CVE-2026-62652: Insertion of Sensitive Information Into Debugging Code

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...

PT-2026-87011

Name of the Vulnerable Software and Affected Versions Reyrolle 7SR5 versions prior to V2.70 Description Improper validation of input received via a proprietary communication protocol occurs when the device is in a special firmware-update mode. This flaw leads to a memory corruption condition, whi...

PT-2026-89114

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description When WITH UNCOMPRESSED CODEC is enabled, the heif context add image tile function accepts a tile with component-plane dimensions that differ from the prototype image geometry. The ImageItem...

PT-2026-95572

This update for kernel-livepatch-MICRO-6-0 Update 29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

PT-2026-88102

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description An improper link resolution before file access, known as link following, occurs within the Windows Update Stack. This issue allows an authorized attacker to elevate their...

VulnCheck KEV: CVE-2026-81963

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...

OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media

These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89117

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.23.2 Description The heif region item add region inline mask data function in libheif/api/libheif/heif regions.cc accepts the mask data len parameter without verifying if it matches the byte count required by the...

PT-2026-87105

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-88247

In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-62653: Out-of-bounds Write

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

OPENSUSE-SU-2026:11726-1 python313-pypdf-6.16.2-3.1 on GA media

These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : redhat-ds:12 (RHSA-2026:65375)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:65375 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol LDAP...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

valkey security, bug fix, and enhancement update

8.0.10-1 - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...

ALSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

Apple Security Update: iOS 26.6.2 and iPadOS 26.6.2

Apple recommends to install security update iOS 26.6.2 and iPadOS 26.6.2 on devices iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later...

APSB26-132 : Security updates available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...