codemie-tools (>=0.0.352, <=0.0.404), syntera-ai (0.1.3) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.3.60)

langchain-core PYPI version 0.3.60 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - codemie-tools =0.0.352, =0.2.8, =0.4.3 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

codemie-tools (>=0.0.405, <=0.1.13.7), knowai (>=0.3.0, <=0.6.0) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.67)

langchain-core PYPI version 0.3.67 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - codemie-tools =0.0.405, =0.3.0, =0.6.0 - mcp-validator 0.1.1 - trim-sdk 0.2.2 Source cves: CVE-2026-26013 Source advisory:...

codemie-tools (>=0.1.13.8, <=0.1.14.0), opendsstar (>=1.0.0, <=1.0.17) potentially affected by CVE-2026-26013 via langchain-core (0.3.83)

langchain-core PYPI version 0.3.83 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - codemie-tools =0.1.13.8, =1.0.0, =1.0.17 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...

CVE-2026-24322

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability...

[SECURITY] Fedora 42 Update: tbtools-0.7.0-2.fc42

This is a collection of tools for Linux Thunderbolt/USB4 development, debuggi ng and validation but may be useful to others as well...

[SECURITY] Fedora 42 Update: open-vm-tools-13.0.10-2.fc42

The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...

Security Assessment of Intel TDX with Support for Live Migration

In the second and third quarters of 2025, Google collaborated with Intel to conduct a security assessment of Intel Trust Domain Extensions TDX, extending Google's previous review and covering major changes since Intel TDX Module 1.0 - namely support for Live Migration and Trusted Domain TD...

Fedora: Security Advisory (FEDORA-2026-33c6aa1881)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

image-builder (>=0.1.1rc0, <=0.2.0), shortesttrack-sdk (>=1.2.0rc1, <=1.4.1) +1 more potentially affected by CVE-2026-26007 via cryptography (2.2.1)

cryptography PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - image-builder =0.1.1rc0, =1.2.0rc1, =0.0.3a0, =0.1.10 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...

arkhai-hosted-settlement-client (0.4.2), arkhai-kit-hosted-settlement (0.1.4) +26 more potentially affected by CVE-2026-26007 via cryptography (45.0.6)

cryptography PYPI version 45.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - arkhai-hosted-settlement-client 0.4.2 - arkhai-kit-hosted-settlement 0.1.4 - atsdk =0.2.46, =1.0.0, =0.1.0, =1.0.0, =3.0.0, =0.1.0,...

image-builder (>=0.1.1rc0, <=0.2.0), shortesttrack-sdk (>=1.2.0rc1, <=1.4.1) +1 more potentially affected by CVE-2026-26007 via cryptography (2.2.1)

cryptography PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - image-builder =0.1.1rc0, =1.2.0rc1, =0.0.3a0, =0.1.10 Source cves: CVE-2026-26007 Source advisory: OSV:GHSA-R6PH-V2QM-Q3C2...

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

Cybersecurity researchers have disclosed details of an emergent ransomware family dubbed Reynolds that comes embedded with a built-in bring your own vulnerable driver BYOVD component for defense evasion purposes within the ransomware payload itself. BYOVD refers to an adversarial technique that...

cn.easyproject:easyshiro (>=2.3.0-release, <=2.5.1-release), com.easycodebox:easycode-login (>=0.1.0, <=0.2.2) +172 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.2.5)

org.apache.shiro:shiro-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - cn.easyproject:easyshiro =2.3.0-release, =0.1.0, =1.0.1-release, =0.1.3, =0.1.3, =2.17.3, =2.17.7 -...

Schneider Electric SCADAPack and RemoteConnect

GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...

CVE-2025-66605

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since there are input fields on this webpage with the autocomplete attribute enabled, the input content could be saved in the browser the user is using. The affected products and versions are as follows:...

CVE-2025-66603

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN,...

CVE-2026-2216

A flaw has been found in rachelos WeRSS we-mp-rss up to 1.4.8. Impacted is the function downloadexportfile of the file apis/tools.py. Executing a manipulation of the argument filename can lead to path traversal. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-66606

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...

CVE-2025-66602

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by the worm. The affected products and versions are ...

CVE-2025-66604

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN,...