security/sudo-rs -- sudoedit could circumvent /etc/sudoers restrictions

Trifecta Tech Foundation reports: Users that are explicitly permitted to edit only specific files using sudoedit, are still able to place files in arbitrary directories. This only affects systems where sudoedit is used to give very fine-grained edit permissions, which is not the default...

CVE-2026-54770 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, openstack-placement-2026.1, openstack-placement-2026.1-fips, openstack-nova-2025.1, openstack-glance-2025.2-fips, openstack-placement-2025.1-fips, openstack-nova-2025.2, openstack-tempest-2025.2, openstack-horizon-2025.1-fips,...

CVE-2026-74591

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

UBUNTU-CVE-2026-74591

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

EUVD-2026-64528

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...

CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, datahub-ingestion, apache-beam-python-3.14-sdk, netbox, openstack-placement-2026.1, airflow-postgres-fips, label-studio, openstack-placement-2026.1-fips, openstack-nova-2025.1, dbt-bigquery, mlflow-fips, openstack-glance-2025.2-fips,...

Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluation

Foundation models are increasingly used for perception, reasoning, planning, and action generation in embodied agents, creating security risks that can propagate from digital inputs to physical behavior. Existing surveys often organize threats by mechanisms such as jailbreaks, prompt injection,...

PT-2026-80562

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations...

SoK: Cryptographic Key Recovery for Cryptoasset Custody and Financial Technologies

Cryptoasset systems often bind cryptographic key control to financial control: losing a wallet seed, custody share, hardware device, or smart-account credential can remove spend authority, while compromised recovery can enable theft. Existing work treats recovery through separate vocabularies--ke...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, dagster, azureml-inference-server-http, apache-beam-python-3.14-sdk, openstack-placement-2026.1, ggshield, dbt-snowflake, barman, datadog-agent-fips, openstack-nova-2025.1, request-1276, openstack-kolla-toolbox-2025.1, airflow-core,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, dagster, azureml-inference-server-http, apache-beam-python-3.14-sdk, openstack-placement-2026.1, ggshield, dbt-snowflake, barman, datadog-agent-fips, openstack-nova-2025.1, request-1276, openstack-kolla-toolbox-2025.1, airflow-core,...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.1 security update

Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

GHSA-J5G9-F88F-GFJ3 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, openstack-placement-2026.1, openstack-placement-2026.1-fips, openstack-nova-2025.1, openstack-glance-2025.2-fips, openstack-placement-2025.1-fips, apache-beam-python-3.13-sdk, openstack-nova-2025.2, openstack-horizon-2025.1-fips,...

CVE-2026-59939 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.1, openstack-placement-2026.1, openstack-placement-2026.1-fips, openstack-nova-2025.1, openstack-glance-2025.2-fips, openstack-placement-2025.1-fips, apache-beam-python-3.13-sdk, openstack-nova-2025.2, openstack-horizon-2025.1-fips,...

CVE-2026-64268

CVE-2026-64268 concerns a Linux kernel vulnerability in the SIW (RDMA) path where Read Response segments could overrun the sink buffer. The issue resides in siw_qp_rx.c (siw_proc_rresp) which places inbound Read Response DDP segments at sge->laddr + wqe->processed and accumulates processed ...