PYSEC-2026-3640 Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint

Summary DELETE /api/v1/chats/id cancelled a chat's in-flight tasks before it checked whether the caller was allowed to delete that chat. Any authenticated user who knew another user's chat id could therefore abort that user's running model response, title generation or tag generation. The deletio...

EUVD-2026-55221

An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points receivers without the required alert.notifications.receivers.protected:write permission...

CVE-2026-72575 daptin - Authentication Bypass via Null Owner Permission Check on usergroup Objects

An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records. The permission check functions CanRead, CanPeek, CanCreate, CanUpdate, CanDelete, CanRefer in server/permission/permission.go return tr...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-71391 Off-by-One Error in GNU Emacs for Android

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-71391

GNU Emacs for Android is affected by an off-by-one in the gvar table parser (src/sfnt.c). The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_compound_glyph() uses a > comparison instead of >=, allowing a crafted TrueType variable font to bypass the check an...

RHSA-2026:52667 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

Security Bulletin:Vulnerability in Crypto affects IBM Netezza Appliance

Summary The Crypto package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2025-68121 Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

PT-2026-69513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/gfx12 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

ruby:3.3 security, bug fix, and enhancement update

ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg...

PT-2026-69533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel BUG occurs during driver unload due to an invalid state transition in the ice driver. When a Physical Function PF reset happens while the Precision Time Protocol PTP state is IC...

Linux Distros Unpatched Vulnerability : CVE-2026-68203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vivid: fix cleanup bugs in vividinit When platformdeviceregister fails in vividinit, the embedded struct device in vividpdev has already been initialized...

PT-2026-69515

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/gfx10 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

CVE-2026-68315: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctpprocessstrresetinreq When processing a RESETINREQUEST from a peer, sctpprocessstrresetinreq derives the stream count from the parameter length but does not check whether the resulting...

PT-2026-69650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/sdma5.2 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The BUG ON function is a kernel...

PT-2026-69715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists when processing a RESET IN REQUEST from a peer. The function sctp process strreset inreq derives the stream count from the parameter length without verifying if the...

PT-2026-69754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firewire network component during fragmented datagram reassembly. The fwnet frag new function maintains a sorted list of received fragments for partial datagrams...

PT-2026-69512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/gfx9.4.3 component where the use of the BUG ON function can cause the kernel to crash unnecessarily in certain cases. The fix involves replacing BUG ON...

PT-2026-69723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the TIPC UDP bearer replicast list updates. The functions tipc udp rcast add and cleanup bearer both update the ub-rcast.list using list add rcu and list del r...