CVE-2026-77912 Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

OpenBao Skips Stricter Deny Policy for LIST operations

Impact When a policy operator has written capabilities = "deny" on a path with a trailing wildcard but allowed a broader list operation e.g., a deny on secrets/metadata/restricted/ but allowed list on secrets/metadata/, OpenBao would incorrectly allow the operation. This did not impact other...

GHSA-XP3C-3JW3-4VCR OpenBao Skips Stricter Deny Policy for LIST operations

Impact When a policy operator has written capabilities = "deny" on a path with a trailing wildcard but allowed a broader list operation e.g., a deny on secrets/metadata/restricted/ but allowed list on secrets/metadata/, OpenBao would incorrectly allow the operation. This did not impact other...

EUVD-2026-83955

OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters...

RLSA-2026:69123 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...

sudo security update

An update is available for sudo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

SUSE CVE-2026-73551

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...

USN-8803-1: Sudo vulnerability

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass policy enforcement and logging, executing...

USN-8803-1 sudo vulnerability

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass policy enforcement and logging, executing...

CVE-2026-84200

A flaw was found in Kyverno. This policy exception handling flaw allows a remote attacker to bypass security policies. By crafting a resource name that matches a less restrictive exception pattern, an attacker can circumvent policies, such as those blocking hostPath volumes, leading to unauthoriz...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.39 security and extras update

Red Hat OpenShift Container Platform release 4.20.39 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

CVE-2026-90882: Permissive Cross-domain Policy with Untrusted Domains

The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true on the authenticated /user/ endpoints. A page on any origin could therefore issue credentialed requests to the service in a logged-in user's brows...

PT-2026-97128

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.6.0 Description In the vault/policy/acl.go file, the system incorrectly evaluates wildcard Access Control List ACL grants. Specifically, during a LIST operation, a broad wildcard grant may be prioritized over a more...

AlmaLinux 9 : sudo (ALSA-2026:69123)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from th...

Linux Distros Unpatched Vulnerability : CVE-2026-94571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirecturl and redirectprefix fields. The RF...

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav

Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential...

PT-2026-97266

Name of the Vulnerable Software and Affected Versions Sudo affected versions not specified Description Sudo fails to apply intercept policy checks during command execution under specific conditions. This allows a local attacker with permission to run certain commands to bypass policy enforcement...

RockyLinux 9 : sudo (RLSA-2026:69123)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from t...

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

SUSE CVE-2026-93587

ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific command line option is supplied, the decoder does not check a configured resource limit, which can result in extra memory allocation. A local...