RHCOS 4 : OpenShift Container Platform 4.14.62 (RHSA-2026:2973)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:2973 advisory. - github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload CVE-2025-65637 Note that Nessus...

Handling the Vulnerability Surge in the Post-Mythos Era

How to Operationalize Hyper-Prioritization and Autonomous Remediation with Qualys Executive Summary The Mythos era, defined by a surge of AI-driven vulnerabilities from frontier models like Anthropic 's Claude Mythos, requires security teams to fundamentally move from manual to an autonomous...

CVE-2026-31699

A flaw was found in the Linux kernel's crypto: ccp module. A local user could exploit a vulnerability where the system attempts to copy a Certificate Signing Request CSR to userspace even after a Platform Security Processor PSP command has failed. This can lead to a slab-out-of-bounds write,...

GHSA-PRGG-RGFW-VR94 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-FCFJ-3H7Q-75MQ vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

CVE-2026-31626 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

CVE-2026-31578 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

CVE-2026-31583 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-RR6W-WV7X-7VHX vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-JP87-J2PH-WV29 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-GGGW-8CQ2-45CP vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

CVE-2026-31532 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

GHSA-8Q42-QFHF-592H vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-gcp, linux-azure, linux-aws, linux-qemu...

HTTP Fetch, Linux Execute Command

Fetch and execute an AARCH64 payload from an HTTP server. Execute an arbitrary command or just a /bin/sh shell Module Options msf use payload/cmd/linux/http/aarch64/exec msf payloadexec show actions ...actions... msf payloadexec set ACTION msf payloadexec show options ...show and set options... m...

CVE-2026-21996

An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an integer Divide-by-Zero in Pbuildfilesymtab...

CVE-2026-42480

A stack-based out-of-bounds read vulnerability in VrmlDataScene::ReadLine in the VRML parser in Open CASCADE Technology OCCT V800rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because the quoted-string escape handler uses ptr++anOffset without proper...

CVE-2026-43042

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...

CVE-2026-43015

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platformdeviceunregister may still want to use the registered clks during runtime resume callback. Note that there is a commit d82d5303c4c5 "net: macb: fix use after free on...

CVE-2026-43506

An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5. A Denial of Service can occur via memory exhaustion caused by memory leaks from unauthenticated connections...

CVE-2026-43042 mpls: add seqcount to protect the platform_label{,s} pair

In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platformlabel,s pair The RCU-protected codepaths mplsforward, mplsdumproutes can have an inconsistent view of platformlabels vs platformlabel in case of a concurrent resize...