Important: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Out-of-bounds read via empty HTTP redirect Location header CVE-2026-93682 php: PHP: Archive entry injection via integer overflow in TAR parser CVE-2026-6103 php: PHP: Denial of Service...

CVE-2026-91530

Vulnerability in Oracle GoldenGate component: Admin Client Executable. Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle GoldenGate. Successful attacks of this vulnerabili...

CVE-2026-101755

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multip...

CVE-2026-101723

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector execut...

CVE-2026-101714

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Web Client. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require hum...

CVE-2026-101716

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Web Client. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

CVE-2026-101679

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-91530

A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...

CVE-2026-101771

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

CVE-2026-101772

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

CVE-2026-101770

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit...

CVE-2026-101755

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multip...

CVE-2026-101755

The MySQL Server and MySQL Cluster products from Oracle MySQL are affected by a vulnerability in the Client programs component, specifically impacting versions 26.7.0-26.7.1 . A low-privileged attacker with network access via multiple protocols can exploit this flaw with high complexity to cause ...

CVE-2026-101723

The Oracle Agile PLM MCAD Connector product (Oracle Supply Chain), specifically the CAX Client component in version 3.6 , is vulnerable to a security flaw. A low-privileged attacker with logon access to the underlying infrastructure can compromise the connector, potentially leading to a full take...

CVE-2026-101716

A vulnerability exists in the Web Client component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product, potentially resulting in unauthorized read access t...

CVE-2026-101714

A vulnerability exists in the Web Client component of Oracle Agile PLM (version 9.3.6). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, provided there is human interaction from a user other than the attacker. Successful exploitation may le...

CVE-2026-101679

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Client programs. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable...

CVE-2026-101679

A vulnerability exists in the Client programs component of Oracle MySQL products, specifically affecting MySQL Server (versions 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1) and MySQL Cluster (versions 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, and 26.7.0-26.7.1). An unauthenticated attacker with netwo...

kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

A flaw was found in the Linux kernel's Server Message Block SMB client. The coalescet2 function processes server-supplied DataOffset fields without proper validation against buffer boundaries. A remote attacker could exploit this by crafting malicious SMB responses. This could lead to out-of-boun...

Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

Summary IBM i Access Client Solutions ACS is affected by multiple vulnerabilities CVE-2026-94002, CVE-2026-94029 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-94002 DESCRIPTION: Possible memory exhaustion in SFTP clients DefaultSftpClient in component...