CVE-2026-18207

A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...

Wednesday, July 29, 2026 Security Releases

Wednesday, July 29, 2026 Security Releases Security releases available Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 8.9.0, 7.29.0, 6.28.0...

kernel security, bug fix, and enhancement update

5.14.0-687.30.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Introducing Veeam Updater for Windows-based Veeam Backup & Replication Deployments

Purpose Starting with Veeam Backup & Replication 13.1, a new Veeam Updater service is included for all new and upgraded Windows-based deployments. This service is automatically installed and provides built-in automated update management. Previously, this feature was only available for Linux-based...

TencentOS Server 4: nodejs-nodemon (TSSA-2026:0762)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0762 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

OPENSUSE-SU-2026:21470-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...

WordPress Facturación Electrónica Costa Rica plugin <= 2.0.2 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by swat in WordPress Plugin Facturación Electrónica Costa Rica versions = 2.0.2...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix

Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 uses gix and gix-submodule crates that are vulnerable to command injection. Vulnerability Details CVEID:CVE-2026-40034 DESCRIPTION: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0...

MGASA-2026-0306 Updated libslirp packages fix a security vulnerability

The updated packages fix a security vulnerability: TCP URG OOB Read Information Leak. CVE-2026-9539...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.7 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.7 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Vulnerabilities found in Apple iOS and iPadOS

Apple has addressed several vulnerabilities in various versions of iOS and iPadOS. Various memory management errors, such as use-after-free, buffer overflows, out-of-bounds reads and writes, integer overflows, race conditions, and insufficient input validation, have been fixed. These errors can...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: erlang27: erlang27-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-asn1-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-commontest-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-compiler-27.3.4.15-0.1.hum1...

TencentOS Server 3: glibc (TSSA-2026:0772)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0772 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security update provided to RockyLinux 9 kernel (RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617)

Brocade SANnav OVA has provided Security updates for RockyLinux 9 kernel RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617 vulnerabilities. Rocky Linux 9 : kernel RLSA-2026:2212 kernel: net: openvswitch: fix nested key length validation in the set action CVE-2025-37789 kernel: Linux kernel:...

Directory Traversal

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal via insufficient sanitization of the existingimage field during category updates. An attacker can delete arbitrary files by exploiti...