CVE-2026-47830 Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\servicewrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service restart or reboot. This can lead to full...

RLSA-2026:36733 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 For more details about...

EUVD-2026-42510

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not sign or verify its guest-session cookie, allowing unauthenticated attackers to forge it and impersonate any ticket owner identified by email address to read, reply to, and close that person's support tickets...

MAL-2026-7032 Malicious code in myclaude-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3597c40ce7f730173367aa9f9cc4f29c53af17524c19c4814caafa08cd1b20bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-7030 Malicious code in clavue-agent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399c0d2f1fabfa46b35810b70797862a0fd469076fa9496549237ab413ccada2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in clavue-agent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399c0d2f1fabfa46b35810b70797862a0fd469076fa9496549237ab413ccada2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-57027

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:45+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-09 16:45:31+00:00| seen|...

CVE-2026-57029

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:32+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...

CVE-2026-57026

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:23+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-09 16:45:06+00:00| seen|...

CVE-2026-57019

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:06+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-09 16:45:29+00:00| seen|...

CVE-2026-33803

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:04+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-10 18:38:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcsalwwkc2f...

CVE-2026-33794

creationtimestamp| type| source ---|---|--- 2026-07-09 04:46:39+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709 2026-07-09 16:45:16+00:00| seen|...

CVE-2026-21901

creationtimestamp| type| source ---|---|--- 2026-07-09 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...

SUSE CVE-2026-14474

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

GHSA-5F39-WJPQ-XRRJ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp...

CVE-2026-46331 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-gcp...

GHSA-4W7W-2MRJ-36VW vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-vmware, linux-qemu, linux-aws, linux-gcp...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: knative-serving-fips, cilium-fips, cluster-api-fips, cluster-api, gatekeeper, prometheus-mongodb-exporter, keda, mattermost, gitlab-rails-ce-fips, knative-operator-fips, eks-distro-fips, etcd-fips, docker-cli-fips, grafana-operator, consul-fips, prometheus-fips,...

Security Bulletin: Due to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability [CVE-2026-13463]

Summary Vulnerabilities was addressed in IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-13463 DESCRIPTION: IBM Storage Protect could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files. CWE:CWE-798: Use of Hard-code...

EUVD-2026-42490

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from...