PT-2026-7569

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5...

PT-2026-7808

This module enables you to integrate and manage icons with Drupal. The module doesn't sufficiently sanitize user input leading to a reflected Cross-site Scripting XSS vulnerability. The vulnerability is mitigated by the fact that in order to be vulnerable, the "UI Icons for CKEditor 5" submodule...

CVE-2026-25498 Craft has a potential authenticated Remote Code Execution via malicious attached Behavior

Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution RCE vulnerability exists in Craft CMS where the assembleLayoutFromPost function in src/services/Fields.php fails to sanitize user-supplied configuratio...

CVE-2025-68471 affecting package avahi for versions less than 0.8-5

CVE-2025-68471 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2026-24401 affecting package avahi for versions less than 0.8-5

CVE-2026-24401 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-68468 affecting package avahi for versions less than 0.8-5

CVE-2025-68468 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-68276 affecting package avahi for versions less than 0.8-5

CVE-2025-68276 affecting package avahi for versions less than 0.8-5. A patched version of the package is available...

CVE-2025-61107 affecting package frr for versions less than 8.5.5-5

CVE-2025-61107 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-61106 affecting package frr for versions less than 8.5.5-5

CVE-2025-61106 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-61104 affecting package frr for versions less than 8.5.5-5

CVE-2025-61104 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-61100 affecting package frr for versions less than 8.5.5-5

CVE-2025-61100 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5. A patched version of the package is available...

CVE-2026-24942

Cross-Site Request Forgery CSRF vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Forgery.This issue affects WpEvently: from n/a through = 5.1.1...

CVE-2026-25484 Craft Commerce has Stored XSS in Product Type Name

Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, there is a Stored XSS via Product Type names. The name is not sanitized when displayed in user permissions settings. The vulnerable input source is in Commerce Product Type setting...

CVE-2025-61101 affecting package frr for versions less than 9.1.1-5

CVE-2025-61101 affecting package frr for versions less than 9.1.1-5. A patched version of the package is available...

Drupal Commerce Paybox security vulnerabilities

Drupal Commerce Paybox is a payment plugin for the Drupal community. There are security vulnerabilities in the Drupal Commerce Paybox versions 7-x-1.0 to 7.X-1.5. These vulnerabilities stem from improper encryption signature verification, which may lead to authentication bypasses...

AZL-75836 CVE-2026-24793 affecting package gdal 3.6.3-5

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

AZL-75204 CVE-2026-24401 affecting package avahi for versions less than 0.8-5

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonica...

CVE-2026-24117

CVE-2026-24117 affects Rekor, a software supply chain transparency log. In versions ≤ 1.4.3, the path /api/v1/index/retrieve accepts a user-provided URL to retrieve a public key, enabling Server-Side Request Forgery (SSRF) to internal services. SSRF is limited to GET requests and does not return ...

Azure Linux 3.0 Security Update: krb5 (CVE-2024-26462)

The version of krb5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26462 advisory. - Kerberos 5 aka krb5 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Note th...