CLEANSTART-2026-AB94931 Security fixes in postgresql 9.6.4-r0

Package postgresql version 9.6.4-r0 fixes 3 vulnerabilities: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548...

CLEANSTART-2026-AG72507 Security fixes in dex 2.45.1-r3

Package dex version 2.45.1-r3 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-RT51509 Security fixes in mockgen 0.6.0-r1

Package mockgen version 0.6.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-VK07836 Security fixes in terragrunt-fips 0.94.0-r3

Package terragrunt-fips version 0.94.0-r3 fixes 13 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...

CLEANSTART-2026-TS90565 Security fixes in curl 8.4.0-r0

Package curl version 8.4.0-r0 fixes 2 vulnerabilities: CVE-2023-38545, CVE-2023-38546...

CLEANSTART-2026-QN68353 Security fixes in spark-sc213-jdk17-py312 4.0.3-r0

Package spark-sc213-jdk17-py312 version 4.0.3-r0 fixes 10 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-3g76-f9xq-8vp6...

CLEANSTART-2026-AA33839 Security fixes in activemq 6.2.3-r1

Package activemq version 6.2.3-r1 fixes 10 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-22745, CVE-2026-22741...

EUVD-2026-51038

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-44103 JupiCore does not perform validation of firmware

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

CVE-2026-44103

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.1-0.1.hum1 aarch64, x8664 nodejs24-bin-24.18.1-0.1.hum1 noarch nodejs24-devel-24.18.1-0.1.hum1 aarch64, x8664 nodejs24-docs-24.18.1-0.1.hum1 noarch...

The vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5 lies in the excessive capabilities for decompressing updates. This allows a malicious entity with pre-compromised network management centers (NMCs) to create specially modified update packages, distribute them to managed PAKs, and thereby compromise the integrity of their operating environments.

Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, due to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating from a pre-compromised network management...

CVE-2026-44097: Unrestricted Upload of File with Dangerous Type

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

PT-2026-66431

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

Fedora 44 : wordpress (2026-2b8250197a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2b8250197a advisory. Version 6.9.5 Security updates - A facilitated SQL injection issue - A REST API batch-route confusion and SQL injection issue leading to Remote Code Executio...

RHEL 9 : grafana (RHSA-2026:47714)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47714 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/tls:...

kernel security, bug fix, and enhancement update

6.12.0-211.40.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

WP2Shell WordPress Exploit Technical Analysis and Real Attack Data

On July 17th, 2026, the WordPress Security Team released updates to WordPress core addressing a critical vulnerability chain that can be leveraged by unauthenticated attackers to create an administrator account and then execute code through normal administrator capabilities, such as uploading a...

Tame Dependabot: Group your updates, slow the cadence, keep security fast

If you maintain an active repository, you know the feeling. You open your notifications on a Monday morning and there they are: five, 10, sometimes a dozen Dependabot pull requests, each bumping a single dependency by a single patch version. Individually, every one of them is helpful. Collectivel...