Important: Red Hat Security Advisory: cifs-utils security, bug fix, and enhancement update

An update for cifs-utils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2026-15753

creationtimestamp| type| source ---|---|--- 2026-07-15 00:12:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngrs4sbc2g 2026-07-27 09:09:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkdsf2qy27...

CVE-2026-5270

creationtimestamp| type| source ---|---|--- 2026-07-15 00:04:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqngczzwyz2x 2026-07-15 13:38:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqotriltvq2p 2026-07-27 09:08:14+00:00| seen|...

ECHO-45A8-C123-8D52

Bulletin has no description...

ECHO-DA4C-ABEE-FA30

Bulletin has no description...

ECHO-82D3-866E-E0F0

Bulletin has no description...

ECHO-AB2F-D44E-AB00

Bulletin has no description...

CVE-2025-56364

creationtimestamp| type| source ---|---|--- 2026-07-15 00:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqng325btt2z 2026-07-27 08:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj6r7uog2m 2026-07-27 08:53:06+00:00| seen|...

PT-2026-60180

Name of the Vulnerable Software and Affected Versions Cloudreve versions 4.12.0 through 4.16.0 Description OAuth access tokens are issued without the client id claim. Consequently, the JWT JSON Web Token verifier fails to load token scopes into the request context. This causes the RequiredScopes...

PT-2026-60283

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality...

PT-2026-60146

The Grav API plugin getgrav/grav-plugin-api before 2.0.4 contains an improper session invalidation vulnerability where JWT access tokens are issued without a jti JWT ID claim and therefore cannot be revoked server-side. Unlike refresh tokens, access tokens remain valid for their full lifetime...

Microsoft Excel information leakage vulnerability (CNVD-2026-28541)

Microsoft Excel is a spreadsheet software within the Office suite developed by the American company Microsoft. There is an information leakage vulnerability in Microsoft Excel, and attackers can exploit this vulnerability to obtain sensitive information...

PT-2026-60249

Kanboard through 1.2.52, fixed in commit 564cc30, BoardAjaxController save method used by the kanban board drag-and-drop endpoint validates the caller's role on the attacker-supplied project id but never verifies that the supplied task id actually belongs to that project. Because task identifiers...

SUSE SLES12: libpacemaker-devel / libpacemaker3 / pacemaker / pacemaker-cli / etc (SUSE-SU-2026:2970-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2970-1 advisory. - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression bsc1268381. Tenable has extracted the preceding...

CVE-2025-56365

creationtimestamp| type| source ---|---|--- 2026-07-14 23:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfl3k3pd2g 2026-07-27 08:48:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj5zv6g52z...

CVE-2026-48319

creationtimestamp| type| source ---|---|--- 2026-07-14 23:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t 2026-07-14 23:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g 2026-07-16 08:07:06+00:00| seen|...

CVE-2026-48325

creationtimestamp| type| source ---|---|--- 2026-07-14 23:12:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27 2026-07-14 23:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v 2026-07-16 06:07:06+00:00| seen|...

CVE-2026-15774

creationtimestamp| type| source ---|---|--- 2026-07-14 22:59:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncoq3d3f2g 2026-07-15 23:42:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926641968349809 2026-07-16 04:45:29+00:00| seen|...

CVE-2026-45363

creationtimestamp| type| source ---|---|--- 2026-07-14 22:16:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqnaaypv4m2v 2026-07-15 00:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqng3v7m442f 2026-07-15 00:00:44+00:00| seen|...

MAL-2026-10632 Malicious code in cppt-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 484688d5963a9246f4fe7a2b5c1c7ebe6bba135a2a5df66b3ab57f44978407b2 [email protected] declares a preinstall hook "preinstall": "node index.js" that runs automatically on npm install. index.js collects host and user...