Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.4.hum1 aarch64, x8664 tempo3.0-3.0.3-0.4.hum1.src src Security Fixes: tempo3.0: CVE-2026-93450...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo2.10: tempo2.10-2.10.8-0.4.hum1 aarch64, x8664 tempo2.10-2.10.8-0.4.hum1.src src Security Fixes: tempo2.10: CVE-2026-93450...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.5.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.5.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.5.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.5.hum...

PT-2026-99892

Name of the Vulnerable Software and Affected Versions Canonical LXD versions prior to 5.0.10 Canonical LXD versions prior to 5.21.8 Canonical LXD versions prior to 6.10 Description An authorization flaw exists in the imageDownload function on Linux. This issue allows a client restricted to a...

CVE-2026-86335: Missing Authorization

Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests...

CVE-2026-97164

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...

CVE-2026-97164 Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...

CVE-2026-97164

The Event Gallery extension for Joomla (developed by svenbluege.de ) versions

EUVD-2026-87931

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...

CVE-2026-97164: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in clear cache task in Event Gallery extension 6.5.0 - Using the images parameter of the cache.process task, you can recursively delete any directories that the web server is authorized to write to...

PT-2026-99534

Name of the Vulnerable Software and Affected Versions Event Gallery versions prior to 6.5.0 Description An authenticated user can perform arbitrary path deletion through the clear cache task. By manipulating the images parameter within the cache.process task, it is possible to recursively delete...

EUVD-2026-87770

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

CVE-2026-100626

Versions of capgo through 12.128.2 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in the PUT /app/:appId endpoint. The root cause is that the endpoint accepts attacker-controlled icon storage paths . This allows authenticated users to provide arbitrary paths in the pri...

CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

CVE-2026-100626 capgo through 12.128.2 IDOR via PUT /app icon endpoint

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

EUVD-2026-87677

Kyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy policies.kyverno.io/v1beta1 evaluator never reads the spec.images and spec.allowedValues fields of a PolicyException. Any PolicyException whose policyRefs and matchConditions match a resource...

CVE-2026-100704

The Kyverno policy engine for Kubernetes (versions 1.14.0 through 1.19.0 ) contains a vulnerability in the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator. The evaluator fails to read the spec.images and spec.allowedValues fields of a PolicyException . Consequently, if a PolicyExcep...

CVE-2026-100626: Authorization Bypass Through User-Controlled Key

capgo through 12.128.2 contains an insecure direct object reference vulnerability in the PUT /app/:appId endpoint that accepts attacker-controlled icon storage paths. Authenticated users can supply arbitrary paths in the private images bucket and obtain service-role-signed URLs valid for 7 days t...

PT-2026-99297

Name of the Vulnerable Software and Affected Versions capgo versions prior to 12.128.3 Description An insecure direct object reference occurs in the 'PUT /app/:appId' endpoint, which accepts attacker-controlled icon storage paths. Authenticated users can provide arbitrary paths within the private...

PT-2026-99375

Name of the Vulnerable Software and Affected Versions Kyverno versions 1.14.0 through 1.19.0 Description The ImageValidatingPolicy evaluator fails to process the spec.images and spec.allowedValues fields within a PolicyException. When a PolicyException matches a resource via policyRefs and...