AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781256571)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781256571 advisory. - Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also ha...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789462227)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789462227 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module...

Rocky Linux 10.2 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2026_22120)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

CVE-2026-51882

The Langchain-Chatchat version 0.3.0 is vulnerable to a path traversal flaw in its OpenAI-compatible file upload endpoint, /v1/files. An attacker can exploit this by crafting malicious filenames to write files to arbitrary locations outside the designated openai_files directory. This vulnerabilit...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2026_22112)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass du...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2020_0579)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20200579 advisory. nodejs: HTTP request smuggling using malformed Transfer-Encoding header CVE-2019-15605 nodejs: Remotely trigger an assertion on a TLS server with a malform...

Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2026_22121)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622121 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass du...

PT-2026-103987

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail versions 7.2.0 through 7.2.9 Description FortiMail contains a path traversal and improper neutralization of NULL byt...

Rocky Linux 9.6 [TuxCare] Security Update: tar (ALMALINUX9.6:CLSA-2026:1789131413)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789131413 advisory. - A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the...

CVE-2026-51888

The langflow-ai langflow software (up to version 1.8.4 ) is vulnerable to an absolute path traversal vulnerability within the knowledge_bases-create_knowledge_base-a-live-http-post-to-create_knowledge_base component, specifically located at src/backend/base/langflow/api/v1/knowledge_bases.py:51. ...

Rocky Linux 8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource (crlsa-2023_0284)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230284 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the CIQ security...

Fortinet FortiMail Path Traversal Vulnerability

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789462227)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789462227 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended modul...

CentOS Linux 7 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS7:CLSA-2025:1738852614)

The CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1738852614 advisory. - A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destinatio...

Rocky Linux 9 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2026_69961)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669961 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from quadratic...

CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQL 注入 → Root RCE 针对 CVE-2026-67401 的概念验证，这是 cPanel & WHM 的 EmailTrack 功能中的一个严重 SQL 注入漏洞，允许拥有邮件相关权限的已认证用户写入任意文件并以 root 身份执行代码。 发现者： Ali Mustafa 披露日期： 2026 年 9 月 8 日 组件： EmailTrack（邮件投递日志记录 / 跟踪） 受影响版本 低于 修复版本的版本均存在漏洞。 cPanel 构建系列| 修复版本 ---|--- 11.110|...

CVE-2026-34990-CUPS-LPE-PoC

CVE-2026-34990 | CUPS 本地权限提升 PoC 针对 CVE-2026-34990 的通用概念验证，这是一个影响 CUPS 2.4.16 的本地权限提升漏洞。 该漏洞利用演示了本地非特权用户如何滥用 CUPS 本地认证和打印机配置行为，以 root 身份获得任意文件写入权限并提升权限。 漏洞信息 CVE： CVE-2026-34990 组件： CUPS 测试版本： CUPS 2.4.16 类型： 本地权限提升 影响： 以 root 身份任意文件写入 修复版本： CUPS 2.4.17 漏洞致谢 CVE-2026-34990 最初由以下人员报告： Asim Viladi...

CVE-2026-34990-poc

CVE-2026-34990 CUPS 2.4.16 本地权限提升，通过 CUPSCREATELOCALPRINTER 实现任意文件写入。 漏洞 CUPS 允许创建本地打印机，并将 device-uri 设置为 file:// 路径。提交打印任务时使用 document-format: application/vnd.cups-raw 和 compression: gzip，会导致 cupsd 解压任务数据并将其直接写入该路径——以 cupsd 运行的用户身份（通常是 root 或高权限服务账户）。 管理员操作所需的本地认证令牌可以通过将 ipptool 的...

cups-2.4.16-lpe

CUPS 2.4.16 — 本地权限提升 CVE-2026-34990 📋 概述 CUPS 2.4.16 包含一个本地权限提升 漏洞 （同时被追踪为 GHSA-c54j-2vqw-wpwp ）。 漏洞详情 1. 全局可写套接字 — /run/cups/cups.sock 全局可写， 允许任何本地用户向 CUPS 守护进程（以 root 身份运行） 发送 IPP 请求。 2. 本地令牌泄露 — 通过将 device-uri 指向攻击者控制的 IPP 服务器，可以滥用 CUPS-Create-Local-Printer 来 泄露 Local 授权令牌。 3. 任意文件写入 —...

rsync: rsync: Arbitrary file write via path traversal in --relative mode

A path traversal vulnerability in rsync's --relative mode allows a malicious sender to craft symlink paths, enabling arbitrary file writes outside the destination directory...