SUSE CVE-2026-40304

zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the unaccess handler controller/unaccess.go contains a logical error in its ownership guard: when a frontend record has environmentid = NULL the marker for admin-created global frontends, the conditio...

SUSE CVE-2026-40344

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler PutObjectExtractHandler allows any user who knows a valid access key to write...

Rethinking Scanning for the AI Era: Wiz’s Agentic Code Security System

Enterprise AI AppSec requires more than powerful models. It requires a system that balances speed, depth, and cost across the software lifecycle...

SUSE CVE-2026-54562

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download and passes them to the configured downloader without blocking loopback, localhost, IPv6 localhost, or...

JLSEC-2026-1035 ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a possible heap information disclosure vulnerability because part of the pixels are left unchanged. This issue has been fixed in versio...

JLSEC-2026-966 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

Malwarebytes for Windows, now available on the Microsoft Store

When you’re setting up a new PC or looking for an app you already know, the Microsoft Store is often the easiest place to start. It’s built into Windows and lets you find, install, and update apps in one place. Malwarebytes for Windows is now available there too. Malwarebytes for Windows is still...

EUVD-2026-50501

MCP Ruby SDK: Ruby SSE Session Poisoning...

GHSA-5P9G-J988-PCWV MCP Ruby SDK: Ruby SSE Session Poisoning

Summary Vulnerability: Missing Session Ownership Validation in the Ruby MCP SDK's Streamable and SSE HTTP transport implementation. Any attacker with a stolen session ID can execute tools with the victim's session. This is a silent attack - the victim's session is compromised and being used for...

EUVD-2026-50502

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport...

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A...

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-13584

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module,...

CLEANSTART-2026-RT83480 Security fixes in distribution 3.1.0-r0

Package distribution version 3.1.0-r0 fixes 4 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-39882, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-NU09450 Security fixes in nats-streaming 0.24.6-r2

Package nats-streaming version 0.24.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CQ05037 Security fixes in stakater-reloader 1.1.0-r1

Package stakater-reloader version 1.1.0-r1 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-39836, CVE-2026-33811...

CLEANSTART-2026-QU83405 Security fixes in cert-manager 1.18.6-r0

Package cert-manager version 1.18.6-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-ND31418 Security fixes in percona-xtradb-cluster-operator 1.19.1-r1

Package percona-xtradb-cluster-operator version 1.19.1-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-FT67124 Security fixes in tempo 2.7.2-r0

Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...

CLEANSTART-2026-FT19254 Security fixes in apache-nifi 2.9.0-r0

Package apache-nifi version 2.9.0-r0 fixes 8 vulnerabilities: CVE-2026-2332, CVE-2026-3505, ghsa-355h-qmc2-wpwf, ghsa-cj8j-37rh-8475, CVE-2026-0636...