CLSA-2026-1779151633 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.12.3-tuxcare.1...

CLSA-2026-1776731780 TuxCare security update for sockjs (1 CVE)

TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.19-tuxcare.1...

CLSA-2026-1776299672 TuxCare security update for postcss (3 CVEs)

TuxCare rebuilt postcss to address 3 CVEs. Fixed in 7.0.14-tuxcare.1...

CLSA-2026-1776213253 TuxCare security update for laravel/framework (8 CVEs)

TuxCare rebuilt laravel/framework to address 8 CVEs. Fixed in 8.12.1-p1+tuxcare...

CLSA-2026-1775003167 TuxCare security update for node-fetch (1 CVE)

TuxCare rebuilt node-fetch to address 1 CVE. Fixed in 1.6.3-tuxcare.1...

CLSA-2026-1774743812 TuxCare security update for hawk (2 CVEs)

TuxCare rebuilt hawk to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1774484503 TuxCare security update for minimatch (3 CVEs)

TuxCare rebuilt minimatch to address 3 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1773015258 TuxCare security update for hawk (2 CVEs)

TuxCare rebuilt hawk to address 2 CVEs. Fixed in 3.1.0-tuxcare.1...

CLSA-2026-1773101683 TuxCare security update for form-data (1 CVE)

TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

CLSA-2026-1772151045 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 3.4.8.post4+tuxcare...

CLSA-2025-1765411676 TuxCare security update for org.apache.lucene (1 CVE)

TuxCare rebuilt 31 org.apache.lucene packages to address 1 CVE. Fixed in 5.5.5-tuxcare.1...

CVE-2026-67195

CVE-2026-67195 describes a remote code execution in Perspective 5.0.0 via an eval() expression injection in the PolarsVirtualServer backend. The vulnerability occurs when client-supplied input is passed directly to Python’s eval() with almost no sandboxing (builtins cleared). Attackers can traver...

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10710 FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10710

Summary: CVE-2026-10710 involves a stack-based buffer overflow in Autodesk FBX SDK, specifically in the fbxsdk::ExtractDrive path when parsing a malicious FBX file. The NVD/CVE records describe that exploitation can allow arbitrary code execution in the context of the current process, with a CVSS...

EUVD-2026-52669

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10709

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

WordPress Zoner - Real Estate WordPress Theme theme < 4.2 - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting vulnerability

WordPress Zoner - Real Estate WordPress Theme theme 4.2 - Real Estate WordPress Theme 4.2 - Cross-Site Scripting vulnerability discovered by R3N0 in WordPress Theme Zoner - Real Estate versions 4.2...