CVE-2026-10540 Weak password hash protection in Control-M/Entreprise Manager

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentiall...

SUSE CVE-2026-55276

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

CVE-2026-50040

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:02+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-02 06:15:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpneymwnge2r...

CVE-2026-55721

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 03:17:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkklcpixp24 2026-07-02 06:25:17+00:00| seen|...

CVE-2026-9651

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:55+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-04...

CVE-2026-56413

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkib7nacd2d 2026-07-01 02:37:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:01:01+00:00| seen|...

[SECURITY] Fedora 43 Update: python-jupytext-1.19.4-1.fc43

Have you always wished Jupyter notebooks were plain text documents? Wished you could edit them in your favorite IDE? And get clear and meaningful diffs when doing version control? Then... Jupytext may well be the tool you're looking for! Jupytext is a plugin for Jupyter that can save Jupyter...

[SECURITY] Fedora 43 Update: vmod-querystring-2.0.3-11.fc43

The purpose of this module is to give you a fine-grained control over a URL's query-string in Varnish Cache. It's possible to remove the query-string, clean it, sort its parameters or filter it to only keep a subset of them. This can greatly improve your hit ratio and efficiency with Varnish,...

[SECURITY] Fedora 44 Update: python-jupytext-1.19.4-1.fc44

Have you always wished Jupyter notebooks were plain text documents? Wished you could edit them in your favorite IDE? And get clear and meaningful diffs when doing version control? Then... Jupytext may well be the tool you're looking for! Jupytext is a plugin for Jupyter that can save Jupyter...

EUVD-2026-40739

Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-40538

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...

EUVD-2026-40537

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: High...

EUVD-2026-40416

yudao-cloud before 2026.06 contains a broken access control vulnerability in the BPM module that allows any authenticated user to access arbitrary process instance records by supplying a caller-controlled process-instance identifier to an unprotected endpoint lacking the @PreAuthorize annotation...

kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...

PT-2026-54800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the slimbus qcom-ngd-ctrl component where callbacks may operate on uninitialized data. This occurs when the remoteproc starts in parallel with the NGD driver being...

ROS-20260701-73-0026

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-54885

Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 0.9.8.1225 Description An unauthenticated remote attacker can execute arbitrary SQL queries due to improper input validation and unsafe SQL query construction. This issue occurs at the 'user' endpoint throug...

ROS-20260701-73-0015

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Alibaba Cloud Linux 3 : 0170: redis:6 (ALINUX3-SA-2026:0170)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0170 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25243: Redis is an in-memory data structur...

PT-2026-54727

Name of the Vulnerable Software and Affected Versions WofficeIO Woffice versions prior to 5.4.33 Description An issue exists where incorrectly configured access control security levels lead to missing authorization, allowing for potential exploitation. Recommendations Update WofficeIO Woffice to...