RockyLinux 8 : kernel-rt (RLSA-2026:39180)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:39180 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete...

PT-2026-60132

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.61 n8n versions prior to 2.27.4 n8n versions prior to 2.28.1 Description A permission bypass exists in external secrets handling due to a mismatch between the static validation check and the runtime expression engin...

CVE-2026-47767

CVE-2026-47767 consolidates multiple disclosures of CVE-2024-50340: the vulnerability stems from a mismatch between parse_str()-built $_GET and web SAPI argv parsing when register_argc_argv=On, allowing crafted GET requests to flip APP_ENV/APP_DEBUG via SymfonyRuntime::getInput. Affected implemen...

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-54125

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50503

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50486

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50460

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50452

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50413

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50410

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50403

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50385

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50345

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50348

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50340

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...

CVE-2026-50322

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

@fedify/botkit (>=0.4.0-dev.182, <=0.4.0-dev.183), @fedify/botkit-sqlite (>=0.4.0-dev.182, <=0.4.0-dev.183) +5 more potentially affected by CVE-2026-50131 via @fedify/vocab-runtime (>=2.0.0, <=2.0.18)

@fedify/vocab-runtime NPM version =2.0.0, =0.4.0-dev.182, =0.4.0-dev.182, =2.0.0-dev.1757, =2.0.0-dev.12, =2.0.0-dev.158, =2.0.0-dev.0, =2.0.0-dev.0, =2.0.18 Source cves: CVE-2026-50131 Source advisory: OSV:GHSA-XW9Q-2MV6-9FR8...