Unity Linux 20.1070a Security Update: kernel (UTSA-2026-012969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-012969 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011355 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011358 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...

CERTFR-2026-ACT-018

creationtimestamp| type| source ---|---|--- 2026-04-20 12:26:09+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mjwhnnjfjr2y 2026-04-20 13:39:09+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mjwlq7lk6a2i...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007242)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007242 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: use the backlog for mirred ingress The test Davide added in commit...

PowMix botnet targets Czech workforce

Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...

PT-2026-47756

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the act ct component of the Linux kernel. The problem occurs in the tcf ct flow table get function when looking up a flow table. The function...

CVE-2025-50671

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (firmware version 16.07.26A1 ) due to incorrect bounds checking of parameters in the /xwgl_ref.asp endpoint. A remote attacker can exploit this by sending a crafted HTTP GET request containing excessively lon...

CERTFR-2026-ACT-015

creationtimestamp| type| source ---|---|--- 2026-04-07 14:41:37+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mivz5ulz6q2n 2026-04-12 02:57:19+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mjbe4yzibh2t...

OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses

Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only applypatch remove and mkdir operations were still check-then-act, but the draft overstates scope by...

GHSA-RM5C-4RMF-VVHW OpenClaw: Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses

Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only applypatch remove and mkdir operations were still check-then-act, but the draft overstates scope by...

PT-2026-32319

Summary Sandbox file operations use check-then-act, bypassing fd-based TOCTOU defenses Current Maintainer Triage - Status: narrow - Normalized severity: medium - Assessment: Released workspace-only apply patch remove and mkdir operations were still check-then-act, but the draft overstates scope b...

GO-2026-4890 act: actions/cache server allows malicious cache injection in github.com/nektos/act

act: actions/cache server allows malicious cache injection in github.com/nektos/act...

GO-2026-4891 act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act...

CVE-2026-34041

A flaw was found in act, a project that allows local execution of GitHub Actions. This vulnerability arises from the unconditional processing of deprecated workflow commands, specifically ::set-env:: and ::add-path::, which were previously disabled due to environment injection risks. A remote...

CVE-2026-34042

A flaw was found in act. The built-in actions/cache server in act listens on all network interfaces, allowing a remote attacker to create and retrieve caches with arbitrary keys. By predicting cache keys used by local actions, an attacker can inject malicious files into caches. This vulnerability...

Architectural Implications of the UK Cyber Security and Resilience Bill

The UK Cyber Security and Resilience CS&R Bill represents the most significant reform of UK cyber legislation since the Network and Information Systems NIS Regulations 2018. While existing analysis has addressed the Bill's regulatory requirements, there is a critical gap in guidance on the...

PT-2026-29937

act: actions/cache server allows malicious cache injection in github.com/nektos/act...

PT-2026-29938

act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act...

SUSE CVE-2026-34042

act is a project which allows for local running of github actions. Prior to version 0.2.86, act's built in actions/cache server listens to connections on all interfaces and allows anyone who can connect to it including someone anywhere on the internet to create caches with arbitrary keys and...