Important: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.4

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.10.4 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.10.4 release that simplify the process of...

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 CVSS score: 7.8, is a privilege escalation issue in the Microsoft Malware Protection Engine "mpengine.dll...

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Meta has announced that its new artificial intelligence AI model Muse Image lets people use public Instagram posts and reels to generate AI content, and it's enabled by default. "You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your...

EUVD-2026-42478

Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-56928

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series versions prior to 23.2R2-S7 Junos OS on MX Series versions 23.4 through 23.4R2-S7 Junos OS on MX Series versions 24.2 through 24.2R2-S3 Junos OS on MX Series versions 24.4 through 24.4R2-S2 Junos OS on MX Series versions...

PT-2026-57008

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.1 Description SiYuan uses the Lute engine to render note and package content into HTML. A flaw in the sanitization process occurs because the dangerous javascript scheme block fails to validate the form action and...

CVE-2026-57022: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When an affected device initiates a TCP...

PT-2026-56986

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions prior to 23.2R2-S7 Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 23.4 prior to 23.4R2-S8 Junos OS on EX2300, EX3400, EX4000, EX4100 and EX4400 versions 24.2 prior ...

PT-2026-56973

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series versions prior to 23.2R2-S6 Junos OS on MX Series versions 23.4 through 23.4R2-S7 Junos OS on MX Series versions 24.2 through 24.2R2-S4 Junos OS on MX Series versions 24.4 through 24.4R2-S4 Junos OS on MX Series versions...

CVE-2026-55170: Improper Handling of Case Sensitivity

OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...

CVE-2026-57030: Concurrent Execution using Shared Resource with Improper Synchronization

A Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. As part of the stateful...

CVE-2026-57031: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters. On MX Series devices with MPC10/11, LC4800/9600, and MX304 with subscribers...

CVE-2026-57027: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on specific EX Series devices allows an unauthenticated adjacent attacker to cause a Denial-of-Service DoS.When sFlow is configured in a Virtual Chassis VC scenario...

CVE-2026-33800: Unchecked Input for Loop Condition

An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS.Micro-BFD session flaps generate respective up/down events which are queued by PFEMAN for...

PT-2026-56981

Name of the Vulnerable Software and Affected Versions Junos OS EX4100 Series versions prior to 23.2R2-S7 Junos OS EX4400 Series versions prior to 23.2R2-S7 Junos OS EX4100 Series versions 23.4 through 23.4R2-S7 Junos OS EX4400 Series versions 23.4 through 23.4R2-S7 Junos OS EX4100 Series versions...

PT-2026-56976

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series with SPC3 versions prior to 23.2R2-S4 Junos OS on SRX5k Series with SPC3 versions prior to 23.2R2-S4 Junos OS on SRX1600 Series versions prior to 23.2R2-S4 Junos OS on SRX2300 Series versions prior to 23.2R2-S4 Junos OS o...

CVE-2026-57032: Improper Handling of Undefined Parameters

An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service DoS. If an attempt is made to subscribe to an unsupported telemetry...

CVE-2026-57020: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. On all QFX10000 platforms in an EVPN-VxLAN scenario, if an...

org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint

All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input validation. The utility intended to secure this evaluation did so incorrectly, and did not fully cover all places in which evaluation was being done. An attacker can send a resource...

CVE-2026-59833: Improper Neutralization of Input During Web Page Generation

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, SiYuan renders note and package content to HTML through the Lute engine with sanitization enabled, but Lute's dangerous javascript scheme block does not check form action or SVG xlink:href attributes, allowing stored...