Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CVE-2026-71327 Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and...

CVE-2026-7406 BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-65553

creationtimestamp| type| source ---|---|--- 2026-08-06 16:08:30+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggfx7l7n2p 2026-08-10 08:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspnvqxdlh2r 2026-08-11 04:16:08+00:00| seen|...

CVE-2026-65548

creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcelol42b...

CVE-2026-66662

creationtimestamp| type| source ---|---|--- 2026-08-06 16:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgg37i3ay2i 2026-08-06 22:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msh24av7pe2e...

CVE-2026-65574

creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfu35bbr2a...

CVE-2026-65571

creationtimestamp| type| source ---|---|--- 2026-08-06 15:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgftzmnlr2l...

CVE-2026-28139

creationtimestamp| type| source ---|---|--- 2026-08-06 15:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfmvphqq2m...

CVE-2026-28005

creationtimestamp| type| source ---|---|--- 2026-08-06 15:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfmuhmkn2f...

CVE-2026-43630 llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with a...

CVE-2026-57817

creationtimestamp| type| source ---|---|--- 2026-08-06 15:46:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf6n2duc2o 2026-08-06 20:51:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h7sikdbbfri6u...

CVE-2026-66664

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-65552

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

DEBIAN-CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

ALPINE-CVE-2025-49506

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

CVE-2026-10535

creationtimestamp| type| source ---|---|--- 2026-08-06 15:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgcyvmwba2n...

CVE-2026-66843

CVE-2026-66843 affects html_sanitize_ex HTML5 scrubber. The vulnerability arises because the object element (data attribute) is not registered in allow_tag_with_uri_attributes/3, and the only guard is a lowercase javascript: prefix. This allows attacker-supplied content to be embedded in a truste...

CVE-2025-49506 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

CVE-2026-32327 Apache Portable Runtime Utility: apr-util XML stack recursion crash

A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...