Adobe Bridge < 15.1.7 / 16.x < 16.0.6 Multiple Vulnerabilities (APSB26-89)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.7 or 16.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-89 advisory. - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary co...

Adobe Bridge < 15.1.7 / 16.x < 16.0.6 Multiple Vulnerabilities (APSB26-89)

The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.7 or 16.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-89 advisory. - Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code executi...

PT-2026-66872

Name of the Vulnerable Software and Affected Versions gemini-bridge versions 1.0.0 through 1.3.0 Description The consult gemini with files function in inline mode allows an arbitrary local file read. When the mode is set to "inline", the server reads any file path provided in the files argument...

The vulnerability of the br_nd_send() function in the net/bridge/br_arp_nd_proxy.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the brndsend function in the net/bridge/brarpndproxy.c module of the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

SUSE CVE-2026-55434

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with io.ReadAll without a maximum size so an authenticated user with AI Bridge access could se...

SUSE CVE-2026-55435

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...

SUSE CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy aibridgeproxyd created a goproxy server whose default transport set InsecureSkipVerify: true and only assigned a...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30874)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

The vulnerabilities of the functions batadv_bla_claim_dump_entry() and batadv_bla_backbone_dump() in the net/batman-adv/bridge_loop_avoidance.c module of the Linux kernel allow a hacker to trigger a service failure.

The vulnerability of the functions batadvblaclaimdumpentry and batadvblabackbonedump in the net/batman-adv/bridgeloopavoidance.c module of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe Bridge permission licensing and access control vulnerabilities

Adobe Bridge is a digital asset management and file organization tool developed by Adobe, a company based in the United States. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, allowing...

Adobe Bridge authorization issue vulnerability (CNVD-2026-30875)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to authorization; attackers can exploit these vulnerabilities to gain unauthorized read/write permissions...

Adobe Bridge out-of-bounds write vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

Adobe Bridge permissions and access control issues (CNVD-2026-30877)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to permission management and access control. These vulnerabilities stem from issues with unsanable search paths, and attackers can exploit these...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2026-30873)

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a out-of-bounds write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...

Adobe Bridge authorization issue vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has vulnerabilities related to authorization issues, and attackers can exploit these vulnerabilities to execute arbitrary code within the context of the current user...

Adobe Bridge path traversal vulnerability

Adobe Bridge is a digital asset management and file organization tool developed by the American company Adobe. Adobe Bridge has a path traversal vulnerability, which stems from improper path handling. Attackers can exploit this vulnerability to allow arbitrary file system reads...

3xhaustpi (>=0.1.3, <=0.2.1), @0x0.bug/pi-coding-agent (1.0.0) +1081 more potentially affected by CVE-2026-15157 via undici (>=8.0.0, <=8.8.0)

undici NPM version =8.0.0, =0.1.3, =0.1.0, =1.0.0, =0.2.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.1.0, =0.5.1 and more Source cves: CVE-2026-15157 Source...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution. The vulnerability, tracked as CVE-2026-59726 CVSS score: 10.0, impacts all...

CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In

Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk...