CVE-2026-59680: Product identification pending
- Severity
- 8.6 (HIGH)
- Vendor
- SUSE
- Affected versions
- Through 5.0.8.
- Patch status
- Unknown
- Published
- 2026-09-01T10:17:13.160
- Modified
- 2026-09-01T10:17:13.160
Why it matters
High-severity vulnerability requiring prioritized review.
Recommended admin actions
- Review and patch based on exposure, asset criticality, and business impact.
- Compare installed versions against the affected version range in the advisory.
Technical summary
An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no numeric validation, and passed the resulting string to format_days_after_epoch(). That helper interpolated the value into a shell command executed via Ruby backticks without quoting or escaping. Impact: an administrator who manages users against an external/federated LDAP directory via `yast2 users` triggers root command execution the moment they view or edit that particular user's "Password Settings" tab. No "join domain" or trust setup is required, just browsing/editing one user entry. This issue affects yast2-users through 5.0.8.
View the official NVD record for CVE-2026-59680
CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.
VULNERABILITY PULSE
316 RECORDS
SECURE FEED ACTIVE
| AFFECTED PRODUCT | ACTION | ||
|---|---|---|---|
| CVE-2026-82970 |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent PATCH
Reporter: AUDIT
|
10
CRITICAL
|
VIEW RECORD |
| CVE-2026-81779 |
Newspapers X PATCH
Reporter: AUDIT
|
10
CRITICAL
|
VIEW RECORD |
| CVE-2026-81780 |
Hash Form PATCH
Reporter: AUDIT
|
10
CRITICAL
|
VIEW RECORD |
| CVE-2026-79748 |
mcphub PATCH
Reporter: SECURITY-ADVISORIES
|
9.9
CRITICAL
|
VIEW RECORD |
| CVE-2026-82226 |
Tickera PATCH
Reporter: AUDIT
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-75865 |
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode
Reporter: SECURITY
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-53552 |
goploy
Reporter: SECURITY-ADVISORIES
|
9.6
CRITICAL
|
VIEW RECORD |
| CVE-2026-4813 |
Lutece Core
Reporter: CVE-COORDINATION
|
9.4
CRITICAL
|
VIEW RECORD |
| CVE-2026-82693 |
AC1206
Reporter: CNA
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-82694 |
AC1206
Reporter: CNA
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-82695 |
AC18
Reporter: CNA
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-59111 |
eObčanka-Identifikace PATCH
Reporter: A6D3DC9E-0591-4A13-BCE7-0F5B31FF6158
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-73819 |
Ebyte NA111-M Firmware
Reporter: ICS-CERT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-76133 |
Ebyte NA111-M Firmware
Reporter: ICS-CERT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-81293 |
WP Data Access PATCH
Reporter: AUDIT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-81756 |
Smart Marketing SMS and Newsletters Forms PATCH
Reporter: AUDIT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-81763 |
Throws SPAM Away PATCH
Reporter: AUDIT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-82971 |
Opera11
Reporter: CNA
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-78319 |
modu680-AS
Reporter: INFO
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-66047 |
ProfilePress PATCH
Reporter: DISCLOSURE
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-51679 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-51680 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-51681 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-51720 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-51725 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-51730 |
Product identification pending
Reporter: CVE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-67394 |
Plesk PATCH
Reporter: SUPPORT
|
9
CRITICAL
|
VIEW RECORD |
| CVE-2026-78078 |
Product identification pending
Reporter: SECURITY
|
8.9
HIGH
|
VIEW RECORD |
| CVE-2026-12894 |
Product identification pending
Reporter: SECALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-5956 |
Product identification pending
Reporter: ILETISIM
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-78074 |
Product identification pending
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-82217 |
Product identification pending
Reporter: EMO
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-79744 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-83596 |
Product identification pending
Reporter: SECALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-19806 |
Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-75133 |
Keep Backup Daily PATCH
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-77966 |
Product identification pending
Reporter: ICS-CERT
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-83497 |
OpenSearch
Reporter: FF89BA41-3AA1-4D27-914A-91399E9639E5
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-82882 |
Product identification pending
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-65643 |
cPanel
Reporter: SUPPORT
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-74837 |
ash_typescript PATCH
Reporter: 6B3AD84C-E1A6-4BF7-A703-F496B71E49DB
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-59681 |
yast2-auth-client
Reporter: MEISSNER
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-84165 |
Product identification pending PATCH
Reporter: CVE-COORDINATION
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-82689 |
DNS-320L
Reporter: CNA
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-82692 |
DNS-340L
Reporter: CNA
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-78077 |
Product identification pending
Reporter: SECURITY
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-72001 |
Product identification pending PATCH
Reporter: DISCLOSURE
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-81889 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-82954 |
Dokploy
Reporter: CNA
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-83524 |
Optimizer wXa-203
