SUSE SLES15 Security Update : python-paramiko (SUSE-SU-2026:3093-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3093-1 advisory. This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995

Summary of CVE-2026-15995 : IBM Cognos Analytics 12.1.3 GA (build up to 12.1.3-2606251736) contains a race condition in the Agentic AI assistant’s concurrent request handling. Under certain concurrent usage, two authenticated users submitting the same action can cause incorrect report summaries o...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

Security update for python-paramiko

This update for python-paramiko fixes the following issue CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

SUSE-SU-2026:3093-1 Security update for python-paramiko

This update for python-paramiko fixes the following issue - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225...

Security Bulletin: IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use (CVE-2026-15995)

Summary The IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant used by authorized analysts to query report summaries and perform related tasks. Under certain concurrent usage conditions, when two authenticated users submit the same...

CVE-2026-47084

A flaw was found in Cyrus IMAP cyrus-imapd. An authenticated user, without administrative privileges, could bypass Access Control List ACL checks by using the LOCALDELETE command. This allowed them to delete mailboxes for which they did not have the necessary permissions, leading to unauthorized...

ROS-20260717-73-0007

The vulnerability of the ServiceWorker application interface of Google Chrome browser is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to the use of default user credentials, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to the use of default user credentials. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

ROS-20260717-73-0026

The vulnerability of the DevTools suite for web development in the Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a...

ROS-20260717-73-0018

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

haproxy: HAProxy: Data integrity and availability vulnerability in NEW_TOKEN format

A flaw was found in HAProxy. This vulnerability, stemming from a missing length check in the NEWTOKEN format, could allow a remote attacker to cause a low impact on data integrity and availability. This means an attacker might be able to subtly alter data or temporarily disrupt the service...

ca-certificates: ca-certificates: Failure to remove TrustCor root certificates

A flaw was found in the ca-certificates package. This issue prevents the proper removal of certain TrustCor root certificates from the root store. A remote attacker could potentially exploit this vulnerability to leverage these unremoved certificates, leading to a compromise of data integrity. Th...

ROS-20260716-73-0063

The vulnerability of the auto-filling components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

ROS-20260716-73-0064

The vulnerability of DevTools components in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

ROS-20260716-73-0059

The vulnerability of the Fenced Frames privacy function in Microsoft Edge and Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML pag...

ROS-20260716-73-0060

The vulnerability of Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

ROS-20260716-73-0062

The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially crafted HTML page...

SUSE SLED15 / SLES15 Security Update : python-paramiko (SUSE-SU-2026:3031-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3031-1 advisory. - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use bsc1264225. Tenable has extracted the...