CLEANSTART-2026-MJ32285 Security fix for CVE-2026-42563 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XF61795 Security fix for CVE-2026-52726 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QB74422 Security fix for CVE-2026-42305 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TB06618 Security fix for CVE-2026-69244 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, kserve-storage-controller 0.19.0-r0

CVE-2026-69244 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD07469 Security fix for CVE-2026-50269 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IS85221 Security fix for CVE-2026-47265 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HL56908 Security fix for CVE-2026-34993 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU69022 Security fix for CVE-2026-7246 applied in: airflow-3 3.0.6-r1, airflow-3 3.1.8-r5, airflow-3 3.2.1-r5, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, kserve-storage-controller 0.19.0-r0

CVE-2026-7246 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DV70312 Security fix for CVE-2026-31900 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

Astra Linux – Vulnerability in Qemu

A heap-based buffer overflow was discovered in QEMU version 5.0.0 in the SDHCI device emulation support. This vulnerability could occur during a multi-block SDMA transfer using the sdhcisdmatransfermultiBlocks routine in the hw/sd/sdhci.c file. A malicious user or process could exploit this flaw ...

CLEANSTART-2026-MI51590 Security fixes in kserve-storage-controller 0.19.0-r0

Package kserve-storage-controller version 0.19.0-r0 fixes 91 vulnerabilities: CVE-2024-12254, CVE-2024-12718, CVE-2024-6232, CVE-2024-7592, CVE-2024-9287...

CVE-2026-71262

IoTSharp BlobStorageController.cs lacks the Authorize attribute applied to every other controller in the application DevicesController, CustomersController, TenantsController, etc., and no global authorization FallbackPolicy is configured in Startup.cs, leaving its...

CVE-2026-71262 IoTSharp BlobStorageController Missing Authentication and Path Traversal

IoTSharp BlobStorageController.cs lacks the Authorize attribute applied to every other controller in the application DevicesController, CustomersController, TenantsController, etc., and no global authorization FallbackPolicy is configured in Startup.cs, leaving its...

CVE-2026-71262

IoTSharp’s BlobStorageController is missing authorization and lacks a global authorization policy, making Upload/Download/List/Modify/Delete endpoints accessible without authentication. The endpoints pass path/filename parameters to blob storage without sanitization, enabling path traversal to wr...

CVE-2026-64103

A flaw was found in the Linux kernel's ISCI IntelR C600 Series Chipset Storage Control Unit SCSI driver. This vulnerability occurs during device removal, where a timing issue can allow the system to attempt to use memory that has already been released. This 'use-after-free' condition could be...

EUVD-2026-31148

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters. On on-premise deployments that use local filesystem storage, a regular authenticated user can supply a URL-encoded absolute path such as an encode...

CVE-2026-9129

The CVE-2026-9129 entry concerns Altium Enterprise Server Viewer StorageController. On on‑prem deployments using local filesystem storage, an authenticated user can supply a URL-encoded absolute path in a Viewer storage API request, causing the storage root to be discarded and enabling arbitrary ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Avoid sg device teardown race The function sgremovesfpusercontext must not use sgdeviceDestroy after calling scsidevicePut. sgdeviceDestroy accesses the parent scsidevice request queue, which will already be set to NULL...

PT-2026-42246

A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters. On on-premise deployments that use local filesystem storage, a regular authenticated user can supply a URL-encoded absolute path such as an encode...

CVE-2026-43413

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Fix NULL pointer exception during userscan userscan invokes updated sasuserscan for channel 0, and if successful, iteratively scans remaining channels 1 to shost-maxchannel via scsiscanhostselected in commit...