CVE-2026-31531 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

CVE-2026-31583 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

CVE-2026-31622 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

CVE-2026-31623 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

GHSA-GGGW-8CQ2-45CP vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

CVE-2026-31580 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

CVE-2026-31627 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

GHSA-5FX9-VHX9-34XX vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-aws, linux-vmware, linux-gcp...

GHSA-9H3V-WRPM-Q7M5 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

GHSA-9M92-4VQV-MRJ9 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu, linux-gcp, linux-azure...

Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks

Cybersecurity researchers are warning of two cybercrime groups that are carrying out "rapid, high-impact attacks" operating almost within the confines of SaaS environments, while leaving minimal traces of their actions. The clusters, Cordial Spider aka BlackFile, CL-CRI-1116, O-UNC-045, and UNC66...

CSPM vs Exposure Management: Key Differences

Your CSPM tool flags 4,000 misconfigurations every month. Your team remediates 400. Attackers only need one. That gap between what your posture tools report and what actually puts your organization at risk is exactly where exposure management picks up. Book a demo to see how Hive Pro's Uni5 Xposu...

[SECURITY] Fedora 44 Update: openbao-2.5.3-1.fc44

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

CVE-2026-22726

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks...

CVE-2026-22726 Route Services Firewall Bypass

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks...

EUVD-2026-26458

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks...

CVE-2026-22726 Route Services Firewall Bypass

Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks...

CVE-2026-3259

A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform allows an authenticated user to potentially disclose sensitive data using a crafted materialized view that triggers a runtime error...

GHSA-56C3-VFP2-5QQJ n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders

Impact In the SDK embedder path N8NDocumentationMCPServer constructor, getN8nApiClient, and validateInstanceContext, the synchronous URL validator in SSRFProtection.validateUrlSync had no IPv6 checks. IPv4-mapped IPv6 addresses such as http://::ffff:169.254.169.254 bypassed the cloud-metadata,...

Server-side Request Forgery (SSRF)

Overview n8n-mcp is an Integration between n8n workflow automation and Model Context Protocol MCP Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the SSRFProtection.validateUrlSync function in the src/utils/ssrf-protection.ts component. An attacker can rea...