CLSA-2026-1780620677 TuxCare security update for csvtojson (2 CVEs)

TuxCare rebuilt csvtojson to address 2 CVEs. Fixed in 2.0.8-tuxcare.1...

CLSA-2026-1776731780 TuxCare security update for sockjs (4 CVEs)

TuxCare rebuilt sockjs to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...

CLSA-2026-1776299672 TuxCare security update for postcss (3 CVEs)

TuxCare rebuilt postcss to address 3 CVEs. Fixed in 7.0.14-tuxcare.1...

CLSA-2026-1774484503 TuxCare security update for minimatch (18 CVEs)

TuxCare rebuilt minimatch to address 18 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1774743812 TuxCare security update for hawk (19 CVEs)

TuxCare rebuilt hawk to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1773015258 TuxCare security update for hawk (5 CVEs)

TuxCare rebuilt hawk to address 5 CVEs. Fixed in 3.1.0-tuxcare.1...

CLSA-2026-1773101683 TuxCare security update for form-data (3 CVEs)

TuxCare rebuilt form-data to address 3 CVEs. Fixed in 0.2.0-tuxcare.1...

CVE-2026-67195

CVE-2026-67195 describes a remote code execution in Perspective 5.0.0 via an eval() expression injection in the PolarsVirtualServer backend. The vulnerability occurs when client-supplied input is passed directly to Python’s eval() with almost no sandboxing (builtins cleared). Attackers can traver...

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10710

Summary: CVE-2026-10710 involves a stack-based buffer overflow in Autodesk FBX SDK, specifically in the fbxsdk::ExtractDrive path when parsing a malicious FBX file. The NVD/CVE records describe that exploitation can allow arbitrary code execution in the context of the current process, with a CVSS...

CVE-2026-10710 FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-52669

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10709

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

RHSA-2026:49511 Red Hat Security Advisory: frr security update

Bulletin has no description...

CVE-2026-14175

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

EUVD-2026-52655

Observable response discrepancy vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Account Footprinting. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

CVE-2026-14202

Bilin Software’s HUMANIST Digital Human Resources (versions before 26.1) suffers a username enumeration flaw via observable differences in login responses, enabling account footprinting. CVSS 3.1 base score 5.3 (Network, Low attack complexity, No privileges, No user interaction). Exploitation sta...

CVE-2026-14465 Session Fixation in Bilin Software's HUMANIST Digital Human Resources

Insufficient session expiration vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Session IDs aka Session Replay. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...