PT-2026-64121

PraisonAI Slack app mention bypasses configured user/channel authorization Summary PraisonAI's Slack bot applies its configured allowed users, allowed channels, and unknown-user pairing policy in the normal Slack message event handler, but not in the adjacent Slack app mention event handler. A...

Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE

Symbolic execution effectively discovers security violations but suffers from path explosion. Engines like KLEE therefore use path prioritization heuristics to order state exploration, typically optimizing code coverage. However, path prioritization can become trapped in cyclic control-flow...

CVE-2026-13204

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through...

clusterfuzz v2.35.1

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

CVE-2026-63825

A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units CPUs, it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the...

wp2shell Aftermath: The First Critical Unauthenticated WordPress Core RCE in Nearly a Decade

On Friday, July 17, 2026, the WordPress Security Team released security updates for WordPress Core addressing two vulnerabilities that, when chained together, can lead to unauthenticated remote code execution. The chain, now commonly referred to as wp2shell , was discovered and reported by Adam...

CVE-2026-63825 gcov: use atomic counter updates to fix concurrent access crashes

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can merge global branch counters with loop induction variables as an optimization. In inflatefast, the inner copy loops get transformed ...

PT-2026-61141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where GCC's GCOV instrumentation may merge global branch counters with loop induction variables as an optimization. In the inflate fast function, the...

Fuzz'EMup: Leveraging EM Side-Channel Emanation to Guide Black-Box Embedded Firmware Fuzzing

As IoT and embedded devices proliferate across various domains, securing their firmware has become critical. Fuzzing offers a systematic approach to uncovering vulnerabilities in firmware, and coverage feedback can improve its effectiveness by guiding exploration. However, many devices make...

com.arcadedb:arcadedb-coverage (23.10.1), com.arcadedb:arcadedb-graphql (23.10.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.10.1)

com.arcadedb:arcadedb-server MAVEN version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.10.1 - com.arcadedb:arcadedb-graphql 23.10.1 -...

com.arcadedb:arcadedb-coverage (23.3.1), com.arcadedb:arcadedb-graphql (23.3.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.3.1)

com.arcadedb:arcadedb-server MAVEN version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.3.1 - com.arcadedb:arcadedb-graphql 23.3.1 -...

com.arcadedb:arcadedb-coverage (25.4.1), com.arcadedb:arcadedb-graphql (25.4.1) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.4.1)

com.arcadedb:arcadedb-server MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.4.1 - com.arcadedb:arcadedb-graphql 25.4.1 -...

com.arcadedb:arcadedb-coverage (24.5.1), com.arcadedb:arcadedb-graphql (24.5.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.5.1)

com.arcadedb:arcadedb-server MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.5.1 - com.arcadedb:arcadedb-graphql 24.5.1 -...

com.arcadedb:arcadedb-coverage (22.1.2), com.arcadedb:arcadedb-graphql (22.1.2) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.1.2)

com.arcadedb:arcadedb-server MAVEN version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 22.1.2 - com.arcadedb:arcadedb-graphql 22.1.2 -...

com.arcadedb:arcadedb-coverage (21.10.2), com.arcadedb:arcadedb-mongodbw (21.10.2) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.10.2)

com.arcadedb:arcadedb-server MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.10.2 - com.arcadedb:arcadedb-mongodbw 21.10.2 -...

com.arcadedb:arcadedb-coverage (23.7.1), com.arcadedb:arcadedb-graphql (23.7.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.7.1)

com.arcadedb:arcadedb-server MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.7.1 - com.arcadedb:arcadedb-graphql 23.7.1 -...

com.arcadedb:arcadedb-coverage (24.10.1), com.arcadedb:arcadedb-graphql (24.10.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.10.1)

com.arcadedb:arcadedb-server MAVEN version 24.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.10.1 - com.arcadedb:arcadedb-graphql 24.10.1 -...

com.arcadedb:arcadedb-coverage (25.1.1), com.arcadedb:arcadedb-graphql (25.1.1) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.1.1)

com.arcadedb:arcadedb-server MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.1.1 - com.arcadedb:arcadedb-graphql 25.1.1 -...

com.arcadedb:arcadedb-coverage (24.4.1), com.arcadedb:arcadedb-graphql (24.4.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.4.1)

com.arcadedb:arcadedb-server MAVEN version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.4.1 - com.arcadedb:arcadedb-graphql 24.4.1 -...

com.arcadedb:arcadedb-coverage (21.11.1), com.arcadedb:arcadedb-mongodbw (21.11.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.11.1)

com.arcadedb:arcadedb-server MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.11.1 - com.arcadedb:arcadedb-mongodbw 21.11.1 -...