Reporter: CNA
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-83772 |
SATCOM VSAT7090 Maritime Satellite Router
Reporter: CNA
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-59680 |
Product identification pending
Reporter: MEISSNER
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-82690 |
DNS-327L
Reporter: CNA
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-82691 |
DNS-320L
Reporter: CNA
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-82807 |
Ultra RAMDisk Pro
Reporter: CNA
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-61639 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-61640 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-81287 |
Charitable PATCH
Reporter: AUDIT
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-82908 |
Dragon Center
Reporter: CNA
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-53507 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.3
HIGH
|
VIEW RECORD |
| CVE-2026-54600 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-61638 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-75594 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-77348 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-77856 |
ash_typescript PATCH
Reporter: 6B3AD84C-E1A6-4BF7-A703-F496B71E49DB
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-82730 |
ash_typescript PATCH
Reporter: 6B3AD84C-E1A6-4BF7-A703-F496B71E49DB
|
8.2
HIGH
|
VIEW RECORD |
| CVE-2026-79746 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.1
HIGH
|
VIEW RECORD |
| CVE-2026-61641 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.1
HIGH
|
VIEW RECORD |
| CVE-2026-81891 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.1
HIGH
|
VIEW RECORD |
| CVE-2026-81892 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.1
HIGH
|
VIEW RECORD |
| CVE-2026-82228 |
SiteGround Security PATCH
Reporter: AUDIT
|
8.1
HIGH
|
VIEW RECORD |
| CVE-2026-19702 |
Product identification pending PATCH
Reporter: ILETISIM
|
7.8
HIGH
|
VIEW RECORD |
| CVE-2026-13732 |
Product identification pending
Reporter: SECALERT
|
7.8
HIGH
|
VIEW RECORD |
| CVE-2026-19820 |
Backblaze Client
Reporter: 4AC701FE-44E9-4BCD-9585-DD6449257611
|
7.8
HIGH
|
VIEW RECORD |
| CVE-2026-79750 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.7
HIGH
|
VIEW RECORD |
| CVE-2026-53553 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.7
HIGH
|
VIEW RECORD |
| CVE-2026-79749 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.6
HIGH
|
VIEW RECORD |
| CVE-2026-19616 |
Product identification pending
Reporter: ILETISIM
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-76763 |
Product identification pending
Reporter: SECALERT
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-17615 |
Product identification pending
Reporter: SECALERT
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-54598 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-54599 |
Wallos PATCH
Reporter: SECURITY-ADVISORIES
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-81296 |
Fluent Forms Pro Add On Pack PATCH
Reporter: AUDIT
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-81297 |
Fluent Forms Pro Add On Pack PATCH
Reporter: AUDIT
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-82393 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-82397 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-19952 |
Frontend Admin by DynamiApps
Reporter: SECURITY
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-25706 |
Product identification pending
Reporter: MEISSNER
|
7.5
HIGH
|
VIEW RECORD |
| CVE-2026-82225 |
RegistrationMagic PATCH
Reporter: AUDIT
|
7.4
HIGH
|
VIEW RECORD |
| CVE-2026-78422 |
Product identification pending PATCH
Reporter: MEISSNER
|
7.3
HIGH
|
VIEW RECORD |
| CVE-2026-19573 |
Affiliate Super Assistent
Reporter: SECURITY
|
7.2
HIGH
|
VIEW RECORD |
| CVE-2026-19796 |
Listdom: AI-powered Business Directory with Classifieds Ads Listings
Reporter: SECURITY
|
7.2
HIGH
|
VIEW RECORD |
| CVE-2026-75921 |
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
Reporter: SECURITY
|
7.2
HIGH
|
VIEW RECORD |
| CVE-2026-19914 |
Welcart e-Commerce
Reporter: SECURITY
|
7.2
HIGH
|
VIEW RECORD |
| CVE-2026-75132 |
Product identification pending
Reporter: DISCLOSURE
|
7.1
HIGH
|
VIEW RECORD |
| CVE-2026-77975 |
Product identification pending
Reporter: ICS-CERT
|
7.1
HIGH
|
VIEW RECORD |
| CVE-2026-79745 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.1
HIGH
|
VIEW RECORD |
| CVE-2026-79747 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.1
HIGH
|
VIEW RECORD |
| CVE-2026-71415 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
7.1
HIGH
|
VIEW RECORD |
| CVE-2026-81290 |
Email Subscribers & Newsletters PATCH
Reporter: AUDIT
|
7.1
HIGH
|
VIEW RECORD |
About the Vulnerability Pulse CVE Feed
The Vulnerability Pulse feed tracks live CVE advisories sourced from the National Vulnerability Database and vendor security disclosures. It is designed for SOC analysts, IT administrators, and security teams who need a fast, filterable view of current vulnerabilities without digging through raw NVD data.
How to Use the CVE Advisory Tracker
Use the severity filters to narrow results to Critical or High priority vulnerabilities. Filter by vendor to focus on software and hardware relevant to your environment. Export to CSV for reporting, ticketing, or patch prioritization workflows.
What Is a CVE Advisory?
A CVE (Common Vulnerabilities and Exposures) advisory is a public disclosure of a security vulnerability assigned a unique identifier by MITRE. Advisories include severity scores (CVSS), affected versions, and remediation guidance. Monitoring CVE advisories is a core function of vulnerability management programs and SOC operations.
CVE Analysis & Writeups
For in-depth analysis of specific vulnerabilities, visit the IT Knowledge Bases blog for CVE breakdowns, exploitation analysis, and remediation guidance written for security practitioners.