agentprime: nixos-nixpkgsEvery new CVE for nixos-nixpkgs.https://agentprime.io/CVE-2026-61828: nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`https://agentprime.io/advisories/CVE-2026-61828/https://agentprime.io/advisories/CVE-2026-61828/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 14:52:35 GMTCVECVE-2026-25740: Privilege escalation to the `CAP_NET_RAW` capability via the `programs.captive-browser` NixOS modulehttps://agentprime.io/advisories/CVE-2026-25740/https://agentprime.io/advisories/CVE-2026-25740/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 20:17:16 GMTCVECVE-2026-25137: NixOs Odoo database and filestore publicly accessible with default odoo configurationhttps://agentprime.io/advisories/CVE-2026-25137/https://agentprime.io/advisories/CVE-2026-25137/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.10 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 22:47:50 GMTCVEcriticalCVE-2026-23838: Tandoor Recipes module allows SQLite database to be externally accessible with the default settingshttps://agentprime.io/advisories/CVE-2026-23838/https://agentprime.io/advisories/CVE-2026-23838/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 18:14:55 GMTCVECVE-2025-64766: NixOS has hardcoded credentials in Onlyoffice modulehttps://agentprime.io/advisories/CVE-2025-64766/https://agentprime.io/advisories/CVE-2025-64766/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Nov 2025 21:38:10 GMTCVECVE-2025-32438: Local privilege escalation in make-initrd-nghttps://agentprime.io/advisories/CVE-2025-32438/https://agentprime.io/advisories/CVE-2025-32438/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 19:57:04 GMTCVE