CVE-2026-102141: External Control of File Name or Path

Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a...

PT-2026-103574

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description Two cluster-management operations fail to validate supplied file paths. This allows an attacker with root access on one cluster node to write files as root onto another node and trigge...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc (ALMALINUX9.2:CLSA-2025:1754939879)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1754939879 advisory. - BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacen...

Linux Distros Unpatched Vulnerability : CVE-2026-85526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739387851)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739387851 advisory. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects...

AlmaLinux 9.2 [TuxCare] Security Update: python3-rpm / rpm / rpm-apidocs / rpm-build / rpm-build-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1708417063)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1708417063 advisory. - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...

CentOS Linux 6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_idmap / libsss_idmap-devel / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777683406)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777683406 advisory. - The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, which means that...

AlmaLinux 9.6 [TuxCare] Security Update: libinput / libinput-devel / libinput-test / libinput-utils (ALMALINUX9.6:CLSA-2026:1784020479)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784020479 advisory. - In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.2:CLSA-2026:1786675343)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786675343 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local...

CVE-2026-102114: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

PT-2026-103547

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A command injection flaw allows a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Command injection is a...

PT-2026-103551

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A local privilege escalation issue exists that could allow an attacker who already has shell access via a low-privileged service account to gain root privileges on the appliance...

CVE-2026-102118: Improper Link Resolution Before File Access

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

PT-2026-103545

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A privilege escalation issue exists where an attacker with local access and code execution capabilities as an unprivileged backend service account on the appliance can escalate their...

CVE-2026-102112: Improper Neutralization of Special Elements used in an OS Command

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

PT-2026-103546

Name of the Vulnerable Software and Affected Versions Kiteworks affected versions not specified Description A privilege escalation issue exists where an attacker with local code execution as an unprivileged backend service account can escalate privileges to root. This occurs because a privileged...

CVE-2026-102113: Improper Link Resolution Before File Access

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

PT-2026-103454

Name of the Vulnerable Software and Affected Versions Zammad versions 1.5.0 through 7.1.0-alpha Description Improper privilege management allows a local zammad user to escalate privileges to root. Recommendations At the moment, there is no information about a newer version that contains a fix for...

CVE-2026-102490: Undefined Security Weakness

All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...

VulnCheck KEV: CVE-2026-102490

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489...