Linux Distros Unpatched Vulnerability : CVE-2026-16526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-17996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a maliciou...

Linux Distros Unpatched Vulnerability : CVE-2026-16530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a...

Linux Distros Unpatched Vulnerability : CVE-2026-17659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in SiteIsolation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypa...

Linux Distros Unpatched Vulnerability : CVE-2026-17790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized Use in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process...

Linux Distros Unpatched Vulnerability : CVE-2026-16531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2026-16527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.7.hum1 aarch64, x8664 jaeger-2.20.0-0.7.hum1.src src Security Fixes: jaeger: CVE-2026-67214...

CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6

CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6. A patched version of the package is available...

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8. A patched version of the package is available...

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...

CVE-2026-10822 affecting package bind for versions less than 9.20.26-1

CVE-2026-10822 affecting package bind for versions less than 9.20.26-1. A patched version of the package is available...

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...

CVE-2026-56852 affecting package gh for versions less than 2.62.0-19

CVE-2026-56852 affecting package gh for versions less than 2.62.0-19. A patched version of the package is available...

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 CVSS score: 9.5, the flaw can expose the Rails process environment and secre...

RLSA-2026:36331 Important: nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...

coreutils bug fix and enhancement update

An update is available for coreutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

EUVD-2026-43720

Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass...

EUVD-2026-43722

Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...