CLEANSTART-2026-WT26396 Security fixes in temporal-server 1.31.0.153.3-r0

Package temporal-server version 1.31.0.153.3-r0 fixes 4 vulnerabilities: CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-39883...

CLEANSTART-2026-CH14940 Security fixes in spire-server 1.14.5-r0

Package spire-server version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-YS49357 Security fixes in cloud-config-server 4.3.2-r2

Package cloud-config-server version 4.3.2-r2 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

CLEANSTART-2026-AA71310 Security fixes in spire-server-fips 1.14.5-r0

Package spire-server-fips version 1.14.5-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-xmrv-pmrh-hhx2, CVE-2026-34986...

CLEANSTART-2026-OG55473 Security fixes in spire-server 1.14.1-r4

Package spire-server version 1.14.1-r4 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-BQ82502 Security fixes in temporal-ui-server-fips 2.44.0-r0

Package temporal-ui-server-fips version 2.44.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-PY24465 Security fixes in temporal-server-fips 1.29.2-r0

Package temporal-server-fips version 1.29.2-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-WN87351 Security fixes in temporal-server-fips 1.29.6-r0

Package temporal-server-fips version 1.29.6-r0 fixes 13 vulnerabilities: ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

CLEANSTART-2026-RM20844 Security fixes in cloud-config-server 4.3.4-r0

Package cloud-config-server version 4.3.4-r0 fixes 15 vulnerabilities: CVE-2026-41293, CVE-2026-43512, CVE-2026-43515, CVE-2026-41284, CVE-2026-42498...

CLEANSTART-2026-UX42844 Security fixes in metrics-server 0.8.0-r0

Package metrics-server version 0.8.0-r0 fixes 5 vulnerabilities: CVE-2025-61727, CVE-2025-61729, CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...

CLEANSTART-2026-JS81714 Security fixes in spire-server 1.13.5-r1

Package spire-server version 1.13.5-r1 fixes 28 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1

Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CLEANSTART-2026-BF90643 Security fixes in spire-server 1.14.1-r2

Package spire-server version 1.14.1-r2 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

TIBCO JasperReports Library - Directory Traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

CVE-2026-44092 Missing input validation / stripping of CRLF characters in SystemConfigManager

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss...

CVE-2026-44092

CVE-2026-44092 affects the ModbusServer application. An unauthenticated remote attacker can inject malicious input because input fetched from MQTT is not validated, leading to integrity and availability loss. Root cause: lack of validation in input handling for MQTT-derived data. Reported metrics...

CVE-2026-59326

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-59326

The CVE describes a disclosure risk in the Spring Boot language server: when creating an outbound HTTP client, it logs the raw value of https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variables at INFO level if no http.proxy workspace setting is configured. Proxy URLs often contain Basi...

CVE-2026-64381

A flaw was found in the SMB client of the Linux kernel. A remote attacker could exploit a memory leak in the receiveencryptedstandard function by sending specially crafted compound Protocol Data Units PDUs. This vulnerability occurs because a buffer is allocated before a necessary size check,...