121623 matches found
APSB26-138 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass and privilege escalation. Adobe is not aware of any exploits in the wild for any...
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3345)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...
CVE-2026-86437
creationtimestamp| type| source ---|---|--- 2026-09-07 23:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7j7akxumrsw6e...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-0865 DESCRIPTION: User-controlled header names and values containing newlines can allow injecting HTTP headers. CWE:CWE-74: Improper Neutralization of...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-27459 DESCRIPTION: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-42960 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-48713 DESCRIPTION: Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings when used to persist missing translation...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-81551 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage...
CVE-2026-86494
creationtimestamp| type| source ---|---|--- 2026-09-07 18:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mux3ob5m3e2v 2026-09-07 18:56:55+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mux6rbojem2p...
CVE-2026-86506
creationtimestamp| type| source ---|---|--- 2026-09-07 17:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/32vak5f4bwndz...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
CVE-2026-86503
JetBrains IntelliJ IDEA versions before 2026.2.2 are vulnerable to Server-Side Request Forgery (SSRF) when opening an untrusted project. The flaw is triggered through Kubernetes spec-source URL fetching , allowing a crafted project to cause the IDE to issue requests to attacker-controlled URLs. T...
EUVD-2026-72519
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching...
CVE-2026-86430
creationtimestamp| type| source ---|---|--- 2026-09-07 15:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/adymq3lw4sihz 2026-09-12 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdtdqrfdp24...
CVE-2026-53797
A symlink race condition in rsync's source tree traversal allows a low-privileged local attacker to access unauthorized files. By atomically replacing a parent directory component with a symlink during an active transfer, the attacker can redirect file reads outside the intended transfer root,...
CVE-2026-86426
creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwombeul522 2026-09-08 18:08:31+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzmjo32o42g 2026-09-09 15:00:07+00:00| confirmed|...
CVE-2026-76578
creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f 2026-09-07 16:24:54+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o 2026-09-07 16:35:04+00:00| seen|...