CVE-2026-1961 Forman: foreman: remote code execution via command injection in websocket proxy

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

CVE-2026-1961

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

CVE-2026-1961 Forman: foreman: remote code execution via command injection in websocket proxy

A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating...

PT-2026-28315

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 3.16.3 Foreman versions prior to 3.17.2 Foreman versions prior to 3.18.1 Description A flaw exists in Foreman that allows a remote attacker to exploit a command injection vulnerability within the WebSocket proxy...

CVE-2026-23348

A flaw was found in the Linux kernel, specifically within the CXL Compute Express Link and NVDIMM Non-Volatile Dual In-line Memory Module subsystems. A race condition can occur when NVDIMM objects attempt to reprobe after the cxlacpi module is removed, while the nvdimmbus object is missing. This...

CVE-2026-23327

The CVE-2026-23327 issue is a Linux kernel vulnerability in the CXL mailbox driver (cxl/mbox). The root cause is that cxl_payload_from_user_allowed() casts and dereferences the user payload without validating its size, allowing an undersized mailbox command to trigger a read past the allocated bu...

Hardening Confidential Federated Compute against Side-Channel Attacks

In this work, we identify a set of side-channels in our Confidential Federated Compute platform that a hypothetical insider could exploit to circumvent differential privacy DP guarantees. We show how DP can mitigate two of the side-channels, one of which has been implemented in our open-source...

USN-8095-3 linux-realtime, linux-realtime-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

HPESBHF05024 rev.1 - HPE Compute Scale-up Server 3200 Platform Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.70.74 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 |...

Canada Needs Nationalized, Public AI

Canada has a choice to make about its artificial intelligence future. The Carney administration is investing $2-billion over five years in its Sovereign AI Compute Strategy. Will any value generated by "sovereign AI" be captured in Canada, making a difference in the lives of Canadians, or is this...

VulnCheck KEV: CVE-2025-62593

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense us...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, grant themselves elevated privileges or gain access to sensitive data. Azure Entra ID: |----------------|------|-------------------------------------| ...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, yunikorn-k8shim, kubernetes-csi-external-provisioner, external-dns, k8s-device-plugin, mesosphere-vsphere-csi, sftpgo-plugin-eventstore, datadog-agent, crossplane-provider-aws-cloudfront, gitlab-kas, kots, prometheus-alertmanager, kubescape,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: pulumi-language-java, yunikorn-k8shim, kubernetes-csi-external-provisioner, external-dns, k8s-device-plugin, mesosphere-vsphere-csi, sftpgo-plugin-eventstore, datadog-agent, crossplane-provider-aws-cloudfront, gitlab-kas, kots, prometheus-alertmanager, kubescape,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: portieris, nri-redis, rabbitmq-cluster-operator, crossplane-provider-aws-sns, rancher-loglevel, kaf, kubernetes-csi-node-driver-registrar, rancher-telemetry, redka, kapp-controller, kubernetes-csi-driver-nfs, argo-cd, ksops, net-kourier, smokescreen,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: apm-server-fips, vale, cloud-provider-azure-fips, temporal-server, crossplane-function-go-templating-fips, kubevela, aws-flb-kinesis, deck-fips, google-guest-agent, dcgm-exporter, helm-diff, sops-fips, crossplane-provider-aws-cloudformation, trivy-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloud-provider-azure-fips, temporal-server, crossplane-function-go-templating-fips, kubevela, aws-flb-kinesis, deck-fips, google-guest-agent, dcgm-exporter, helm-diff, sops-fips, crossplane-provider-aws-cloudformation, trivy-fips,...