CVE-2026-53812: Server-Side Request Forgery (SSRF)

OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-network targets via action-triggered...

SUSE CVE-2026-46319

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: Only release RCU read lock after ctft When looking up a flow table in actct in tcfctflowtableget, rhashtablelookupfast internally opens and closes an RCU read critical section before returning ctft. The...

CVE-2026-46319 net/sched: act_ct: Only release RCU read lock after ct_ft

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: Only release RCU read lock after ctft When looking up a flow table in actct in tcfctflowtableget, rhashtablelookupfast internally opens and closes an RCU read critical section before returning ctft. The...

CVE-2026-46319

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: Only release RCU read lock after ctft When looking up a flow table in actct in tcfctflowtableget, rhashtablelookupfast internally opens and closes an RCU read critical section before returning ctft. The...

RHEL 9 : kernel (RHSA-2026:22940)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:22940 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/sched: Make cakeenqueue...

Introducing the Wallarm AI Control Platform: One closed loop for AI security and API security.

TL;DR - AI deployment has outpaced AI governance. Most enterprises running AI on AWS cannot answer four basic security questions about what's running, what it's doing,how to stop it, and how to prove it's under control. - The Wallarm AI Control Platform closes this gap: one platform for Discover,...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

EUVD-2026-34161

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act

Governments worldwide are increasingly regulating digital platforms to reduce online harms, particularly those affecting children. However, access restrictions can alter user behaviour and introduce new privacy and security risks. The UK Online Safety Act OSA, passed in October 2023, illustrates...

snyk-agentic-appsec-poc

Snyk Agentic AppSec POC Proof of concept demonstrating autono...

CVE-2018-25409

SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksipengurus.php endpoint with module=pengurus and act=update parameters, which...

CVE-2018-25409 SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php

SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksipengurus.php endpoint with module=pengurus and act=update parameters, which...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

CERTFR-2026-ACT-023

creationtimestamp| type| source ---|---|--- 2026-05-26 13:19:22+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mmr3fxtj3v2b 2026-05-26 13:19:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116641075124338987...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: cerbos, melange, kubevela, grafana-alloy, zarf, argo-events, kaniko, dagger, flux-image-automation-controller, pulumi-kubernetes-operator, gitlab-runner, zot, external-secrets-operator, argocd-image-updater, rancher-fleet, pulumi-language-yaml, apko, witness, gomplat...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: cerbos, melange, kubevela, grafana-alloy, zarf, argo-events, kaniko, dagger, flux-image-automation-controller, pulumi-kubernetes-operator, gitlab-runner, zot, external-secrets-operator, argocd-image-updater, rancher-fleet, pulumi-language-yaml, apko, witness, gomplat...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: cerbos, melange, kubevela, grafana-alloy, zarf, argo-events, kaniko, dagger, flux-image-automation-controller, pulumi-kubernetes-operator, gitlab-runner, zot, external-secrets-operator, argocd-image-updater, rancher-fleet, pulumi-language-yaml, apko, witness, gomplat...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: cerbos, melange, kubevela, grafana-alloy, zarf, argo-events, kaniko, dagger, flux-image-automation-controller, pulumi-kubernetes-operator, gitlab-runner, zot, external-secrets-operator, argocd-image-updater, rancher-fleet, pulumi-language-yaml, apko, witness, gomplat...