CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, bank-vaults-vault-operator, crossplane-provider-aws-cloudfront-fips, perses, kubernetes-csi-livenessprobe-fips, tbot,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: percona-xtradb-cluster-operator, kubernetes-csi-driver-nfs, prometheus-fips, kserve-modelmesh-serving, kubernetes-csi-node-driver-registrar-fips, bank-vaults-vault-operator, crossplane-provider-aws-cloudfront-fips, perses, kubernetes-csi-livenessprobe-fips, tbot,...

GHSA-7WWH-XCC3-9FCG Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module

Summary The PayPal webhook endpoint /extensions/paypal/webhook processes the PAYPAL-CERT-URL HTTP header without validation, allowing attackers to control server-side HTTP request destinations. Technical details: The /extensions/paypal/webhook endpoint processes incoming webhook requests and trus...

CVE-2026-12249

An issue was discovered in Canonical ADSys upstream versions through v0.16.2. During Active Directory Certificate Services AD CS certificate auto-enrollment via the vendored Samba client script internal/policies/certificate/python/vendorsamba/gp/gpcertautoenrollext.py, ADSys utilizes a plaintext...

CERTFR-2026-ACT-027

creationtimestamp| type| source ---|---|--- 2026-06-22 13:28:44+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mouyjlshrm2z 2026-06-22 13:29:08+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116793994374387639 2026-06-22 13:36:55+00:00| seen|...

CVE-2025-48571

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931...

CVE-2025-48617

creationtimestamp| type| source ---|---|--- 2026-06-21 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260622 2026-06-21 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1931 2026-08-28 18:00:05+00:00| seen|...

CVE-2026-54221

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:58:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6zj5mne2o...

CVE-2026-54222

creationtimestamp| type| source ---|---|--- 2026-06-18 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-54219 2026-06-18 15:53:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mol6qkof7z2j...

CVE-2026-40455

creationtimestamp| type| source ---|---|--- 2026-06-18 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-40455 2026-06-18 13:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwmyt6s62t...

CVE-2026-50643

creationtimestamp| type| source ---|---|--- 2026-06-18 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-50643 2026-06-18 11:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokroeslwu2f...

CVE-2026-12293

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618 2026-06-22 00:40:48+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnlcsy2u2f 2026-07-01 13:16:01+00:0...

CVE-2026-12303

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-12295

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-12297

creationtimestamp| type| source ---|---|--- 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2026-46949

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 15:07:07+00:00| seen|...

CVE-2026-46812

creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1923...

CVE-2026-8484

creationtimestamp| type| source ---|---|--- 2026-06-16 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-8484 2026-10-07 04:16:09+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mxb3jy5few2f...

CVE-2026-5482

creationtimestamp| type| source ---|---|--- 2026-06-15 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-5482 2026-06-15 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116754364893455307 2026-06-15 13:30:28+00:00| seen|...

kernel security update

4.18.0-553.132.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...