Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-56584

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.6 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber , a specialized artificial intelligence AI model built atop 3.5 Flash that's designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model will be exclusively...

Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

Summary Vulnerabilities in Apache Tomcat affect the product's management GUI could cause confidentiality, integrity and availability impacts. The CLI is unaffected. CVE-2025-48976 CVE-2025-48988 CVE-2025-49125 CVE-2025-53506 CVE-2025-52434 CVE-2025-55752 CVE-2025-61795. Vulnerability Details...

CVE-2026-56584 HCL IEM was affected with the Information disclosure nginx server

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

EUVD-2026-46273

HCL IEM was affected with the Information disclosure nginx server. It may enable attackers to identify outdated software versions and target known vulnerabilities or publicly available exploits...

USN-8579-1: snapd vulnerabilities

James Henstridge discovered that snapd's default apparmor template did not restrict access to systemd-userdbd varlink interface. A local attacker could possibly use this issue to obtain sensitive information. CVE-2024-5300 Qualys discovered that snap-confine can be tricked to create...

GHSA-JPW9-PFVF-9F58 vulnerabilities

Vulnerabilities for packages: litellm, semgrep...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: unleash-proxy, arangodb, gitlab-rails-ce, gitlab-rails-ce-fips, kibana, redisinsight, kubescape-grype-offline-db, langfuse-fips, argo-workflows, azurite, wazuh-dashboard-fips, tileserver-gl-fips, sqlpad, thingsboard-fips, kubeflow-pipelines, unleash-fips,...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: saf, kibana, redisinsight, sqlpad...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: saf, gitlab-rails-ce, lerna, gitlab-rails-ce-fips, pulumi, npm, kubeflow-centraldashboard, opensearch-dashboards-fips, kibana, prism, sqlpad, wazuh-dashboard-fips, actions-runner, graalvm, wazuh-dashboard, code-server, opensearch-dashboards...

GHSA-MP7J-QC5W-4988 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, arangodb, gitlab-rails-ce-fips...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, arangodb, gitlab-rails-ce-fips...

GHSA-MW54-J2V2-42HR vulnerabilities

Vulnerabilities for packages: litellm, datadog-agent-fips, datadog-agent...

GHSA-RJWR-M7QX-3FJR vulnerabilities

Vulnerabilities for packages: crossplane-fips, crossplane...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: code-server, saf, npm, kubeflow-centraldashboard, prism, sqlpad, pulumi, lerna...

[SECURITY] [DSA 6393-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6393-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 21, 2026 https://www.debian.org/security/faq -...

vulnerabilities present in Microsoft Office

Microsoft has uncovered vulnerabilities in various Office products, such as Word, Excel, PowerPoint, and SharePoint. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. For successful exploitation, the...

Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. CVE-2026-41681:...