CVE-2026-72834

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...

CVE-2026-72832

Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...

CVE-2026-72832 Grav before 2.0.13 Stored XSS via quoted-attribute bypass

Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...

RHSA-2026:54590 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:54574 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:54550 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:54542 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:54541 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:54538 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:49914 Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:48197 Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:48170 Red Hat Security Advisory: php security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:47750 Red Hat Security Advisory: php:7.4 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:47749 Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:41136 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:40416 Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Bulletin has no description...

Security Bulletin: IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine uses WebSphere Application Server Liberty which is affected by a denial of service, HTTP Response and Request Smuggling vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.25: golang1.25-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-bin-1.25.13-0.1.hum1 aarch64, x8664 golang1.25-docs-1.25.13-0.1.hum1 noarch golang1.25-misc-1.25.13-0.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.6-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.6-0.1.hum1 noarch golang1.26-misc-1.26.6-0.1.hum1 noarch...

CVE-2026-19763

A vulnerability was determined in DTStack Taier 1.4.0. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster Creation. This manipulation of the argument clusterName causes path traversal. Remote exploitation of the attack is...