RHSA-2026:52392 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

RHSA-2026:52393 Red Hat Security Advisory: mod_md security update

Bulletin has no description...

RHSA-2026:52390 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2026:52391 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

CLSA-2026-1786356355 TuxCare security update for 75 packages (2 CVEs)

TuxCare rebuilt 75 packages to address 2 CVEs. Fixed in 9.4.24.v20191120-tuxcare.4...

CLSA-2026-1786355374 TuxCare security update for angular-sanitize (8 CVEs)

TuxCare rebuilt angular-sanitize to address 8 CVEs. Fixed in 1.5.11-tuxcare.1...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2026-1786348732 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 2 CVEs. Fixed in 6.2.7-tuxcare.2...

CLSA-2026-1786348544 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.27-tuxcare.7...

CVE-2026-18030

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...

CLSA-2026-1786345204 TuxCare security update for org.apache.avro (1 CVE)

TuxCare rebuilt 17 org.apache.avro packages to address 1 CVE. Fixed in 1.8.2-tuxcare.4...

CLSA-2026-1786343823 TuxCare security update for io.netty (3 CVEs)

TuxCare rebuilt 43 io.netty packages to address 3 CVEs. Fixed in 4.1.63.Final-tuxcare.4...

CLSA-2026-1786342480 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 4 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.4...

CLSA-2026-1786342108 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 4 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.3...

CVE-2026-16985 Squeeze < 1.7.12 - Author+ Arbitrary File Upload

The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...

CVE-2026-16985

The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...

CVE-2026-14941

CVE-2026-14941 affects the Customer Reviews for WooCommerce WordPress plugin prior to 5.116.0. The vulnerability arises because several settings-related AJAX actions do not perform nonce or capability checks, allowing users with minimal permissions (e.g., Subscribers) to invoke administrative set...

CVE-2026-18030

CVE-2026-18030 concerns the BricksForge WordPress plugin prior to version 3.1.8.8. The vulnerability arises because the plugin does not verify the requester’s identity when processing a password change via a Pro Forms action in update mode, allowing unauthenticated attackers to set an arbitrary p...

EUVD-2026-55038

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...