PT-2026-57679

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

Progress MOVEit Transfer 2023.0.x / 2023.1.x < 2023.1.16 / 2024.0.x / 2024.1.x < 2024.1.7 / 2025.0.x < 2025.0.3 Uncontrolled Resource Consumption (October 2025)

The version of Progress MOVEit Transfer, formerly Ipswitch MOVEit DMZ, installed on the remote host is affected by an uncontrolled resource consumption vulnerability as referenced in Progress Community article 000291424. - Uncontrolled Resource Consumption vulnerability in Progress MOVEit Transfe...

Debian dla-4680 : imagemagick - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4680 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4680-1 [email protected]...

Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang: golang crypto/x509: Deni...

ALSA-2026:38995 Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang: golang crypto/x509: Deni...

BIT-AIRFLOW-2026-48891 Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

CVE-2026-15513

The CVE-2026-15513 vulnerability affects the Wavlink WL-NU516U1 (model 260515) in the CGI handler /cgi-bin/adm.cgi, specifically the wlink_uci_set_value function. An attacker can remotely manipulate the lan_ip argument to trigger an OS command injection. Impact is described as network-accessible ...

CVE-2026-45571 affecting package packer for versions less than 1.9.5-17

CVE-2026-45571 affecting package packer for versions less than 1.9.5-17. An upgraded version of the package is available that resolves this issue...

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1

CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] [DLA 4678-1] libxfont security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura July 12, 2026 https://wiki.debian.org/LTS -...

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15488 hcr707305003 shiroiAdmin FileController.php upload unrestricted upload

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...