Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a buffer error vulnerability. This vulnerability stems from how the afcfileopen function in the src/afc.c file within the AFC File Handler component handles the bytes parameter, potentially leading to an out-of-bounds read...

PT-2026-123364

boneIO Black contains a TOCTOU race condition in the create timedatectl sudoers file function in boneio/webui/routes/timezone sudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the ra...

zip-rs zip path traversal vulnerability

A security vulnerability exists in zip-rs versions from 7.2.0 up to and including 9.0.0. This vulnerability stems from the use of lexical prefix comparison when validating symbolic link targets in ZipArchive::extract and ZipArchive::extractunwrappedrootdir; no intermediate links are parsed...

Gouguoa permission and access control issue vulnerability

Versions 6.1.2 and earlier of gouguoa contain a security vulnerability. This vulnerability arises from the file upload functionality in the chunkUpload function within app/disk/controller/Api.php; it allows unrestricted file uploads and may be exploited remotely...

Apple MacOS: CVE-2026-112456: OS X update for HFS

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption...

Apple MacOS: CVE-2026-112483: OS X update for Directory Utility

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system...

Apple MacOS: CVE-2026-112522: OS X update for libarchive

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination...

RHEL 10 : flatpak (RHSA-2026:89849)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89849 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak:...

Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HT...

Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary write in root context via pat...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from path handling issues and may allow applications to modify protected portions of the file...

Syncplify Server backlink vulnerability

Versions of Syncplify Server prior to 8.8.0 contain a backlink vulnerability stemming from path traversal. Since only request paths are restricted without validation of the target file on disk, attackers can utilize symbolic links placed in users’ home directories or Windows directory links to re...

Fuji Electric V-SFT buffer error vulnerability

Fuji Electric V-SFT versions 6.2.11.0 and earlier contain a buffer error vulnerability. This vulnerability arises from a stack buffer overflow when opening a specially crafted V7 file, potentially leading to information disclosure or arbitrary code execution. Fuji Electric...

Daniel Gatis Rembg path traversal vulnerability

Versions of Daniel Gatis Rembg prior to 2.0.82 contain a path traversal vulnerability. This vulnerability arises because the publicly accessible /api/remove endpoint passes an attacker-controlled extras.sammodel parameter to both the SAM filename and the GitHub download URL without validating its...

Syncplify Server path traversal vulnerability

Versions prior to Syncplify Server 8.8.0 contain a path traversal vulnerability. This vulnerability stems from an access control bypass, allowing authenticated SFTP users to exploit case-insensitive file system path resolution and the 8.3 short filename feature to bypass per-path permissions. As ...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iOS versions prior to 27, Apple iPadOS versions prior to 26.7.2, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, Sequoia versions prior to 15.8.2, and Tahoe versions prior to 26.7.2. This vulnerability stems from a race condition that may allow applications to modify protected portions of the file system...

PT-2026-123282

A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afc file open of the file src/afc.c of the component AFC File Handler. The manipulation of the argument bytes leads to out-of-bounds read. It is possible to initiate the attack remotely. The explo...

PT-2026-123239

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

PT-2026-123308

Name of the Vulnerable Software and Affected Versions Mautic versions 7.0.0 through 7.2.1 Description An unrestricted file upload issue exists in the campaign import feature. When processing a campaign archive, the application copies bundled asset files into a publicly accessible media directory...