CVE-2026-13457: Unrestricted Upload of File with Dangerous Type

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the top-level script function. This is due to the plugin stores its encrypted options file as options-migratekey.txt in...

PT-2026-70304

Name of the Vulnerable Software and Affected Versions IntelR NPU Driver affected versions not specified Description An improper conditions check in the firmware for the device driver may allow an authenticated, unprivileged software adversary to cause a denial of service. This issue can be...

PT-2026-70318

Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

ALSA-2026:53363 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values...

RHEL 8 : resource-agents (RHSA-2026:53364)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53364 advisory. The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several servic...

ALSA-2026:53365 Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values...

Important: fence-agents security update

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fixes: pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values...

Important: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values...

RHEL 8 : fence-agents (RHSA-2026:53363)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53363 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

CVE-2026-72915

Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, any logged-in local user could use the show action in app/controllers/admin/collectionscontroller.rb to access personally identifying information about another local user in...

Exploit for CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIM...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. CVE-2026-12802: CMS AuthEnvelopedData fails to...

SUSE-SU-2026:3549-1 Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issue: - Fixed an issue where formatting list of tuples leads to denial of service bsc1268597...

CLSA-2026-1786355374 TuxCare security update for angular-sanitize (1 CVE)

TuxCare rebuilt angular-sanitize to address 1 CVE. Fixed in 1.5.11-tuxcare.1...

CLSA-2026-1786355016 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 6 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.3-tuxcare.1...

CVE-2026-21073

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

CVE-2026-21070

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

CVE-2026-21058: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

Alibaba Cloud Linux 3 : 0238: libreswan (ALINUX3-SA-2026:0238)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0238 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12413: An invalidly formatted IKE...

PT-2026-69853

Name of the Vulnerable Software and Affected Versions Metacat versions 1.x through 2.19.1 Description Metacat contains an unauthenticated path traversal issue within the original 1.x API. The action=read endpoint fails to validate the archiveEntryName parameter, which is then concatenated into a...