CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-7262 affecting package php for versions less than 8.3.31-1

CVE-2026-7262 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-43989

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the uploadwasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is...

CVE-2026-44515 Nextcloud News: Authenticated blind SSRF via feed URL

Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL via the web interface or the API. In affected versions, an authenticated attacker could provide a URL pointing to internal/private IP ranges or...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.1-1.hum1 aarch64, x8664 nginx-all-modules-1.30.1-1.hum1 noarch nginx-core-1.30.1-1.hum1 aarch64, x8664 nginx-filesystem-1.30.1-1.hum1 noarch nginx-mod-devel-1.30.1-1.hum1 aarch6...

Amazon Linux 2 : xdg-desktop-portal, --advisory ALAS2-2026-3298 (ALAS-2026-3298)

The version of xdg-desktop-portal installed on the remote host is prior to 1.0.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3298 advisory. Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host...

CVE-2026-21821

The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side...

CVE-2026-21821 HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery

The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side...

EUVD-2026-29904

Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the getTag process. An attacker can modify configuration settings, specifically the tag sort order, and persist these changes to disk by sending a crafted request with a sort argument to the affected endpoint...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the getTag process. An attacker can modify configuration settings, specifically the tag sort order, and persist these changes to disk by sending a crafted request with a sort argument to the affected endpoint...

CVE-2026-39803

Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The chunked clause of 'Elixir.Bandit.HTTP1.Socket':readdata/2 in lib/bandit/http1/socket.ex ignores the caller-supplied :length option when...

CVE-2026-21022

Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-43284 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43284 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43292 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43292 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43300 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43300 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43398 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43398 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43321 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43321 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71299 affecting package kernel for versions less than 6.6.138.1-1

CVE-2025-71299 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43474 affecting package kernel for versions less than 6.6.138.1-1

CVE-2026-43474 affecting package kernel for versions less than 6.6.138.1-1. An upgraded version of the package is available that resolves this issue...