CVE-2026-15218: Incorrect Privilege Assignment

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code...

PT-2026-76652

Name of the Vulnerable Software and Affected Versions In Progress ShareFile Storage Zones Controller versions prior to 5.12.6 Description Unsafe deserialization of untrusted file metadata allows a user with write access to a network share to execute arbitrary code on the Storage Zones Controller...

PT-2026-76789

Name of the Vulnerable Software and Affected Versions managedcluster-import-controller affected versions not specified Description The managedcluster-import-controller contains a flaw in its Certificate Signing Request CSR auto-approval logic. The system fails to properly validate incoming CSRs...

PT-2026-73372

Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0 until 4.6.4 and 4.7.0, any logged-in local user could use the show action in app/controllers/admin/collections controller.rb to access personally identifying information about another local user in a collection...

PT-2026-73344

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system...

CVE-2026-67960

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...

CVE-2026-64866: Missing Authorization

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. From 0.9.1.3 until 1.0.0-rc.7, AdminResetPasskey in controller/passkey.go lacks the canManageTargetRole authorization check for DELETE /api/user/:id/resetpasskey, allowing a lower-privileged...

CVE-2026-67960

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099989)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099989 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmetctrlfree nvmettcpreleasequeuework runs on nvmet-wq...

Linux kernel PINCTRL DoS

The vulnerability in the eqbrirqack function within drivers/pinctrl/pinctrl-equilibrium.c of the Linux kernel’s PINCTRL controller driver is related to uncontrolled resource consumption. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Red Hat OpenShift AI Permission and Access Control Vulnerabilities

Red Hat OpenShift AI has vulnerabilities related to permission granting and access control. These vulnerabilities stem from the fact that the maas-api and maas-controller service accounts are granted permissions beyond their operational needs. Attackers can exploit these vulnerabilities to gain...

CVE-2026-72396

In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...

UBUNTU-CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

EUVD-2026-59447

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability element length Read Local Codec Capabilities returns a sequence of capability elements. Each element starts with a one-byte length followed by that many payload bytes...

CVE-2026-72121 can: bcm: add locking when updating filter and timer values

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and timer values KCSAN detected a simultaneous access to timer values that can be overwritten in bcmrxsetup when updating timer and filter content while bcmrxhandler, bcmrxtimeouthandler...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: k8sgateway-fips, crossplane-provider-aws-efs, gcp-compute-persistent-disk-csi-driver, metacontroller-fips, goldilocks-fips, crossplane-provider-aws-codepipeline-fips, nsc, yace-fips, influxd-fips, rootlesskit, crossplane-provider-aws-gamelift-fips,...

PT-2026-72736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth HCI subsystem where the hci read codec capabilities function fails to properly validate the length of codec capability elements. When processing a sequen...

CVE-2026-19871

CVE-2026-19871 affects Roskus Prospero Flow CRM prior to version 5.15.9. The root cause is use of hard-coded credentials where the employee save controller falls back to the literal password “changeme” and the onboarding form lacks a password field, enabling unauthenticated remote attackers who k...

CVE-2026-72828

Grav Plugin API getgrav/grav-plugin-api before 1.0.13 fails to enforce API-key scope caps in InvitationsController. The strip-super and accept-groups decisions are gated on a bare isSuperAdmin check rather than a scope-aware permission check, so a least-privilege API key scoped to api.users.write...

CVE-2026-72828

Grav Plugin API before 1.0.13 (grav-plugin-api) is affected by CVE-2026-72828: InvitationsController fails to enforce API-key scope caps. strip-super and accept-groups checks rely on isSuperAdmin() instead of scope-aware permissions, allowing a least-privilege API key scoped to api.users.write (i...