CVE-2026-85187 itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-85187

itsourcecode Online Medicine Delivery System 1.0 is affected by an SQL injection vulnerability in the Order::pupdate function within the file /rider/orders/controller.php?action=edit&actions=confirm (component: Order Status Update). The vulnerability is triggered by manipulating the ID argument, ...

EUVD-2026-70648

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CLSA-2026-1788450984 TuxCare security update for nuxt (11 CVEs)

TuxCare rebuilt nuxt to address 11 CVEs. Fixed in 3.12.4-tuxcare.12...

MINI-VQ4M-CFCQ-9977

Bulletin has no description...

CVE-2026-71403

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...

CVE-2026-84971 Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to contro...

CVE-2026-71403 Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...

CLSA-2026-1788446203 TuxCare security update for org.springframework.data (2 CVEs)

TuxCare rebuilt 3 org.springframework.data packages to address 2 CVEs. Fixed in 3.4.18-tuxcare.8...

CLSA-2026-1788443284 TuxCare security update for io.micronaut (1 CVE)

TuxCare rebuilt 41 io.micronaut packages to address 1 CVE. Fixed in 4.5.4-tuxcare.1...

CLSA-2026-1788442788 TuxCare security update for org.apache.logging.log4j (2 CVEs)

TuxCare rebuilt 32 org.apache.logging.log4j packages to address 2 CVEs. Fixed in 2.17.1-tuxcare.4...

CLSA-2026-1788442611 TuxCare security update for aiohttp (1 CVE)

TuxCare rebuilt aiohttp to address 1 CVE. Fixed in 3.8.1.post12+tuxcare...

CLSA-2026-1788442606 TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.22.4.post8+tuxcare...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

SUSE-SU-2026:3961-1 Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. bsc1268596 - Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. - Fix flag parsing so tha...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.1.hum1 aarch64, x8664 grafana13.2-13.2.1-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: util-linux: libblkid-2.42.2-3.4.hum1 aarch64, x8664 libblkid-devel-2.42.2-3.4.hum1 aarch64, x8664 libfdisk-2.42.2-3.4.hum1 aarch64, x8664 libfdisk-devel-2.42.2-3.4.hum1 aarch64, x8664...

CLSA-2026-1788438779 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 4.0.post17+tuxcare...

CLSA-2026-1788438777 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.2.post7+tuxcare...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.97 packages and security update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...