Oracle Linux 10 : kernel (ELSA-2026-19569)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19569 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

PT-2026-63610

Modals gallery paths could enumerate unintended directories...

PT-2026-64080

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge kv map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

PT-2026-64121

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

PT-2026-64103

Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode "1" image. Adjacent process heap bytes can be copied into the generated TGA file. The bug is reachable through the public save API: python im.saveout, format="TGA", compression="tga rle" Older affected Pillow versions u...

The vulnerability of the ocxl_file_register_afu() function in the drivers/misc/ocxl/file.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ocxlfileregisterafu function in the drivers/misc/ocxl/file.c file of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions rxe_mr_alloc() and rxe_mr_init_user() in the driver/infiniband/sw/rxe/rxe_mr.c file of the Linux operating system’s InfiniBand driver module allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions rxemralloc and rxemrinituser in the driver/infiniband/sw/rxe/rxemr.c module of the Linux operating system’s InfiniBand driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

Oracle Linux 8 : httpd:2.4 (ELSA-2026-42828)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42828 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 -...

Eclipse Jetty: HTTP Authority/Host mismatch

Summary Jetty currently accepts HTTP/2 and HTTP/3 requests where the regular Host header and the pseudo-header :authority do not match. As a result, the same request can carry two different host identities through Jetty: - logic based on HttpURI / Request.getServerNamerequest uses :authority -...

GHSA-FPG6-X68Q-5793 n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

Impact The shell tool in the @n8n/computer-use package applied its sandbox restrictions only on macOS. On Linux and Windows, shell commands executed by the tool ran without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the...

EUVD-2026-42893

n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads...

CVE-2026-60455

The CVE-2026-60455 affects Oracle Platform Security for Java (Oracle Fusion Middleware), specifically the Centralized Thirdparty Jars component. Affected supported versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable by a low-privilege attacker with network access via HTTP, po...

CVE-2026-60369

...

CVE-2026-60367

CVE-2026-60367 affects Oracle Platform Security for Java (Oracle Fusion Middleware) with the Centralized Thirdparty Jars component. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP by an unauthenticated remote attacker, and successful exploits can lead t...

Dompdf: Chroot Validation Bypass

Summary The chroot check for local files uses a prefix string check to enforce chroot boundaries. The simple string comparison it performs allows paths like /var/www/rootsecret/file.html when chroot is /var/www/root. This allows attacker-controlled document paths/resources to bypass intended loca...

GO-2026-6041 Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea

Gitea: Notification API leaks private issue metadata after access revocation in code.gitea.io/gitea...

GO-2026-6036 Gitea: RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698) in gitea.dev

Gitea: RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698 in gitea.dev...

UBUNTU-CVE-2026-13067

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

UBUNTU-CVE-2026-13072

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

SUSE-SU-2026:22935-1 Security update for nm-configurator

This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...