GHSA-P5VG-V7MJ-F6Q4 Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

Summary frain-dev/convoy all versions up to and including v26.6.2, no patch available lets any authenticated caller who is authorized on at least one project read ANY OTHER project's "Source" record by ID via GET /api/v1/projects/projectID/sources/sourceID -- regardless of whether that Source...

Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

Summary frain-dev/convoy all versions up to and including v26.6.2, no patch available lets any authenticated caller who is authorized on at least one project read ANY OTHER project's "Source" record by ID via GET /api/v1/projects/projectID/sources/sourceID -- regardless of whether that Source...

Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

Summary A parameter order bug in internal/webhook/tenant/validation/hostnameregex.go causes the hostnameRegexHandler.OnUpdate webhook to validate the old Tenant object's AllowedHostnames.Regex instead of the new one being submitted. This allows an invalid malformed regex to bypass admission...

GHSA-F94Q-W3W8-CJ67 Capsule: hostnameRegexHandler.OnUpdate validates stale (old) Tenant regex, allowing invalid AllowedHostnames regex to bypass webhook validation

Summary A parameter order bug in internal/webhook/tenant/validation/hostnameregex.go causes the hostnameRegexHandler.OnUpdate webhook to validate the old Tenant object's AllowedHostnames.Regex instead of the new one being submitted. This allows an invalid malformed regex to bypass admission...

CVE-2026-5524-PoC

CVE-2026-5524 — Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-13882 DESCRIPTION: IBM Sterling Partner Engagement Manager could allow an unauthenticated user to cause a denial of service in the email service due to improper control...

SUSE CVE-2026-93117

In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the node. Thus, make a copy in usbprobeinterface. Clarify the documentati...

EulerOS Virtualization 2.12.1 : vim (EulerOS-SA-2026-3625)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...

EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-3679)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-3726)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...

PT-2026-95490

Name of the Vulnerable Software and Affected Versions Capsule versions 0.13.0 through 0.13.6 Description A parameter order bug in the hostnameRegexHandler.OnUpdate function within internal/webhook/tenant/validation/hostname regex.go causes the webhook to validate the old Tenant object instead of...

MiracleLinux 9 : postgresql:16 (AXSA:2026-1882:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1882:01 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL:...

Linux Distros Unpatched Vulnerability : CVE-2026-93117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the...

EulerOS Virtualization 2.11.1 : glibc (EulerOS-SA-2026-3417)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failu...

EulerOS Virtualization 2.11.0 : glibc (EulerOS-SA-2026-3504)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failu...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2026-3773)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...

Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion

Path Traversal in MediaUploadTrait::deleteFile Allows Arbitrary File Deletion Summary A path traversal vulnerability in MediaUploadTrait::deleteFile allows an authenticated user with media management permissions to delete arbitrary files on the server. The method validates only the basename porti...

GHSA-JQ29-C7V8-RG55 Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion

Path Traversal in MediaUploadTrait::deleteFile Allows Arbitrary File Deletion Summary A path traversal vulnerability in MediaUploadTrait::deleteFile allows an authenticated user with media management permissions to delete arbitrary files on the server. The method validates only the basename porti...

CVE-2026-93117

In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the node. Thus, make a copy in usbprobeinterface. Clarify the documentati...

DEBIAN-CVE-2026-93117

In the Linux kernel, the following vulnerability has been resolved: usb: fix UAF when probe runs concurrent to dyn ID removal Dynamic IDs are only guaranteed to be valid when usbdynidslock is held, as removeidstore can free the node. Thus, make a copy in usbprobeinterface. Clarify the documentati...