xen vulnerability tracked as XSA-502, resolved in the Alpine package xen-4.22.0-r0. The underlying flaw corresponds to Xen Security Advisory 502, but the specific vulnerability class, impact, and affected component have not been disclosed in the available intelligence. Without CVSS scoring, CWE classification, or an upstream XSA advisory body, the precise attacker capability - whether guest escape, privilege escalation, denial of service, or information disclosure - cannot be determined from the data provided.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-503, addressed in Alpine Linux via the xen 4.22.0-r0 package update. The underlying nature of the flaw - including its attack vector, impact class, and exploitation requirements - is not disclosed in the available intelligence data. Alpine Linux has confirmed the fix through a package update, but no CVSS score, CWE classification, or vulnerability description has been published in the provided data. No public exploit identified at time of analysis.
Xen hypervisor, as packaged in Alpine Linux, was patched in version 4.22.0-r0 addressing the issue tracked as XSA-504 and CVE-2026-62431. The available intelligence is extremely sparse - only the Alpine Linux vendor report confirms a fix was issued; the underlying vulnerability class, attack vector, and impact remain undisclosed in the provided data. No public description, CVSS vector, or CWE has been furnished, making a definitive characterization of exploitability or impact impossible at this time.
XSA-505 is a Xen Project Security Advisory addressed in Alpine Linux by upgrading the xen package to version 4.22.0-r0. The specific vulnerability class, attack vector, and impact are not disclosed in the available data - the sole confirmed fact is that Alpine Linux vendors have issued a fix. Without the Xen Project's upstream advisory text, the nature of the flaw (e.g., guest-to-host escape, DoS, privilege escalation within a guest) cannot be determined. No public exploit code or CISA KEV listing has been identified at time of analysis.
Xen Hypervisor on Alpine Linux was patched in package version 4.22.0-r0 addressing the issue tracked as XSA-506. The underlying vulnerability details, affected Xen versions, and precise impact are not disclosed in the available intelligence - only the Alpine Linux fix package is identified. Security teams running Xen on Alpine Linux should treat this as a security-relevant update pending full XSA-506 advisory disclosure.
PHP 8.3 on Alpine Linux was patched in package version 8.3.32-r0, addressing an unspecified vulnerability tracked as CVE-2026-12184. The underlying vulnerability type, affected functionality, and attacker-achievable impact are not disclosed in the available intelligence - only the fixed Alpine package version is confirmed. No exploitation has been identified, and no CVSS score or CWE classification has been published at the time of this analysis.
Xen Hypervisor on Alpine Linux is affected by an uncharacterized security vulnerability addressed by Xen Security Advisory XSA-507. The fix is delivered via Alpine Linux package xen version 4.22.0-r0. The nature of the vulnerability, affected attack surface, and potential impact cannot be determined from available intelligence - only the package-level fix is confirmed by the Alpine vendor.
Xen Hypervisor is affected by a security vulnerability tracked as XSA-501, which has been remediated in Alpine Linux's xen package at version 4.22.0-r0. The specific nature, impact class, and attack surface of this vulnerability are not disclosed in the available intelligence data - only the patch version and the originating vendor report from Alpine Linux are confirmed. Given the XSA (Xen Security Advisory) designation, this affects Xen's hypervisor stack and may carry implications for guest-to-host or guest-to-guest isolation, though this cannot be confirmed from current data. No active exploitation has been identified at time of analysis.
Xen Hypervisor was patched in Alpine Linux via package version xen 4.22.0-r0 addressing the security issue tracked as XSA-501. The specific vulnerability class, affected component, and attacker capabilities are not disclosed in the available intelligence - only the fix package version is confirmed by the Alpine Linux vendor advisory. Security teams running Xen on Alpine Linux should treat this as a priority upgrade given that Xen Security Advisories (XSAs) historically address hypervisor-level issues with potentially significant guest-escape or privilege-escalation impact.
GStreamer's gst-plugins-good package on Alpine Linux received a security fix in version 1.26.3-r0. The nature of the underlying vulnerability is not disclosed in available intelligence - no description, CVSS vector, CWE classification, or exploit details have been published at time of analysis. The fix is confirmed only by Alpine Linux's vendor advisory, making the actual impact, affected attack surface, and exploitability unknown pending further disclosure.
GStreamer's gst-plugins-good package on Alpine Linux received a security fix in version 1.26.3-r0, addressing an unspecified vulnerability. The nature of the flaw, affected functionality, and attacker impact are not disclosed in the available data - only the vendor patch record from Alpine Linux confirms a security-relevant change. No CVSS score, CWE classification, or exploit intelligence is available to characterize severity or exploitability at this time.
GStreamer gst-plugins-good received a security fix in Alpine Linux package version 1.26.3-r0. The specific vulnerability class, impact, and affected functionality within this multimedia plugin collection are not disclosed in available intelligence sources. Alpine Linux vendor confirmed the fix, but no CVSS scoring, CWE classification, or technical description has been published, making full impact assessment impossible at this time.
CVE-2026-39895 affects Cacti as packaged for Alpine Linux, with a fix available in Alpine package version 1.2.31-0. The underlying vulnerability type, attack vector, and impact are not disclosed in the available data - the sole intelligence source is an Alpine Linux vendor report confirming the fix. No CVSS score, CWE, or detailed description has been published at the time of this analysis, making it impossible to characterize the precise risk without additional vendor or NVD disclosure.
Cacti, the PHP-based network monitoring and graphing solution, has received a security fix in Alpine Linux's packaging at version 1.2.31-0. The nature of the underlying vulnerability - its attack vector, impact, and exploitability - is not disclosed in available intelligence. No CVSS score, CWE classification, or vendor security advisory beyond the Alpine Linux package changelog has been identified at time of analysis, making authoritative risk assessment impossible without further data.
Cacti, the open-source network monitoring and graphing tool, has a vulnerability addressed in Alpine Linux package version 1.2.31-0 (corresponding to Cacti upstream 1.2.31). The nature, impact, and attack surface of this vulnerability are not disclosed in available intelligence - no CVE description, CWE classification, or CVSS scoring has been published at time of analysis. No public exploit has been identified and this CVE is not listed in the CISA KEV catalog.
Cacti, the open-source network monitoring and graphing solution, has been patched in Alpine Linux at package version 1.2.31-0. The nature of the underlying vulnerability is not disclosed in available intelligence - no CVE description, CVSS vector, CWE classification, or vendor advisory beyond the Alpine security tracker entry has been identified at time of analysis. Security teams running Cacti on Alpine Linux should treat this as an uncharacterized but vendor-confirmed fix requiring upgrade. No public exploit or active exploitation has been identified.
Cacti, a widely-deployed network monitoring and graphing tool, has been patched in Alpine Linux's package ecosystem at version 1.2.31-0. The underlying vulnerability details - including attack vector, impact class, and exploitation mechanism - are not disclosed in the available intelligence. No CVSS score, CWE classification, or vendor description has been published at time of analysis, making precise impact characterization impossible. No public exploit or CISA KEV listing is associated with this CVE.
Cacti, the open-source network graphing and monitoring solution, received a security fix in Alpine Linux package version 1.2.31-0. The nature, impact class, and root cause of this vulnerability are not disclosed in the available intelligence data - the sole data point is the Alpine Linux vendor advisory confirming a patched package. No CVSS score, CWE classification, or vulnerability description has been published at time of analysis, making independent risk assessment impossible without additional vendor disclosure.