February 10, 2026—KB5075971 (Monthly Rollup)

None None...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, nerdctl-fips, distribution, logstash, docker-compose, policy-bot, flux-source-watcher-fips, newrelic-k8s-metadata-injection-fips, rekor, sbom-scorecard, sriov-network-device-plugin, cluster-api-azure-controller, tetragon-fips, calico,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, nerdctl-fips, distribution, logstash, docker-compose, policy-bot, flux-source-watcher-fips, newrelic-k8s-metadata-injection-fips, rekor, sbom-scorecard, sriov-network-device-plugin, cluster-api-azure-controller, tetragon-fips, calico,...

AVEVA PI to CONNECT Agent

RISK EVALUATION Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...

[SECURITY] Fedora 43 Update: rust-rd-agent-2.2.5-14.fc43

Management agent for resctl-demo...

[SECURITY] Fedora 43 Update: rust-crypto-auditing-agent-0.2.4-3.fc43

Event collector agent for crypto-auditing project...

[SECURITY] Fedora 43 Update: rust-afterburn-5.10.0-3.fc43

A simple cloud provider agent...

[SECURITY] Fedora 43 Update: keylime-agent-rust-0.2.8-10.fc43

The Keylime agent...

AMD Graphics Driver Vulnerabilities – February 2026

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description | CVSS Score ---|---|--- CVE-2024-36324| Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.| 8.8 High...

Exploit for CVE-2026-2256

CVE-2026–2256 PoC Executive Summary A critical command in...

GitLab AI Gateway 安全漏洞

GitLab AI Gateway is an artificial intelligence service middleware provided by the US company GitLab. Versions 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 of GitLab AI Gateway contain security vulnerabilities. These vulnerabilities stem from insecure template extensions of data provided ...

ROS-20260209-73-0039

A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...

SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity

Deep Reinforcement Learning DRL has achieved remarkable success in domains requiring sequential decision-making, motivating its application to cybersecurity problems. However, transitioning DRL from laboratory simulations to bespoke cyber environments can introduce numerous issues. This is furthe...

ROS-20260209-73-0040

A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...

ROS-20260209-73-0041

A vulnerability in the Agent component of the Zabbix IT infrastructure monitoring system is related to the use of an insecure search path. Exploitation of the vulnerability could allow an attacker to gain write access to arbitrary system files in the /home/cecuser directory...

PT-2026-6965

Name of the Vulnerable Software and Affected Versions OpenCode affected versions not specified Description The software contains a remote code execution RCE issue. The RCE is triggered through command injection within JSON data sent to the AI agent. This allows for the execution of arbitrary...

CyberExplorer: Benchmarking LLM Offensive Security Capabilities in a Real-World Attacking Simulation Environment

Real-world offensive security operations are inherently open-ended: attackers explore unknown attack surfaces, revise hypotheses under uncertainty, and operate without guaranteed success. Existing LLM-based offensive agent evaluations rely on closed-world settings with predefined goals and binary...

CVE-2025-13818

Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...

SUSE CVE-2026-24740

Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle's agent-backed shell endpoints allows a user restricted by label filters for example, label=env=dev to obtain an interactive root shell in out-of-scope containers for example, env=prod on the same agen...

ICE Agent’s ‘Dragging’ Case May Help Expose Evidence in Renee Good Shooting

The government has withheld details of the investigation of Renee Good’s killing—but an unrelated case involving the ICE agent who shot her could force new revelations...