CVE-2026-54073: Protection Mechanism Failure

VeraCrypt provides disk encryption with strong security based on TrueCrypt. From 1.26.6 until 1.26.29, file-hosted hidden volume creation forces quick format and the FormatNoFs function in src/Common/Format.c and FormatFat function in src/Common/Fat.c use WriteFile to place raw zeroed sectors at...

CVE-2026-0292

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...

Vulnerability handling in Cisco Secure Firewall ASA and FTD software

Cisco has identified a vulnerability in Cisco Secure Firewall ASA and FTD software. The vulnerability resides in the heap inspection mechanism within the Remote Access SSL VPN service. It arises due to insufficient error checking during the processing of HTTP requests. An unauthenticated external...

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869

Summary IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yam...

Malicious code in devplatform-spa-plugin-sentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2827eaf1f2c14fe16fc0fcab1ad65266f275fb22a9a81237d93f8e93e84894f On require, index.js loads helpers.js which fetches an OS/arch-specific native binary from obfuscated Cloudflare Workers subdomains...

Malicious code in @ccfly/setup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcod...

MAL-2026-12313 Malicious code in @ccfly/setup-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409d11825a61bed068425296e83dcc0c87427579f7b5d724ec52e5e87465f2b5 The package ships a prebuilt darwin/x64 Mach-O binary containing a Go agent module github.com/ccfly/rescue that, when executed, connects to a hardcod...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-5241

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-5241, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-5241 DESCRIPTION: A vulnerability in the LightGlue...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses go.mongodb.org/mongo-driver-v1.12.0 which is vulnerable to CVE-2026-2303

Summary IBM Maximo Application Suite - Visual Inspection component uses go.mongodb.org/mongo-driver-v1.12.0 which is vulnerable to CVE-2026-2303, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824.

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION: NewNTUnicodeString doe...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar which is vulnerable to CVE-2026-53655

Summary IBM Maximo Application Suite - Visual Inspection component uses tar which is vulnerable to CVE-2026-53655, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-53655 DESCRIPTION: node-tar is a full-featured Tar for Node.j...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses postcss-selector-parser-7.1.1.tgz which is vulnerable to CVE-2026-9358

Summary IBM Maximo Application Suite - Visual Inspection component uses postcss-selector-parser-7.1.1.tgz which is vulnerable to CVE-2026-9358, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-9358 DESCRIPTION: A vulnerabilit...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-33814

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/net-v0.47.0 which is vulnerable to CVE-2026-33814. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pacote which is vulnerable to CVE-2026-9496

Summary IBM Maximo Application Suite - Visual Inspection component uses pacote which is vulnerable to CVE-2026-9496, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-9496 DESCRIPTION: Versions of the package pacote from 11.2....

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Torch - 2.3.1+cu121 which is vulnerable to CVE-2025-32434

Summary IBM Maximo Application Suite - Visual Inspection component uses Torch - 2.3.1+cu121 which is vulnerable to CVE-2025-32434 ,This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-32434 DESCRIPTION: PyTorch is a Python packag...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920, CVE-2026-4372

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920,CVE-2026-4372. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Huggi...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149

Summary IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143

Summary IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to multiple vulnerabilities

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595...