Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability in MQPUT message option processing (CVE-2026-10572)

Summary IBM MQ Appliance has addressed a heap buffer overflow vulnerability that could allow an authenticated attacker to cause a denial of service or execute arbitrary code by submitting MQPUT operations with malformed message options. Vulnerability Details CVEID:CVE-2026-10572 DESCRIPTION: IBM ...

postgresql18-pgvector security update

An update is available for postgresql18-pgvector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Open-source vector similarity search for Postgres. Supports L2...

postgresql16-pgvector security update

An update is available for postgresql16-pgvector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Open-source vector similarity search for Postgres. Supports L2...

RLSA-2026:88359 Important: postgresql16-pgvector security update

Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the...

RLSA-2026:88360 Important: postgresql18-pgvector security update

Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the...

Vulnerability in Google Brotli-decoder

Google has discovered a vulnerability in the Brotli decompression library. This library is used in Node.js. An unauthorized malicious actor can exploit this vulnerability to process specially crafted Brotli-compressed data remotely. Successful exploitation could lead to a denial-of-service attack...

CVE-2025-30054

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

CVE-2025-30050

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

OPENSUSE-SU-2026:22158-1 Security update for docker

This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265782. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allow...

CVE-2025-30054

The CGM CLININET software is vulnerable to local privilege escalation due to incorrect permission assignments (CWE-732). The service responsible for processing incoming HL7 messages runs with root privileges , but its configuration files and scripts are accessible and modifiable by the uhcapache ...

EUVD-2025-211184

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

CVE-2025-30054 Local Privilege Escalation in CGM CLININET

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

EUVD-2025-211180

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

CVE-2025-30050 Remote Code Execution in CGM CLININET

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

httpd security update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update is available for libreoffice, liblayout, pentaho-libxml, libserializer, libloader, libbase, libfonts, flute, librepository, pentaho-reporting-flow-engine, libformula. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RLSA-2026:88164 Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fixes: libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion CVE-2026-63276...

CVE-2026-94267

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary...

EUVD-2026-108604

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary...

CVE-2026-98763

A flaw was found in the Linux kernel's USB subsystem. This vulnerability allows an attacker with physical access connecting a malicious USB device, or a local user with privileges to emulate USB hardware, to cause a Denial of Service DoS or potentially execute arbitrary code. When disabling a...