Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011306 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject stateinsysfs before deleting in blkmqunregisterhctx In blkmqupdatenrhwqueue...

CVE-2026-31018

In Dolibarr ERP & CRM <= 22.0.4, the Website module’s PHP code detection and editing permission enforcement is not consistently applied to all input parameters. This allows an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website ...

CVE-2026-34839

creationtimestamp| type| source ---|---|--- 2026-04-20 23:51:47+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mjxnxoddzs2s 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I...

CVE-2019-25678

creationtimestamp| type| source ---|---|--- 2026-04-20 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjxlhs2fpu2p...

CVE-2026-4852

creationtimestamp| type| source ---|---|--- 2026-04-20 22:24:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj2wb56l2i...

CVE-2026-33432

creationtimestamp| type| source ---|---|--- 2026-04-20 22:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxipe4ipm2e 2026-04-20 23:18:29+00:00| published-proof-of-concept| Telegram/9Djse05P71eOqOBKGWSEvRis3v2yPmwIHyqqWc98-IGQuI...

CVE-2026-29647

creationtimestamp| type| source ---|---|--- 2026-04-20 22:09:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiacjxcy2e...

CVE-2026-32604

creationtimestamp| type| source ---|---|--- 2026-04-20 21:37:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxghw2lna2z 2026-04-20 22:21:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxiwrumt22i 2026-04-20 22:48:46+00:00| seen|...

CVE-2026-24505

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:58+00:00| seen| Telegram/itZIvBa41gHmxLOZ4e3ooVdAvJm4yIE4KZd9P4HVJMq4o...

RHSA-2025:1885

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:38+00:00| seen| Telegram/4zRGsEPwCWPOVkiJwGYn1RsXuEnREKMT0DdgACfDkyyoA...

RHSA-2025:1884

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:38+00:00| seen| Telegram/4zRGsEPwCWPOVkiJwGYn1RsXuEnREKMT0DdgACfDkyyoA...

CVE-2026-39110

creationtimestamp| type| source ---|---|--- 2026-04-20 20:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb33hgis2l...

CVE-2026-23756

creationtimestamp| type| source ---|---|--- 2026-04-20 19:38:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx7sl7cmh2p...

CVE-2026-41305

creationtimestamp| type| source ---|---|--- 2026-04-20 19:34:55+00:00| published-proof-of-concept| https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93 2026-05-25 10:59:12+00:00| seen| https://gist.github.com/konard/e42a66222e8be69e82eda8e4c8a6c943...

CVE-2026-6573

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.master.php of the component Instant Exam Creation Handler. The manipulation of the argument uploadfile results in server-side request forgery. The attack can be executed remotely...

CVE-2026-40525

OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the apikey configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke...

CVE-2026-40350

Movary is a self hosted web app to track and rate a user's watched movies. Prior to version 0.71.1, an ordinary authenticated user can access the user-management endpoints /settings/users and use them to enumerate all users and create a new administrator account. This happens because the route...

CVE-2026-34941

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:56+00:00| published-proof-of-concept| Telegram/lEx4szWN0qGJp6nrTUnjGPs2FeG4zgfzAhM3YBb6L1MKYlY...

GHSA-436G-FHFC-9G5W

creationtimestamp| type| source ---|---|--- 2026-04-20 19:17:48+00:00| seen| Telegram/KXW7G8PyXXZwX9Od1pYkShAhyWITcXi61d9qyY3YKOVjQs...

CVE-2026-42199

creationtimestamp| type| source ---|---|--- 2026-04-20 18:42:12+00:00| published-proof-of-concept| https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp 2026-05-08 22:47:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlesrz5rvk2i...