GHSA-CM56-MVX6-66QM vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

GHSA-FJ73-9FR6-G7MW vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

GHSA-GM9P-3W2C-C6QG vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

GHSA-PW9R-H2M6-6VVG vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53185 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53205 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53146 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53147 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53218 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-53220 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

GHSA-3886-873F-6XPF vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-azure, linux-qemu-melange, linux-gcp, linux-qemu...

CVE-2026-41857 - BOSH CLI Shell Injection | Cloud Foundry

High ● CVSSv4: High 7.1CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ● CVSSv3: High 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor CloudFoundry BOSH Versions Affected Severity is High unless otherwise noted. BOSH CLI – All versions prior to 7.10.5 inclusive Description ...

PT-2026-56586

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 12.1.8 PAN-OS versions prior to 11.2.13 PAN-OS versions prior to 11.1.16 PAN-OS versions prior to 10.2.18-h8 Description A command injection issue exists in the management plane of the software, specifically within the...

PT-2026-56568

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 6.20.0 Description An open redirect and server-side request forgery SSRF issue exists where attackers can redirect users to arbitrary URLs or perform client-side SSRF. This occurs when unvalidated HTTP/HTTPS URLs are...

Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS software enables an unauthenticate...

CVE-2026-54607

FastGPT is a knowledge-based AI application platform. Prior to 4.15.0-beta4, the HTTP-tool OpenAPI schema importer validates only the top-level URL before passing it to SwaggerParser.bundle, whose remote reference resolver fetches $ref URLs without FastGPT's internal-address guard and returns...

CVE-2026-55418 FastGPT: S3 presign/read handlers do not bind the object key to the caller's team (cross-team file disclosure)

FastGPT is an open source AI knowledge base platform. Prior to v4.15.0-beta5, two FastGPT file handlers authorize an unrelated resource and then sign or read an S3 object using a key taken directly from the request, without checking that the key belongs to the caller's team. Because S3 object key...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authorization bypass vulnerability (CVE-2026-11714)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authorization bypass vulnerability with the apiDiscovery-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a server-side request forgery vulnerability (CVE-2026-11546)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...