JLSEC-2026-798 TLS 1.3 KeyUpdate handling can race concurrent writes

Reseau 1.1.0 through 1.3.1 process a peer-requested TLS 1.3 KeyUpdateupdaterequested response from the read path without acquiring the connection's write lock. A connected peer can race that response against an application task writing on the same connection. Impact The two tasks can concurrently...

MINI-XVX9-7PMJ-QP92

Bulletin has no description...

MINI-Q7P3-6982-CHV8

Bulletin has no description...

MINI-GQH9-P436-MX8J

Bulletin has no description...

MINI-MQR2-VXX9-R5CG

Bulletin has no description...

MINI-JMXV-PVRR-9P4J

Bulletin has no description...

MINI-842W-RQQJ-CHX4

Bulletin has no description...

kernel: lib/buildid: use __kernel_read() for sleepable context

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...

EUVD-2026-49792

Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserting it into the document. When rendering a graph node, the vulnerable code assigns the SVG icon markup directly to the innerHTML property of a live SVG element. An attacker...

SUSE-SU-2026:3362-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

MCP SSE API Exposed - Detect

Detects exposed Model Context Protocol MCP servers through the SSE API. MCP servers often provide administrative access to AI tools, LLM systems, or other automation infrastructure. Exposed MCP interfaces can lead to unauthorized access, information disclosure, and potential system compromise. Th...

Spring Boot `X-Application-Context` Header Exposure Detection

Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive application context information. !/usr/bin/env python3 -- coding: utf-8 -- """Detected the presence of the X-Application-Context header in HTTP responses, which can expose sensitive applic."""...

CVE-2026-59896

A flaw was found in Hono, a Web application framework. The hono/jsx component did not properly isolate context values per request during server-side rendering. This allowed data from a different in-flight request to be used after an asynchronous operation in a component. This could lead to...

Does Runtime Topology Context Improve LLM-Generated Kubernetes Security Patches?

Kubernetes is central to the cloud-native ecosystem, orchestrating containerised workloads. Recent work suggests that large language models LLMs can automate cluster security remediation, generating configuration patches from Kubernetes Security Posture Management KSPM findings without human...

PT-2026-65554

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An Untrusted Search Path issue exists where the application may load a malicious DLL or executable from an unexpected location. This could allow a low-privileged attacker to achieve arbitrary...

PT-2026-65555

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-65557

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

PT-2026-68206

Name of the Vulnerable Software and Affected Versions Electron versions prior to 39.8.9 Electron versions prior to 40.9.2 Electron versions prior to 41.2.2 Electron versions prior to 42.0.0-beta.5 Description Applications that expose Promise-returning functions to web content via the contextBridg...

PT-2026-65556

Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...

ALSA-2026:47040 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop CLONETHREAD requirement for private default hash...