RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security Update (Critical) (RHSA-2026:28376)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28376 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...

PT-2026-51945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A CBB Control Backbone timeout occurs in the tegra194 PCI implementation when PERST is deasserted twice. This issue arises because the functions pci epc deinit notify and dw pcie ep...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization due to insufficient permission checks in the store method of the UsersController. An attacker can assign full administrative privileges to a newly...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the BulkAssetsController::update process. An attacker can gain unauthorized access to assets belonging to other companies...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-operator, harvester-fips, harvester, virt-controller-fips, virt-launcher...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester-fips, harvester, virt-controller-fips, virt-handler, virt-launcher...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-operator, harvester-fips, harvester, virt-controller-fips, virt-launcher...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-operator, harvester-fips, harvester, virt-controller-fips, virt-launcher...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-operator, harvester-fips, harvester, virt-controller-fips, virt-launcher...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-operator-fips, harvester-fips, harvester, virt-controller-fips, virt-handler, virt-launcher...

GHSA-RJFV-PJVX-MJGV vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: bank-vaults, rclone-fips, seaweedfs-operator-fips, commercial-expanso-edge, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-gcp, fulcio-fips, trivy-fips, verticadb-operator-fips, tkn-fips, kine, authentik, crossplane-provider-aws-ec2-fips, hubble,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: bank-vaults, rclone-fips, seaweedfs-operator-fips, commercial-expanso-edge, gcp-compute-persistent-disk-csi-driver-fips, crossplane-provider-gcp, fulcio-fips, trivy-fips, verticadb-operator-fips, tkn-fips, kine, authentik, crossplane-provider-aws-ec2-fips, hubble,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: jfrog-cli, datadog-agent-fips, chaos-mesh-fips, grype-fips, kaniko-fips, cluster-api-helm-controller-fips, trivy-fips, neuvector, steampipe, helm-exporter, cluster-api-helm-controller, neuvector-scanner, harvester-fips, neuvector-fips, packer-fips,...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...

PT-2026-51642

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.4.1 Description Snipe-IT is an IT asset and license management system. A flaw exists where the update function within app/Http/Controllers/Assets/BulkAssetsController.php accepts the company id variable directly fr...

kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...

kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg()

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP isotp module. This vulnerability, known as a use-after-free, occurs when the system attempts to free a memory region while it is still being used. A local attacker could trigger this condition by sending a signal that...

EUVD-2026-38198

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...