CVE-2026-66722

Apache CloudStack is affected by an improper authorization flaw in the Project Roles and Project Role Permissions CRUD operations. The root cause is that the authorization check only verifies the caller holds the Domain Admin role, without confirming whether the target project belongs to the call...

CVE-2026-66722 Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

EUVD-2026-63832

Improper authorization for CRUD operations on Project Roles and Project Role permissions for domain admins in CloudStack. A Domain Admin can create, update, delete, and list project roles and project role permissions for projects in any domain, not just their own. The check only confirms the call...

Security Bulletin: Multiple Vulnerabilities in watsonx.data

Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 5 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-42577 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to...

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b928f1f0d3af6242391cc626a8601d24f60c70d862bfebe6cfe0777c13a8c0b2 During installation, package executes an embedded executable. The executable is capable of executing remote commands, establishing persistence, cryptomining,...

CVE-2026-16323

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

Several vulnerabilities exist in IBM AIX and IBM PowerVM VIOS.

IBM has hidden vulnerabilities in AIX and PowerVM VIOS. Additionally, IBM has also hidden previous vulnerabilities in products such as DB2, WebSphere, Oracle products like Java and GraalVM, PostgreSQL, OpenSSH, and Perl, for products produced for use with AIX. A malicious individual could exploit...

The invisible passenger in your car

While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary user app yet made no attempt to disguise itself as legitimate software: it had no user interface at all. This led us to suspect the app mig...

CVE-2026-16323 Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

EUVD-2026-63825

Execution after redirect EAR vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin Panel allows Authentication Bypass. This issue affects ArchitectPanel Web Admin Panel: through 28072026...

CVE-2026-16323

FuyaWeb's ArchitectPanel Web Admin Panel suffers an Execution After Redirect (EAR) flaw allowing unauthenticated remote attackers to bypass authentication and read confidential data (CVSS 7.5 HIGH). Affected through 28072026; no patch version or exploitation evidence provided in the documents.

CVE-2026-16576

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor...

ROOT-APP-NPM-CVE-2026-67214 CVE-2026-67214 in nanoid - Patched by Root

Root has patched CVE-2026-67214 in the nanoid package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54275 CVE-2026-54275 in aiohttp - Patched by Root

Root has patched CVE-2026-54275 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-50269 CVE-2026-50269 in aiohttp - Patched by Root

Root has patched CVE-2026-50269 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54277 CVE-2026-54277 in aiohttp - Patched by Root

Root has patched CVE-2026-54277 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54280 CVE-2026-54280 in aiohttp - Patched by Root

Root has patched CVE-2026-54280 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69244 CVE-2026-69244 in aiohttp - Patched by Root

Root has patched CVE-2026-69244 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-47068 CVE-2024-47068 in rollup - Patched by Root

Root has patched CVE-2024-47068 in the rollup package for Root:npm. Multiple fixed versions available...

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...