kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

kernel: blk-cgroup: fix UAF in __blkcg_rstat_flush()

A flaw was found in the Linux kernel's block input/output control group blk-cgroup component. This vulnerability, a Use-After-Free UAF, occurs when multiple block control groups are released at the same time. A race condition allows one group to remove another's entries while it is still in use,...

glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration

A flaw was found in the GNU C Library glibc DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2026-108764

Server-Side request forgery SSRF vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommend...

Security Bulletin: IBM MQ C client library could allow an authenticated attacker to cause a denial of service by sending a specially crafted message that crashes consuming applications (CVE-2026-14511)

Summary IBM MQ has addressed a potential denial of service issue in the IBM MQ C client library Vulnerability Details CVEID:CVE-2026-14511 DESCRIPTION: IBM MQ could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.18 security and extras update

Red Hat OpenShift Container Platform release 4.22.18 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

EUVD-2026-104141

Server-Side request forgery SSRF vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommend...

CVE-2026-108764

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache Kylin affecting versions 4.0.0 through 5.0.4 . The vulnerability specifically impacts the job-driver UI proxy and primarily affects kylin job services directly exposed to a public network. To remediate this issue, users are recom...

CVE-2026-108764 Apache Kylin: job-driver UI proxy SSRF

Server-Side request forgery SSRF vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommend...

CVE-2026-13695

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

CVE-2026-104679

VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is install...

CVE-2026-13695

The Integratec application is vulnerable to a UNION-based SQL injection vulnerability. The flaw exists in the sInfo parameter when sent via a POST request to the /login/ap_Login.aspx/start endpoint. Successful exploitation could allow an unauthenticated attacker to steal sensitive database inform...

EUVD-2026-104125

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

CVE-2026-13695 SQL Injection in the Integratec Application

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

CVE-2026-13695 SQL Injection in the Integratec Application

SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...

CVE-2026-98433

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for PowerPC architectures. When handling secure virtual machines, a failure during secure memory paging fails to release allocated device memory and internal metadata. A local user can exploit this vulnerability by...

CVE-2026-102941

A flaw was found in github.com/gomarkdown/markdown. A remote attacker can cause a Denial of Service DoS by submitting specially crafted Markdown content containing empty or very short link destinations. When link sanitization is enabled, the parser attempts to read beyond the boundaries of the...

CVE-2026-104679

The VOCALOID6 Editor provided by Yamaha Corporation contains a vulnerability due to improper restriction of XML external entity references . An attacker could potentially cause the product to initiate unintended communication by having a user load a specially crafted project file. This could resu...