Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI and/or system health monitoring are now fixed in 5.2.3.7 or higher and 6.0.0.2 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale Management GUI and/or system health monitoring and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.7 or higher or 6.0.0.2 or higher. Vulnerability Details CVEID:CVE-2025-66418 DESCRIPTION:...

EUVD-2026-18364

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system...

CVE-2026-31937

A flaw was found in Suricata, a network intrusion detection, prevention, and security monitoring engine. A remote attacker could exploit an inefficiency in the Distributed Computing Environment/Remote Procedure Call DCERPC buffering mechanism. This could lead to a denial of service DoS due to...

CVE-2026-31931

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. An attacker could trigger a null dereference by using the "tls.alpn" rule keyword, causing the Suricata engine to crash. This vulnerability leads to...

CVE-2026-33533

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, the Glances XML-RPC server activated with glances -s or glances --server sends Access-Control-Allow-Origin: on every HTTP response. Because the XML-RPC handler does not validate the Content-Type header, an...

CVE-2026-33641

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.3, Glances supports dynamic configuration values in which substrings enclosed in backticks are executed as system commands during configuration parsing. This behavior occurs in Config.getvalue and is implemented...

CVE-2026-33533

Glances prior to 4.5.3 exposes a Cross‑Origin Resource Sharing (CORS) weakness in its XML‑RPC server (enabled with glances -s/--server). The XML‑RPC handler does not validate Content‑Type, allowing an attacker‑controlled page to issue a CORS simple request (POST, Content‑Type: text/plain) that ca...

EUVD-2026-18246

Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15...

CVE-2026-31932

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...

EUVD-2026-18241

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

EUVD-2026-18237

Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. This issue has been patched in version 8.0.4...

Important: Red Hat Security Advisory: Network Observability 1.11.1 for OpenShift

Network Observability 1.11 for Red Hat OpenShift. Network flows collector and monitoring solution...

Design and Implementation of an Open-Source Security Framework for Cloud Infrastructure

Misconfiguration, excessive privilege, and tool fragmentation remain the main reasons why enterprise cloud environments are breached. Recent reports on cloud-native application protection note that most incidents can be traced back to configuration or identity errors rather than platform flaws, a...

CVE-2026-35093

A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such ...

CVE-2026-35093

A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such ...

CVE-2026-35093 Libinput: libinput: unauthorized code execution and information disclosure through lua bytecode plugins

A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such ...

CVE-2026-35093

A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain system or user configuration directories can bypass security restrictions. This allows the attacker to run unauthorized code with the same permissions as the program using libinput, such ...

The vulnerability of the Glances monitoring tool, related to the disclosure of information, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Glances monitoring tool is related to the disclosure of information. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...

The vulnerability of the riscv_pmu_start() function in the drivers/perf/riscv_pmu.c file of the Linux kernel’s performance monitoring driver allows a hacker to cause a system failure.

The vulnerability of the riscvpmustart function in the drivers/perf/riscvpmu.c module of the Linux kernel’s performance monitoring driver is related to improper handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities of the functions ath11k_dp_rx_mon_dest_process() and ath11k_dp_full_mon_process_rx() in the driver module drivers/net/wireless/ath/ath11k/dp_rx.c of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions ath11kdprxmondestprocess and ath11kdpfullmonprocessrx in the drivers/net/wireless/ath/ath11k/dprx.c module of the Atheros/Qualcomm wireless adapter support driver for the Linux operating system is related to incorrect initialization. Exploiting this vulnerabilit...