CVE-2026-42248 Missing Signature Verification for Updates in Ollama

Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success so no digital signature or trust validation is performed before stagin...

CVE-2026-42248 Missing Signature Verification for Updates in Ollama

Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success so no digital signature or trust validation is performed before stagin...

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

Every security team has a version of the same story. The quarter ends with hundreds of vulnerabilities closed. The dashboards are bursting with green. Then someone in a leadership meeting asks: "So, are we actually safer now?" Crickets. The room goes quiet because an honest answer requires contex...

Improper SSL Hostname Verification

org.springframework.boot, spring-boot-elasticsearch is vulnerable to improper SSL hostname verification. The vulnerability is due to missing hostname verification in SSL bundle configuration, which allows an attacker to perform man-in-the-middle attacks by connecting to a malicious Elasticsearch...

Weak Random Value Generation For Secrets (weak PRNG)

Spring Boot is vulnerable to the use of a weak pseudo-random number generator PRNG. The vulnerability is due to the use of predictable random value sources e.g., $random.value, $random.int, $random.long, which allows an attacker to guess or brute-force generated secrets and compromise application...

Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026

Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…...

Exploit for OS Command Injection in Php

PHP CVE Autopilot Fully automated detection and exploitat...

Exploit for OS Command Injection in Asustor Data_Master

No d...

PT-2026-37146

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.9 Description An issue exists where the Role::stopMembership function fails to verify if removing a user from the administrator role leaves the system with zero administrators. While the deprecated...

FreeBSD : Mozilla -- Memory safety bugs (6f1af47d-430a-11f1-a627-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6f1af47d-430a-11f1-a627-b42e991fc52e advisory. https://bugzilla.mozilla.org/buglist.cgi?bugid=2010727%2C2019004%2C2019224%2C2019547%2C2020378%2C202238...

CDAC e-Sushrut 安全漏洞

CDAC e-Sushrut is a system platform provided by the Indian CDAC company that facilitates hospital information management and medical process support. There is a security vulnerability in CDAC e-Sushrut, which stems from plaintext exposure of OTPs in API responses. This vulnerability could allow...

PT-2026-35919

Name of the Vulnerable Software and Affected Versions Jenkins Microsoft Entra ID previously Azure AD Plugin versions prior to 666.v6060de32f87d Description The plugin does not restrict the redirect URL after login, which allows attackers to perform phishing attacks. Recommendations Update the...

The vulnerability of the __acquires() function in the drivers/md/md-bitmap.c file of the multi-device driver module for Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the kunit_filter_tests() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the kunitfiltertests function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the wmt_mci_probe() function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the md_bitmap_resize() function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mdbitmapresize function in the drivers/md/md-bitmap.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the amdgpu_amdkfd_gpuvm_acquire_process_vm() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpuamdkfdgpuvmacquireprocessvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Linux kernel is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-35893

Name of the Vulnerable Software and Affected Versions libcurl affected versions not specified Description A logical error in the connection pooling mechanism may cause libcurl to reuse an incorrect connection for SMBS transfers. When reusing a connection, specific criteria must be met; however, a...

Linux Distros Unpatched Vulnerability : CVE-2026-7323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libsoup (UTSA-2026-015475)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015475 advisory. A flaw was found in libsoups WebSocket frame processing when handling incoming messages. If a non- default configuration is used where the maximum incoming payload...