CVE-2026-71458 Automation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumeration

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...

CVE-2026-71458 Automation-controller: automation-controller-container: automation-controller: named-url 404 body oracle enables cross-tenant resource name enumeration

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No matches..." reveals whether a named resource org,...

CVE-2026-86319

A flaw was found in java-json-tools json-patch. A remote attacker can exploit a vulnerability in the JsonPatch.apply function within the Patch Operation Handler component. By manipulating input, an attacker can cause excessive resource consumption, leading to a Denial of Service DoS condition...

CVE-2026-85718

A flaw was found in AsyncHttpClient. When configured with connection limits, the library can leak a connection permit if a Transport Layer Security TLS handshake fails before completion. This permit leak can lead to resource exhaustion, allowing a remote attacker to cause a denial of service by...

CVE-2026-95845

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

CVE-2026-47885

A flaw was found in Spring WebFlux. The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. This oversight could allow a remote attacker to send excessively large multipart requests, potentially leading to resource exhaustion and ...

Security Bulletin: This Power System update is being released to address CVE-2026-17511

Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...

EUVD-2026-85420

Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters ...

CVE-2026-93349 Frictionless OS Command Injection via explore Console Command

Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in...

CLSA-2026-1790181280 ImageMagick: Fix of 3 CVEs

CVE-2026-93586: fix a use-after-free when ImagesToBlob writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown...

CVE-2026-95845

The Moquette Java MQTT broker is vulnerable to a denial of service (DoS) condition in versions prior to 0.18.1 . The root cause is the lack of a maximum length enforcement for pending per-session message queues. If a fast publisher sends messages to a slow subscriber with a full in-flight window,...

EUVD-2026-85415

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher sends messages to a slow subscriber whose in-flight window is full, queued messages can accumulate without bound in memory or...

CVE-2026-19267

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

CVE-2026-91865

A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by providing a specially crafted WS-Policy document containing repeated policy references. This document would force Neethi to exponentially re-expand the same references during normalization, consuming excessiv...

CVE-2026-75935

A flaw was found in Amazon ion-java. This uncontrolled memory allocation vulnerability in the binary Ion stream cursor allows remote attackers to cause a denial of service DoS by sending a specially crafted Ion binary document. The crafted document contains a declared-length field that triggers...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.15 contains security vulnerabilities. These vulnerabilities arise from the failure to clean up the typec switch when detection fails, resulting in resource leaks for the typec switch...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.12.35 to 6.12.109, 6.15.4 to 6.16, and 6.16 contain security vulnerabilities. These vulnerabilities stem from the fact that the function rvrdmardmaaccept fails to check rndone before calling rpcrdmarnunregister, resulting in an unbalanced reference count and...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.16 contains a security vulnerability. This vulnerability stems from a loop in the ppldoflush function that continues iterating after calling ppliounitfinished, resulting in access to io-pendingflushes. This could lead to reuse of resources after they have been released...

CVE-2026-19267

IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 - 4.0.10.0 are vulnerable to a missing authentication flaw on the Business Rules Manager commands REST endpoint (CommandsResource.java:31). This security weakness, categorized as CWE-306 , allows a local actor to invoke...

EUVD-2026-85358

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...