CVE-2026-117471 User-controlled Duo host permits authenticated SSRF in Psono Server

Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout. An authenticated remote attacker could cause the server to connect to selected hosts over HTTPS on po...

CVE-2026-117471

Psono Server CE and EE versions 0.1.0 through 7.2.3 are vulnerable to Server-Side Request Forgery (SSRF) . The application accepts a user-controlled host during personal Duo device configuration and passes it to the Duo client without an allowlist or explicit timeout. This allows an authenticated...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-84292)

Summary A vulnerability in the fast-uri parsing library CVE-2026-84292 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.1.5. Vulnerability Details CVEID:CVE-2026-84292 DESCRIPTION: fast-uri serializes the port component of a URI without...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in AnyIO (CVE-2026-63349, CVE-2026-63374)

Summary Multiple vulnerabilities in the AnyIO asynchronous concurrency library CVE-2026-63349, CVE-2026-63374 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 4.14.2. Vulnerability Details CVEID:CVE-2026-63349 DESCRIPTION: AnyIO is a high level...

Exploit for CVE-2026-93328

The layer CVE-2026-93328 was missing CVE-2026-93328 / GHSA-...

TIBCO JasperReports Library - Directory Traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

CLEANSTART-2026-ZH62940 @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon

Security vulnerability affects the azure-functions-host package. @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon...

CLEANSTART-2026-YW87964 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP

Security vulnerability affects the azure-functions-host package. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP...

CLEANSTART-2026-EF82653 Deadlock in ASP

Security vulnerability affects the azure-functions-host package. Deadlock in ASP...

CLEANSTART-2026-IO26222 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP

Security vulnerability affects the azure-functions-host package. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP...

CLEANSTART-2026-UL53365 Concurrent execution using shared resource with improper synchronization ('race condition') in ASP

Security vulnerability affects the azure-functions-host package. Concurrent execution using shared resource with improper synchronization 'race condition' in ASP...

CLEANSTART-2026-HQ75468 @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon

Security vulnerability affects the azure-functions-host package. @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon...

CLEANSTART-2026-SE28316 Allocation of resources without limits or throttling in ASP

Security vulnerability affects the azure-functions-host package. Allocation of resources without limits or throttling in ASP...

CLEANSTART-2026-WG84677 Improper authentication in ASP

Security vulnerability affects the azure-functions-host package. Improper authentication in ASP...

CLEANSTART-2026-RK69921 Uncontrolled recursion in

Security vulnerability affects the azure-functions-host package. Uncontrolled recursion in...

CLEANSTART-2026-TC11248 Allocation of resources without limits or throttling in ASP

Security vulnerability affects the azure-functions-host package. Allocation of resources without limits or throttling in ASP...

EUVD-2026-110536

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

CVE-2026-111422

In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated environment parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as $... in a value was executed on the remote SSH host. In a Dag that passe...

Linux Distros Unpatched Vulnerability : CVE-2026-115377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write...

Linux Distros Unpatched Vulnerability : CVE-2026-115375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host...