CVE-2026-15995

Summary of CVE-2026-15995 : IBM Cognos Analytics 12.1.3 GA (build up to 12.1.3-2606251736) contains a race condition in the Agentic AI assistant’s concurrent request handling. Under certain concurrent usage, two authenticated users submitting the same action can cause incorrect report summaries o...

Security update for python-paramiko

This update for python-paramiko fixes the following issue CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

SUSE-SU-2026:3093-1 Security update for python-paramiko

This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

Security Bulletin: IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use (CVE-2026-15995)

Summary The IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant used by authorized analysts to query report summaries and perform related tasks. Under certain concurrent usage conditions, when two authenticated users submit the same...

CVE-2026-47084

A flaw was found in Cyrus IMAP cyrus-imapd. An authenticated user, without administrative privileges, could bypass Access Control List ACL checks by using the LOCALDELETE command. This allowed them to delete mailboxes for which they did not have the necessary permissions, leading to unauthorized...

ROS-20260717-73-0026

The vulnerability of the DevTools suite for web development in the Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a...

ROS-20260717-73-0018

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

ROS-20260717-73-0007

The vulnerability of the ServiceWorker application interface of Google Chrome browser is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to the use of default user credentials, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to the use of default user credentials. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

haproxy: HAProxy: Data integrity and availability vulnerability in NEW_TOKEN format

A flaw was found in HAProxy. This vulnerability, stemming from a missing length check in the NEWTOKEN format, could allow a remote attacker to cause a low impact on data integrity and availability. This means an attacker might be able to subtly alter data or temporarily disrupt the service...

ca-certificates: ca-certificates: Failure to remove TrustCor root certificates

A flaw was found in the ca-certificates package. This issue prevents the proper removal of certain TrustCor root certificates from the root store. A remote attacker could potentially exploit this vulnerability to leverage these unremoved certificates, leading to a compromise of data integrity. Th...

ROS-20260716-73-0059

The vulnerability of the Fenced Frames privacy function in Microsoft Edge and Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML pag...

The vulnerability of embedded software developed by Qualcomm, related to improper array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded Qualcomm software lies in improper array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260716-73-0070

The vulnerability of the Safe Browsing service in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise data integrity through the use of a malicious file...

ROS-20260716-73-0064

The vulnerability of DevTools components in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

ROS-20260716-73-0063

The vulnerability of the auto-filling components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

ROS-20260716-73-0062

The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially crafted HTML page...

ROS-20260716-73-0060

The vulnerability of Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the Windows WLAN Host microprogramming system components in Qualcomm’s embedded chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...