RHSA-2026:54070 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:53846 Red Hat Security Advisory: isns-utils security update

Bulletin has no description...

RHSA-2026:53454 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2026:53453 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2026:53444 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2026:53412 Red Hat Security Advisory: opentelemetry-collector security update

Bulletin has no description...

RHSA-2026:53365 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:53363 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:51036 Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Bulletin has no description...

ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root

Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1786527009 TuxCare security update for guzzlehttp/psr7 (5 CVEs)

TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...

ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root

Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

The security researcher going by the name Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has released a proof-of-concept PoC for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for...

CLSA-2026-1786515832 TuxCare security update for aiohttp (3 CVEs)

TuxCare rebuilt aiohttp to address 3 CVEs. Fixed in 3.8.6.post9+tuxcare...

CVE-2025-15687

CVE-2025-15687 affects Open5GS up to version 2.7.6, specifically the SMF Diameter Gx Credit-Control-Answer Handler function smf_gx_cca_cb. The issue is described as a manipulation that results in a denial of service, with remote-launch potential. Public exploit exists according to the description...

MINI-8WQM-QMP7-74W9

Bulletin has no description...

EUVD-2026-57008

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

Linux Distros Unpatched Vulnerability : CVE-2026-68446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Mod...

Linux Distros Unpatched Vulnerability : CVE-2026-68306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer...