RockyLinux 8 : .NET 9.0 (RLSA-2026:54550)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54550 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

PT-2026-72160

Name of the Vulnerable Software and Affected Versions AppFlowy affected versions not specified Description The qcuiknote feature allows authenticated users to perform a SQL injection, which is a technique used to insert malicious SQL statements into entry fields for execution. This allows an...

CVE-2026-74247

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: plutono-fips, longhorn-cli, crossplane-provider-aws-route53recoverycontrolconfig, nri-kubernetes, dns-controller-manager-fips, zabbix-agent2, prometheus-postgres-exporter-fips, go-licenses, k6-fips, thanos-operator, cloud-sql-proxy, falcoctl,...

CVE-2026-19188

CVE-2026-19188 affects the Haiwell IoT Cloud HMI Gateway. The vulnerability is an OS command injection in the Net Check feature accessed via the /setting endpoint, where the cmdPing Socket.io event does not properly sanitize user input, allowing an attacker to inject and execute arbitrary OS comm...

CVE-2026-19836

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

EUVD-2026-58682

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

CVE-2026-19834 Webkul Bagisto Admin Customer Impersonation Feature login-as-customer authorization

A vulnerability was determined in Webkul Bagisto up to 2.4.4. Affected is an unknown function of the file /admin/customers/login-as-customer/ of the component Admin Customer Impersonation Feature. This manipulation of the argument ID causes authorization bypass. The attack can be initiated...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Devolutions PowerShell Universal versions 2026.2.3 and earlier are vulnerable to a Code Injection flaw in the settings feature. An authenticated user with settings management permissions can execute arbitrary PowerShell code by providing a crafted setting value that is not properly escaped when w...

EUVD-2026-58661

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

CVE-2026-19768

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

RLSA-2026:54541 Important: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

RLSA-2026:54590 Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, eks-distro-fips, kubernetes, k3s, eks-distro, neuvector, cadvisor, grype, cluster-autoscaler-fips, ctop, podman, gosu, grafana-alloy-fips, runc, syft, cluster-autoscaler, docker, opentelemetry-collector-contrib-fips, neuvector-scanner,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: falco-no-driver, nvidia-container-toolkit, node-feature-discovery, buildah, cadvisor, sriov-network-device-plugin, k8s-device-plugin, podman...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: falco-no-driver, nvidia-container-toolkit, node-feature-discovery, buildah, grafana-alloy, k3s, sriov-network-device-plugin, kubernetes, podman...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling and a denial of service. This affects IBM WebSphere Application Server Liberty with the servlet-3.0, servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, servlet-6.1,...

RockyLinux 10 : .NET 9.0 (RLSA-2026:54590)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54590 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...