CVE-2026-108013

The HCL BigFix Platform is affected by a security vulnerability involving an outdated Mozilla CA certificate bundle (PEM) . Bundles dated before 2026/10/20 still trust certificates with compromised private keys. This allows an on-path attacker to impersonate remote servers and tamper with files d...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Apache Karaf Cellar version 4.4.8 contains an unauthenticated cluster-join vulnerability that allows a network-adjacent attacker to publish a bundle event and execute code on cluster nodes. !/usr/bin/env bash Apache Karaf Cellar 4.4.8 Remote Code Execution Vendor: The Apache Software Foundation...

PT-2026-122513

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

Apache Karaf Cellar 4.4.8 Remote Code Execution

Summary Apache Karaf Cellar is a complete clustering solution for Apache Karaf Container. Cellar can be directly installed on running Karaf Container instances. Description Apache Karaf Cellar suffers from an unauthenticated cluster-join vulnerability leading to remote code execution. The default...

SUSE CVE-2026-113812

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...

Updated perl-Mozilla-CA package fixes a security vulnerability

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. CVE-2026-113812...

CLSA-2026-1792702003 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certificate "Amazon Root CA 3" Certificate "Amaz...

CLSA-2026-1792702049 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "OISTE Server Root RSA G1" Certificate "Amazon Root CA 1" Certificate "Amazon Root CA 2" Certifica...

EUVD-2026-108274

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CLSA-2026-1792680328 Update of ca-certificates

Update ca-certificates database to 20261021: - mozilla\certdata.txt,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.92. - The following certificates were updated: Certificate "Izenpe.com" Certificate "OISTE Server Root RSA G1" Certificate "Amazon Root CA 1" Certificate...

Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year

Contern, Luxembourg, 22nd October 2026, CyberNewswire...

PT-2026-121484

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A vulnerability exists in multicluster-global-hub-operator-bundle due to overly broad role-based access control (RBAC) permissions. This flaw allows for unrestricted, cluster-wide impersonation of arbitrary users, groups, and service accounts. An attacker who successfully compromises the operator...

EUVD-2026-107418

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744 Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ca-certificates: ca-certificates-2026.2.92v9.0.319-1.hum1 noarch ca-certificates-bundle-2026.2.92v9.0.319-1.hum1 noarch ca-certificates-2026.2.92v9.0.319-1.hum1.src src...

PT-2026-120727

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

AZL-109872 CVE-2026-113812 affecting package perl-Mozilla-CA 20240730-2

Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", which provides a trust path for intermediate certificates whose private keys are publicly available. An attacker able...