SUSE-SU-2026:23480-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29

This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

CVE-2026-2520 Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27.2. This makes it possible for authenticated attackers, wit...

CVE-2026-2520

The Bookly WordPress plugin (Online Scheduling and Appointment Booking System) is affected by a missing capability check on the updateAddon function in all versions up to and including 27.2 . Authenticated attackers with Subscriber-level access or higher can trigger an update of any plugin whose ...

CVE-2026-2520 Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Update

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27.2. This makes it possible for authenticated attackers, wit...

CLSA-2026-1788866911 TuxCare security update for aiohttp (6 CVEs)

TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.5.post12+tuxcare...

SUSE-SU-2026:23530-1 Security update for kernel-livepatch-MICRO-6-0_Update_29

This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

SUSE-SU-2026:23479-1 Security update for kernel-livepatch-MICRO-6-0_Update_29

This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CLSA-2026-1788863918 TuxCare security update for pillow (1 CVE)

TuxCare rebuilt pillow to address 1 CVE. Fixed in 9.4.0.post6+tuxcare...

CLSA-2026-1788862742 TuxCare security update for loopback (1 CVE)

TuxCare rebuilt loopback to address 1 CVE. Fixed in 1.10.0-tuxcare.3...

CLSA-2026-1788862348 TuxCare security update for request (1 CVE)

TuxCare rebuilt request to address 1 CVE. Fixed in 2.65.0-tuxcare.2...

CLSA-2026-1788862060 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.10.post4+tuxcare...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.5.hum1 aarch64, x8664 glibc-2.43-8.5.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.5.hum1 aarch64, x8664 glibc-benchtests-2.43-8.5.hum1 aarch64, x8664...

OPENSUSE-SU-2026:21815-1 Security update for waylyrics

This update for waylyrics fixes the following issues: Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC support for Simplified/Traditional Chinese Added support for custom CSS themes and style presets...

SUSE-SU-2026:23476-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

HPE OneView - Remote Code Execution

HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code. id: CVE-2025-37164 info: name: HPE OneView - Remote Code Execution author: DhiyaneshDk,garciaizcoa severity: critical description: | HPE OneView contains a remote code execution...

Adobe Commerce - Authentication Bypass

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...

CMP WordPress < 4.0.19 - Broken Access Control

CMP WordPress plugin 4.0.19 contains an arbitrary page layout change caused by insufficient access control in the coming soon page feature, letting unauthenticated users modify the layout, exploit requires no authentication. id: CVE-2022-0188 info: name: CMP WordPress 4.0.19 - Broken Access Contr...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

N-central - XML External Entities Injection

N-central versions %xxe; rand http: - raw: - | POST /dms/services/ServerUI HTTP/2 Host: Hostname Content-Type: text/xml Soapaction: "" soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope...