io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +3 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.12.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

br.com.ideotech:draw-out-spring-boot-aop (>=1.5.19.release, <=1.5.19-4.release), br.com.ideotech:draw-out-spring-boot-lib (>=1.5.19.release, <=1.5.19-4.release) +209 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (4.3.22.release)

org.springframework:spring-webmvc MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - br.com.ideotech:draw-out-spring-boot-aop =1.5.19.release, =1.5.19.release,...

co.paralleluniverse:comsat-spring-boot (0.3.0), co.paralleluniverse:comsat-spring-webmvc (0.3.0) +47 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (4.0.8.release)

org.springframework:spring-webmvc MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - co.paralleluniverse:comsat-spring-boot 0.3.0 - co.paralleluniverse:comsat-spring-webm...

org.springframework.boot:spring-boot-starter-websocket (>=1.1.9.release, <=1.1.10.release) potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.0.8.release)

org.springframework:spring-websocket MAVEN version 4.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket =1.1.9.release,...

gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8), org.springframework.boot:spring-boot-starter-data-rest (1.1.4.release) +5 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.14.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.14.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin...

io.fabric8:process-spring-boot-itests-invoicing (>=1.1.0.cr2, <=1.1.0.cr3), io.fabric8:process-spring-boot-itests-service-invoicing (>=1.1.0.cr2, <=1.1.0.cr5) +3 more potentially affected by CVE-2026-41006 via org.springframework.hateoas:spring-hateoas (0.12.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.12.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - io.fabric8:process-spring-boot-itests-invoicing =1.1.0.cr2,...

com.blitline:blitline-image-client-example (>=0.10.1, <=0.17.1), com.blitline:blitline-image-client-spring (>=0.10.1, <=0.17.1) +5 more potentially affected by CVE-2026-41007 via org.springframework.hateoas:spring-hateoas (0.9.0.release)

org.springframework.hateoas:spring-hateoas MAVEN version 0.9.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.hateoas:spring-hateoas and may be impacted: - com.blitline:blitline-image-client-example =0.10.1, =0.10.1,...

ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.114.0, <=0.120.0), ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0) +2587 more potentially affected by CVE-2026-41715 via io.projectreactor.netty:reactor-netty-http (>=1.2.0, <=1.2.17)

io.projectreactor.netty:reactor-netty-http MAVEN version =1.2.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.24, =1.0.27, =1.0.28, =1.0.0, =1.0.0, =1.1.1, =1.0.0, =1.0.0, =1.7.0 and more Source cves: CVE-2026-41715 Source advisory: MEND:CVE-2026-41715...

SUSE CVE-2026-46284

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters without '=' separator If hugepages, hugepagesz, or defaulthugepagesz are specified on the kernel command line without the '=' separator, early parameter parsing passes NULL to...

PT-2026-48216

Name of the Vulnerable Software and Affected Versions Spyrus WTGCreator version 4.2 Baramundi Management Suite versions prior to 2024R1 WhiteCanyon WipeDrive versions 8.0.0 through 8.1.3 Finland Matriculation Exam Abitti 1 version 1.0.0 NTC IT Rosa versions R9 and R10 PC-Doctor Service Center...

Microsoft Windows security vulnerabilities

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows, which stem from SecureBoot bypasses. These vulnerabilities could allow attackers with administrative privileges or those capable of modifyi...

com.epages:restdocs-api-spec (>=0.20.0, <=0.20.2), com.epages:restdocs-api-spec-mockmvc (>=0.20.0, <=0.20.2) +12 more potentially affected by CVE-2026-40991 via org.springframework.restdocs:spring-restdocs-core (>=4.0.0-m1, <=4.0.0)

org.springframework.restdocs:spring-restdocs-core MAVEN version =4.0.0-m1, =0.20.0, =0.20.0, =0.20.0, =4.0.0-rc1, =4.0.4, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0 Source cves: CVE-2026-40991 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKRESTDOCS-17326434...

PT-2026-48015

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-48570: Protection Mechanism Failure

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Microsoft Windows Secure Boot software supply chain vulnerabilities

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected...

KB5094141: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: June 9, 2026

None None...

Microsoft Windows Secure Boot processing logic vulnerability

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected...

PT-2026-48105

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally, which can affect the system. Recommendations At the moment, there is ...

CVE-2026-48568: Protection Mechanism Failure

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

PT-2026-48112

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard that ensures a device boots using...