org.apache.camel.kafkaconnector:camel-azure-storage-datalake-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-azure-storage-datalake-source-kafka-connector (4.18.0) +5 more potentially affected by CVE-2026-60093 via org.apache.camel:camel-azure-storage-datalake (>=4.15.0, <=4.18.3)

org.apache.camel:camel-azure-storage-datalake MAVEN version =4.15.0, =4.18.1, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.18.3 Source cves: CVE-2026-60093 Source advisory: OSV:GHSA-7JWC-Q3FJ-C9PQ...

CVE-2026-71300

creationtimestamp| type| source ---|---|--- 2026-08-24 18:28:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/cr2kets3zyc5l 2026-08-24 21:00:04+00:00| seen| Telegram/8ioC0-GS3hqaK0vZF92ZaP06wwac1xjhQxJkXlFfEhMVG4 2026-08-25 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-9254

creationtimestamp| type| source ---|---|--- 2026-08-24 18:24:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/art4thq7cr3uc 2026-08-25 01:49:19+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtupbsljrs26 2026-08-25 16:45:02+00:00| seen|...

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. Mor...

GHSA-4G7C-P5WG-J4HP

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| seen| https://t.me/bdufstecru/3407 2026-08-25 00:00:22+00:00| seen| https://t.me/bdufstecru/3407...

CVE-2026-76205

creationtimestamp| type| source ---|---|--- 2026-08-24 17:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405 2026-08-25 00:00:22+00:00| published-proof-of-concept| https://t.me/bdufstecru/3405...

CVE-2026-78331

creationtimestamp| type| source ---|---|--- 2026-08-24 16:26:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4hnchb7mbb6ai...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...

CVE-2026-66670

creationtimestamp| type| source ---|---|--- 2026-08-24 12:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3pcp5kdmolbs4...

CVE-2026-14668

creationtimestamp| type| source ---|---|--- 2026-08-24 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mttbdmkr4h23...

CVE-2026-17250

creationtimestamp| type| source ---|---|--- 2026-08-24 11:02:25+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtt5pwjv6u22...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net: mscc: ocelot section, there was an issue where the IFH SRCPORT field in ocelotifhsetbasic was incorrectly set. Packets injected by the CPU should have the SRCPORT field equal to the CPU port module index in the Analyz...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: misc: lis3lv02di2c: Fixed the issue where regulators were disabled twice during suspension/resumption. When lis3lv02di2csuspend is not configured for wakeup, it will call lis3lv02dpoweroff, even if the device has already been...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdccrtcsetcrcsource, the struct drmcrtc was dereferenced before the pointer check by the containerof function. This could cause a kernel panic. Fix this “match warning”:...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ovl: Use the “buf” flexible array as the destination for memcpy. The “buf” flexible array must be used as the destination for memcpy to avoid false positive run-time warnings caused by the recent FORTIFYSOURCE hardening measures:...

CVE-2022-20465115

creationtimestamp| type| source ---|---|--- 2026-08-24 10:00:03+00:00| seen| https://t.me/xhqcankao/3842 2026-08-25 00:00:24+00:00| seen| https://t.me/xhqcankao/3842...

CVE-2026-78201

creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...

CVE-2026-78211

creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...

PT-2026-80895

RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...

PT-2026-79841

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...