https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T15:11:54.504817+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2023-38408 CVE-2023-38408 2026-10-15T15:11:54.507488+00:00

Affected: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

 https://db.gcve.eu/vuln/usn-6242-1 USN-6242-1 — openssh vulnerability 2026-10-15T15:11:54.507640+00:00

Affected: Ubuntu:20.04:LTS: openssh, Ubuntu:22.04:LTS: openssh

It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote attacker could possibly use this issue to load arbitrary libraries from the user's system and execute arbitrary code.