[SECURITY] [DSA 6423-1] kitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6423-1 [email protected] https://www.debian.org/security/ Nilesh Patra August 09, 2026 https://www.debian.org/security/faq -...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 27, 2026 to August 2, 2026)

Last week, there were 276 vulnerabilities disclosed in 219 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 143 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses micrometer-core-1.15.11.jar, spring-core-6.2.18.jar, spring-security-web-6.5.10.jar, spring-data-commons-3.5.11.jar, spring-webmvc-6.2.18.jar, spring-expression-6.2.18.jar and spring-security-config-6.5.10.jar which are vulnerable to CVE-2026-40983, CVE-2026-40984,...

Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

CVE-2026-53397

creationtimestamp| type| source ---|---|--- 2026-08-06 04:46:21+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

EulerOS 2.0 SP13 : ruby (EulerOS-SA-2026-2997)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4,...

CVE-2026-17834 vulnerabilities

Vulnerabilities for packages: chromium...

Photon OS 5.0: Linux PHSA-2025-5.0-91-0533

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0533. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities CVE-2026-14974, CVE-2026-14515. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)

Summary IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by cross-site scripting and deserialization vulnerabilities CVE-2026-14974, CVE-2026-14515. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

CLSA-2026-1784856216 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.5.8-tuxcare.6...

CLSA-2026-1780879901 TuxCare security update for basic-ftp (2 CVEs)

TuxCare rebuilt basic-ftp to address 2 CVEs. Fixed in 5.0.5-tuxcare.1...

CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)

TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...

CLSA-2026-1778805973 TuxCare security update for picomatch (5 CVEs)

TuxCare rebuilt picomatch to address 5 CVEs. Fixed in 2.3.1-tuxcare.1...

CLSA-2026-1777336758 TuxCare security update for timespan (10 CVEs)

TuxCare rebuilt timespan to address 10 CVEs. Fixed in 2.3.0-tuxcare.1...

CLSA-2026-1776904637 TuxCare security update for netmask (2 CVEs)

TuxCare rebuilt netmask to address 2 CVEs. Fixed in 1.0.6-tuxcare.1...

CLSA-2026-1773360977 TuxCare security update for bootstrap (5 CVEs)

TuxCare rebuilt bootstrap to address 5 CVEs. Fixed in 3.4.1-tuxcare.1...

Important: dotnet10.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-66402

A flaw was found in FreeRDP. This flaw involves multiple weaknesses in how FreeRDP validates TLS Transport Layer Security certificates. FreeRDP's custom validation logic can incorrectly process DNS Subject Alternative Name SAN values, accept Common Names without proper comparison to other SAN...

CVE-2026-67328

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...