org.glassfish.main.admingui:console-cluster-plugin (7.0.2), org.glassfish.main.admingui:console-common-full-plugin (7.0.2) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.2)

org.glassfish.main.admingui:console-common MAVEN version 7.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.2 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.4), org.glassfish.main.admingui:console-common-full-plugin (7.0.4) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.4)

org.glassfish.main.admingui:console-common MAVEN version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.4 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.5), org.glassfish.main.admingui:console-common-full-plugin (7.0.5) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.5)

org.glassfish.main.admingui:console-common MAVEN version 7.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.5 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.6), org.glassfish.main.admingui:console-common-full-plugin (7.0.6) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.6)

org.glassfish.main.admingui:console-common MAVEN version 7.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.6 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.7), org.glassfish.main.admingui:console-common-full-plugin (7.0.7) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.7)

org.glassfish.main.admingui:console-common MAVEN version 7.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.7 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.8), org.glassfish.main.admingui:console-common-full-plugin (7.0.8) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.8)

org.glassfish.main.admingui:console-common MAVEN version 7.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.8 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.9), org.glassfish.main.admingui:console-common-full-plugin (7.0.9) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.9)

org.glassfish.main.admingui:console-common MAVEN version 7.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.9 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.10), org.glassfish.main.admingui:console-common-full-plugin (7.0.10) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.10)

org.glassfish.main.admingui:console-common MAVEN version 7.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.10 -...

org.glassfish.main.admingui:console-cluster-plugin (>=8.0.0-m1, <=8.0.1), org.glassfish.main.admingui:console-commandrecorder-plugin (>=8.0.0-m7, <=8.0.1) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (>=8.0.0-m1, <=8.0.1)

org.glassfish.main.admingui:console-common MAVEN version =8.0.0-m1, =8.0.0-m1, =8.0.0-m7, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.1 Source cves: CVE-2026-2586 Source advisory: GHSA-96V6-HQ43-X9H4...

org.glassfish.main.admingui:console-cluster-plugin (7.0.21), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.21) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.21)

org.glassfish.main.admingui:console-common MAVEN version 7.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.21 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.3), org.glassfish.main.admingui:console-common-full-plugin (7.0.3) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.3)

org.glassfish.main.admingui:console-common MAVEN version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.3 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.0-m1), org.glassfish.main.admingui:console-common-full-plugin (7.0.0-m1) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.0-m1)

org.glassfish.main.admingui:console-common MAVEN version 7.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.0-m1 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=8.0.1), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=8.0.1) +16 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (>=3.1.2, <=8.0.1)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =8.0.1 and more Source cves: CVE-2026-2586 Source advisory: MEND:CVE-2026-2586...

BELL-CVE-2026-32177

Bulletin has no description...

Security update for erlang26

This update for erlang26 fixes the following issues Security issues: CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc1259681...

tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet...

CVE-2026-5203

creationtimestamp| type| source ---|---|--- 2026-05-19 03:00:11+00:00| published-proof-of-concept| Telegram/-GtOjHLopjI3IaPVfvZorB58d5FmtAfesT4Onu4QlAoHy4...

zparty

Zparty Automated web penetration testing framework with loc...

Critical: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 For more details about the security issues, including the impact, a CVSS...

MAL-2026-4099 Malicious code in @antv/x6-common (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...