PT-2026-96905

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.4.0 through 7.7.0 RTI Connext Professional versions 7.0.0 through 7.3.1.5 RTI Connext Professional versions 6.1.0 through 6.1.x RTI Connext Professional versions 6.0.0 through 6.0.x RTI Connext Professional...

PT-2026-96885

Name of the Vulnerable Software and Affected Versions RTI Connext Professional versions 7.1.0 through 7.3.1.5 RTI Connext Professional versions 7.4.0 through 7.7.0 Description A double free issue in the Core Libraries allows for file manipulation. A double free occurs when an application attempts...

PT-2026-96886

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in RTI Connext Professional Core Libraries allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before...

CVE-2026-18460: Off-by-one Error

Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional Core Libraries allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.0.0 before 7.3.1.6...

OESA-2026-3998 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3997 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

OESA-2026-3996 nss security update

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

EUVD-2026-83021

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CVE-2026-10751 IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

CLEANSTART-2026-FE88742 Security fix for CVE-2026-25645 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, cassandra-reaper-fips 3.6.1-r2, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 3.8.0-r3, cassandra-reaper-fips 4.0.1-r2, jupyterhub-k8s-hub 4.3.2-r0, k8s-sidecar 1.25.2-r0, k8s-sidecar 2.5.4-r0, kserve-storage-controller 0.19.0-r0, miniforge3 26.1.0.0-r1, tensorflow-gpu-jupyter 2.20.0-r1

CVE-2026-25645 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KG33218 Security fix for CVE-2026-56745 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.10.0-r3, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r1, elasticsearch 9.3.8-r1, hazelcast 5.7.0-r1, keycloak 26.5.7-r7, keycloak 26.7.1-r0, logstash-fips 9.4.3-r1, strimzi-kafka-operator 1.1.0-r2

CVE-2026-56745 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HG35040 Erlang/OTP is a set of libraries for the Erlang programming language

Multiple security vulnerabilities affect the erlang package. Erlang/OTP is a set of libraries for the Erlang programming language. See references for individual vulnerability details...

CVE-2026-10751: Deserialization of Untrusted Data

IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...

PT-2026-95465

Name of the Vulnerable Software and Affected Versions IBM MQ Java and JMS client libraries affected versions not specified Description An authenticated attacker can execute arbitrary code on client applications. This is possible due to a deserialization filter bypass occurring during exception...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

EUVD-2026-80755

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131

The Jenkins Pipeline: Groovy Libraries Plugin (version 805.va_fc79344957d and earlier) is vulnerable to a path traversal flaw. The plugin fails to restrict the library path provided to the library Pipeline step to a relative path within the SCM checkout and improperly follows symbolic links to lo...

CVE-2026-92131

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...

CVE-2026-92131: Improper Limitation of a Pathname to a Restricted Directory

Jenkins Pipeline: Groovy Libraries Plugin 805.vafc79344957d and earlier does not restrict the library path provided to the library Pipeline step to a relative path inside the SCM checkout, and follows symbolic links to locations outside of the SCM checkout when retrieving the library, resulting i...