PT-2026-117491

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This occurs due to a heap buffer overflow—a condition where data exceeds the allocated memory...

RHEL 8 : python3 (RHSA-2026:85239)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85239 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

PT-2026-117665

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the XCF loader allows a dangling pointer to remain in the linked-channels list when a linked channel is destroyed through a selection property. A use-after-free occurs in the main...

PT-2026-117406

RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posix fs sources and fs sinks. Attackers holding schema CREATE privilege can set posix fs.root or fs.path to any directory to read...

Langflow 1.2.0 Code Injection

Langflow versions prior to 1.3.0 contain an unauthenticated code injection vulnerability in the /api/v1/validate/code endpoint. The supplied CTF lab recreates the vulnerable validation logic, and its proof of concept executes commands against the target to retrieve its flag...

Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling...

RHEL 9 : emacs (RHSA-2026:85245)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85245 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the...

ALSA-2026:84591 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

Palo Alto Networks PAN-OS GlobalProtect Command Injection

Palo Alto Networks PAN-OS GlobalProtect configurations contain an unauthenticated command injection vulnerability that can result in arbitrary file creation and root-level code execution...

PT-2026-117656

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The FlashPix JPEG-tile decoder in the Pillow imaging library contains a flaw where decoded scanlines can be written beyond the allocated tile buffer. This occurs because FlashPix FPX JPEG decoding...

CVE-2024-4457

The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server. Successful exploitation of this vulnerability enabl...

EUVD-2024-55805

The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server. Successful exploitation of this vulnerability enabl...

GIMP resource management error vulnerabilities

GIMP has a resource management vulnerability. This vulnerability arises because the XCF loader may leave empty pointers in the link channel list after the link channel’s properties are destroyed by the selection attribute. Opening a specially crafted XCF file can cause the GIMP main process to...

WSO2 Enterprise Integrator code injection vulnerability

The WSO2 Enterprise Integrator version 6.6.0 up to 6.6.0.205 contained a code injection vulnerability. This vulnerability stemmed from insufficient data validation for user-provided data, allowing malicious Expression Language EL code to be injected. Attackers with administrative privileges could...

Apache Camel deserialization injection vulnerability

Apache Camel versions prior to 2.11.0 through 4.18.5, as well as versions from 4.19.0 through 4.22.1, have security vulnerabilities. These vulnerabilities stem from the Apache Camel Spring Redis component using JdkSerializationRedisSerializer when a serialization option is not configured...

Dell Application Store permissions and access control vulnerabilities

Versions of the Dell Application Store prior to 26.05.0.7 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper control of path elements, which may allow low-privilege attackers with local access to escalate their privileges and execute...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0, 3.9.1, 3.9.2, 4.0.0, 4.0.1, 4.0.2, 4.0.3, and 4.0.4 have a buffer error...

MLJAR Mercury authorization issue vulnerability

The MLJAR mercury version prior to 3.2.6 has an authorization issue vulnerability. This vulnerability stems from the default lack of token deployment, allowing anonymous clients to create Jupyter kernels and send executerequest messages containing arbitrary Python code. Additionally, the endpoint...

Dell Application Store Authorization Issues Vulnerability

Versions of the Dell Application Store prior to 26.05.0.7 have a vulnerability related to authorization. This vulnerability stems from the lack of authentication for critical functions, allowing attackers with unauthenticated access and network access rights to execute arbitrary code...

Red Hat Enterprise Linux Input Validation Vulnerability

Red Hat Enterprise Linux versions 8, 9, and 10, as well as Red Hat Hardened Images version 1, have a vulnerability in input validation. This vulnerability arises from bootc, under the default container signature policy, automatically or manually upgrading variable image tags that fall under...