org.glassfish.main.admingui:console-cluster-plugin (7.1.0-m1), org.glassfish.main.admingui:console-commandrecorder-plugin (7.1.0-m1) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.1.0-m1)

org.glassfish.main.admingui:console-common MAVEN version 7.1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.1.0-m1 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.0-m10), org.glassfish.main.admingui:console-common-full-plugin (7.0.0-m10) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.0-m10)

org.glassfish.main.admingui:console-common MAVEN version 7.0.0-m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.0-m10 -...

org.glassfish.main.admingui:console-cluster-plugin (5.0), org.glassfish.main.admingui:console-common-full-plugin (5.0) +8 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (5.0)

org.glassfish.main.admingui:console-common MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.10), org.glassfish.main.admingui:console-common-full-plugin (7.0.10) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.10)

org.glassfish.main.admingui:console-common MAVEN version 7.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.10 -...

org.glassfish.main.admingui:console-cluster-plugin (>=8.0.0-m1, <=8.0.1), org.glassfish.main.admingui:console-commandrecorder-plugin (>=8.0.0-m7, <=8.0.1) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (>=8.0.0-m1, <=8.0.1)

org.glassfish.main.admingui:console-common MAVEN version =8.0.0-m1, =8.0.0-m1, =8.0.0-m7, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.1 Source cves: CVE-2026-2586 Source advisory: OSV:GHSA-96V6-HQ43-X9H4...

org.glassfish.main.admingui:console-cluster-plugin (7.0.9), org.glassfish.main.admingui:console-common-full-plugin (7.0.9) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.9)

org.glassfish.main.admingui:console-common MAVEN version 7.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.9 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.17), org.glassfish.main.admingui:console-commandrecorder-plugin (7.0.17) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.17)

org.glassfish.main.admingui:console-common MAVEN version 7.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.17 -...

org.glassfish.main.admingui:console-cluster-plugin (7.0.15), org.glassfish.main.admingui:console-common-full-plugin (7.0.15) +10 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (7.0.15)

org.glassfish.main.admingui:console-common MAVEN version 7.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 7.0.15 -...

org.glassfish.main.admingui:console-cluster-plugin (4.1), org.glassfish.main.admingui:console-common-full-plugin (4.1) +11 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (4.1)

org.glassfish.main.admingui:console-common MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=8.0.1), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=8.0.1) +16 more potentially affected by CVE-2026-2586 via org.glassfish.main.admingui:console-common (>=3.1.2, <=8.0.1)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =8.0.1 and more Source cves: CVE-2026-2586 Source advisory: MEND:CVE-2026-2586...

BELL-CVE-2026-32177

Bulletin has no description...

Security update for erlang26

This update for erlang26 fixes the following issues Security issues: CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc1259681...

tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

A flaw was found in the CGI servlet component of Apache Tomcat. This vulnerability allows a security constraint bypass via improper handling of case sensitivity in the pathInfo component of a URI mapped to the CGI servlet...

CVE-2026-5203

creationtimestamp| type| source ---|---|--- 2026-05-19 03:00:11+00:00| published-proof-of-concept| Telegram/-GtOjHLopjI3IaPVfvZorB58d5FmtAfesT4Onu4QlAoHy4...

zparty

Zparty Automated web penetration testing framework with loc...

MAL-2026-4099 Malicious code in @antv/x6-common (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

Critical: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 For more details about the security issues, including the impact, a CVSS...

CVE-2026-4881

creationtimestamp| type| source ---|---|--- 2026-05-18 23:56:50+00:00| seen| https://gist.github.com/Neclode/e868c6230e0f67710aaf558313f9fa67 2026-06-04 10:57:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhnymzsy2x 2026-07-11 04:50:46+00:00| seen|...

CVE-2026-38719

OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format CPF parser, specifically in CreateCommonPacketFormatStructure in source/src/enetencap/cpf.c. A crafted ENIP/CPF message can supply an attacker-controlled itemcount value that is not consistently...

CLEANSTART-2026-GG06672 Security fixes for CVE-2025-15558, CVE-2025-47907, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, CVE-2026-39883, ghsa-2x5j-vhc8-9cwm, ghsa-6m8w-jc87-6cr7, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-pjcq-xvwq-hhpj, ghsa-vvgc-356p-c3xw applied in versions: 1.14.4-r1, 1.14.4-r2, 1.17.1-r2, 1.17.1-r3, 1.17.1-r4, 1.17.1-r5, 1.18.0-r0

Multiple security vulnerabilities affect the kyverno-fips package. These issues are resolved in later releases. See references for individual vulnerability details...