org.glassfish.main.admingui:admingui (>=7.0.0-m10, <=9.0.0-m1), org.glassfish.main.admingui:console-cluster-plugin (>=7.0.0-m10, <=9.0.0-m1) +20 more potentially affected by CVE-2026-2586 via org.glassfish.jsftemplating:jsftemplating (>=4.0.0, <=4.1.0)

org.glassfish.jsftemplating:jsftemplating MAVEN version =4.0.0, =7.0.0-m10, =7.0.0-m10, =7.0.16, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =7.0.0-m10, =9.0.0-m1 and more Source cves: CVE-2026-2586 Sour...

ANT-2026-DJBBBBPE · temporalio/temporal · Broken Access Control

broken-access-control low CVE-2026-5199 Severity Claude critical · Security research firm - · Maintainer low Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-DJBBBBPE: Cross-namespace manipulation including deletion of workflows on the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iouring: Fixed a fget leak when the file system does not support nowait buffered reads. Heming reported a bug when using iouring for link-cp operations on ocfs2. 1 The following steps can reproduce this bug: mount -t ocfs2 /dev/v...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: A bug that led to out-of-bounds access was fixed in the mchpipcgetclusteraggrirq function. The clustercfg array is dynamically allocated to hold per-CPU configuration structures. Its size is determined by t...

PT-2026-78511

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.0.0 through 4.14.5 Wazuh versions 5.0.0-beta1 through 5.0.0-beta2 Description An issue exists where the cluster.unmerge info function in framework/wazuh/core/cluster/cluster.py constructs paths using peer-controlled merge type...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-021655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021655 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2getinitinode fails syzbot is reporting busy inodes after unmount, for...

Veritas Technologies Infoscale Operations Manager: Cross-site Request Forgery Vulnerability

Veritas Technologies Infoscale Operations Manager is a software developed by Veritas Technologies in the United States, used for managing the entire InfoScale deployment. This software offers features such as multi-cluster management, custom interfaces, and centralized audit logging. Version 9.1....

Veritas InfoScale CmdServer Access Control Vulnerability

Veritas InfoScale CmdServer is a command execution and remote management service component provided by Veritas Corporation in the US, designed for InfoScale cluster environments. Versions of Veritas InfoScale CmdServer prior to 7.4.2 contained an access control vulnerability, which was caused by...

org.glassfish.main.admingui:console-cluster-plugin (7.0.14), org.glassfish.main.admingui:console-common-full-plugin (7.0.14) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.14)

org.glassfish.main.admingui:console-common MAVEN version 7.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.14 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.1), org.glassfish.main.admingui:console-common-full-plugin (7.0.1) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.1)

org.glassfish.main.admingui:console-common MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.1 -...

org.glassfish.main.admingui:console-cluster-plugin (6.2.0), org.glassfish.main.admingui:console-common-full-plugin (6.2.0) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (6.2.0)

org.glassfish.main.admingui:console-common MAVEN version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.2.0 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.0-m2), org.glassfish.main.admingui:console-common-full-plugin (7.0.0-m2) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.0-m2)

org.glassfish.main.admingui:console-common MAVEN version 7.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.0-m2 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.9), org.glassfish.main.admingui:console-common-full-plugin (7.0.9) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.9)

org.glassfish.main.admingui:console-common MAVEN version 7.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.9 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.0-m10), org.glassfish.main.admingui:console-common-full-plugin (7.0.0-m10) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.0-m10)

org.glassfish.main.admingui:console-common MAVEN version 7.0.0-m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.0-m10 -...

org.glassfish.main.admingui:console-cluster-plugin (5.0), org.glassfish.main.admingui:console-common-full-plugin (5.0) +8 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (5.0)

org.glassfish.main.admingui:console-common MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0 -...

org.glassfish.main.admingui:console-cluster-plugin (6.0.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (6.0.0-rc1) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (6.0.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 6.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 6.0.0-rc1 -...

org.glassfish.main.admingui:console-cluster-plugin (7.1.0), org.glassfish.main.admingui:console-commandrecorder-plugin (7.1.0) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.1.0)

org.glassfish.main.admingui:console-common MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.1.0 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.24), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.24) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.24)

org.glassfish.main.admingui:console-common MAVEN version 7.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.24 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.20), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.20) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.20)

org.glassfish.main.admingui:console-common MAVEN version 7.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.20 -...

org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc2), org.glassfish.main.admingui:console-common-full-plugin (5.1.0-rc2) +9 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (5.1.0-rc2)

org.glassfish.main.admingui:console-common MAVEN version 5.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.1.0-rc2 -...