MINI-QXFQ-JG4J-3526

Bulletin has no description...

MINI-5399-FJ9X-3CM9

Bulletin has no description...

MINI-847X-V9C3-8284

Bulletin has no description...

MINI-WP83-W7PF-HR5X

Bulletin has no description...

MINI-25MR-QQMC-RQXM

Bulletin has no description...

MINI-95M9-MRP7-29W3

Bulletin has no description...

CVE-2026-74487

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

CVE-2026-74467

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAPNETADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE and SIOCQETHQUERYOAT with CAPNETADMIN capable check to ensure unprivileged users cannot invoke...

MINI-P249-J2GC-R3FC

Bulletin has no description...

MINI-HRCC-C7VX-FJ35

Bulletin has no description...

MINI-6M5F-R8M6-RFVW

Bulletin has no description...

MINI-PJC9-5MFR-RPFP

Bulletin has no description...

MINI-J4P4-QCH6-R62C

Bulletin has no description...

MINI-3JGX-7FWG-Q797

Bulletin has no description...

CVE-2026-17350

A flaw was found in pgAdmin 4. In SERVER mode, an authenticated user who has been explicitly denied access to a specific tool by an administrator could still bypass this restriction. This is due to inconsistent enforcement of the per-tool permission system, where backend routes and Socket.IO...

CVE-2026-16541

The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to see, allowing users with a low-privileged staff role to disclose the names and email addresses of arbitrary registered...

UBUNTU-CVE-2026-68457

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SETSPARSE, SETZERODATA and SETCOMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or fileattr helpers with the current ksmbd worker credentials. Those helpers...

CVE-2026-14229

The ECS WordPress plugin before version 4.3.8 lacks capability and post-status checks on its AJAX rendering action (ecsload), allowing unauthenticated attackers to retrieve rendered content of unpublished posts (private, draft, pending) by supplying a document identifier. CVSS 5.3 MEDIUM; CISA fl...

CVE-2026-16541

The Simply Schedule Appointments WordPress plugin (before 1.6.12.17) exposes user names and email addresses via its Users and Customers REST endpoints to any authenticated Team Member+ role, requiring only low privileges; the fix is to upgrade to version 1.6.12.17. No exploitation evidence is pro...

Security Bulletin: Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7362)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. Vulnerability Details CVEID:CVE-2026-7362 DESCRIPTION: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.12, and...