MINI-MGRC-Q9RM-G4JG

Bulletin has no description...

SUSE CVE-2026-53295

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail gracefully if there is no channel array attached to the mailbox controller. Otherwise the later dereference will cause an OOPS which might not be seen because mailbox controllers...

CVE-2026-49048: Improper Neutralization of Special Elements used in an SQL Command

The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation...

CVE-2026-13493: Improper Control of Resource Identifiers

A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend/controller/conversationapi.py of the component Workflow Checkpoint Restore Handler. Executing a manipulation can lead to improper control of resource identifiers. The atta...

PT-2026-53162

Name of the Vulnerable Software and Affected Versions JoomCCK affected versions not specified Description A front-end controller task in the JoomCCK extension for Joomla is susceptible to SQL injection. This occurs because the application constructs two SQL statements by directly concatenating a...

Linux Distros Unpatched Vulnerability : CVE-2026-53051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: tegra194: Fix CBB timeout caused by DBI access before core power-on When PERST is deasserted twice assert - deassert - assert - deassert, a CBB Control...

Bluetooth: fix memory leak in error path of hci_alloc_dev()

...

Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER

...

Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

...

SUSE CVE-2026-57521

Bitwarden Server before 2026.5.0 contains a broken access control vulnerability that allows any authenticated user to access arbitrary organization billing data by supplying an arbitrary organizationId to the PreviewInvoiceController endpoints without membership or authorization checks. Attackers...

CVE-2026-28701

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths...

CVE-2026-28701 Daktronics Controller Firmware Path Traversal

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths...

CVE-2026-28701

CVE-2026-28701 affects various versions of Daktronics Controller Firmware. The vulnerability is a path traversal flaw permitting authenticated or unauthenticated remote users to escape the intended directory and enumerate arbitrary filesystem paths, with potential high impact to confidentiality, ...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: falco-no-driver, omnictl-multiarch, knative-kafka-broker-fips, helm, grafana-fips, snyk-cli, trivy-operator, prometheus-elasticsearch-exporter, external-secrets-operator, rancher, opentofu, vault, argocd-image-updater, argo-workflows-fips, coder, grafana,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, knative-kafka-broker-fips, helm, melange, grafana-fips, omnictl-multiarch, crossplane-provider-azure-solutions, snyk-cli, trivy-operator, pulumi-kubernetes-operator, flux-operator-fips, crossplane-provider-azure-authorization,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: falco-no-driver, omnictl-multiarch, knative-kafka-broker-fips, helm, grafana-fips, snyk-cli, trivy-operator, prometheus-elasticsearch-exporter, external-secrets-operator, rancher, opentofu, vault, argocd-image-updater, argo-workflows-fips, coder, grafana,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents, snyk-cli, flux-operator-fips, neuvector-sigstore-interface, crossplane-provider-aws-lambda-fips, crossplane-provider-aws-sqs-fips, crossplane-provider-aws-s3-fips, crossplane-provider-aws-sns-fips, policy-controller-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: falco-no-driver, omnictl-multiarch, knative-kafka-broker-fips, helm, melange, grafana-fips, snyk-cli, trivy-operator, pulumi-kubernetes-operator, splunk-otel-collector, prometheus-elasticsearch-exporter, external-secrets-operator, opentofu, vault, argocd-image-update...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: docker-cli-buildx-fips, falco-no-driver, knative-kafka-broker-fips, helm, melange, grafana-fips, omnictl-multiarch, snyk-cli, trivy-operator, pulumi-kubernetes-operator, splunk-otel-collector, prometheus-elasticsearch-exporter, external-secrets-operator, rancher,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: podman, tkn, docker, pulumi-language-java, nerdctl, kargo, k9s, kubescape, nuclei, melange, age, gatus, cosign, crossplane-provider-azure-storage, trivy, rancher, pulumi-language-yaml, rancher-agent, pulumi, flux-notification-controller, mods, mattermost,...