WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Profile Builder versions = 3.16.5...

RHSA-2026:36862 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

CVE-2026-58187

CVE-2026-58187 affects the Apache Traffic Server multiplexer plugin. The issue overruns the plugin’s chunk-decode buffer using upstream input, enabling a denial of service. Affected versions are 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Apache recommends upgrading to 9.2.15 or 10.1.4, which c...

CVE-2026-58177

The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...

EUVD-2026-50219

Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

EUVD-2026-50216

The FAB auth manager's Azure AD OAuth login defaulted verifysignature=False when decoding the ID token, so an attacker able to present a forged or unsigned alg:none ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role...

CVE-2026-58154 Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which f...

BELL-CVE-2026-64506 CVE-2026-64506 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64498 CVE-2026-64498 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64427 CVE-2026-64427 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64285 CVE-2026-64285 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64211 CVE-2026-64211 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64238 CVE-2026-64238 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64430

Bulletin has no description...

BELL-CVE-2026-64222

Bulletin has no description...

Permissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-

Overview Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains the following vulnerability: Permissive Regular Expression CWE-625 - CVE-2026-64940 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

CVE-2026-13305: Improper Verification of Cryptographic Signature

Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers...

CVE-2026-20316: Use of Hard-coded Password

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...

PT-2026-65832

Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...

PT-2026-65963

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the parsing of SGI files allows remote attackers to execute arbitrary code on affected installations. The issue occurs due to improper validation of user-supplied data, leading to an...