Linux Distros Unpatched Vulnerability : CVE-2026-82333

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names can make multer's fiel...

ROS-20261026-73-0145

The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...

About the security content of tvOS 27.2

Download JSON About the security content of tvOS 27.2 This document describes the security content of tvOS 27.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, and Apple macOS Golden Gate versions prior to 27.2. This vulnerability stems from improper input validation and may allow applications to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

Apple MacOS: CVE-2026-113915: OS X update for MediaAnalysis

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple visionOS versions prior to 27.2. This vulnerability stems from authorization issues and improper state management, potentially allowi...

Red Hat Data Grid 8 information disclosure vulnerability

Red Hat Data Grid 8 has an information disclosure vulnerability. This vulnerability arises because Infinispan Operator passes the passwords for keystore and truststore via plaintext command-line parameters when enabling cross-site TLS. As a result, entities with get pods privileges, node-level...

Apple MacOS: CVE-2026-112533: OS X update for IOGPUFamily

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

Lobster DATA Lobster_pro permission and access control issue vulnerability

Versions 4.12.12-LTS and earlier of Lobster DATA Lobsterpro contain a permission and access control vulnerability. This vulnerability stems from improper permission checks and may allow attackers to interact with endpoints requiring administrative privileges...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS versions prior to Golden Gate 27.2, Sequoia versions prior to 15.8.2, and Tahoe versions prior to 26.7.2. This vulnerability stems from improper data protection and may allow applications to read location information stored at sensitive locations...

PT-2026-125428

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data...

PT-2026-125403

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

WordPress Product Filter by WBW 3.4.6 SQL Injection

WordPress Product Filter by WBW versions through 3.4.6 contain an unauthenticated SQL injection vulnerability in the frontend filter AJAX flow. The proof of concept demonstrates attacker-controlled temporary-table identifier handling using a structural response oracle...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2 and macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow attackers with root privileges to access protected user data...

PT-2026-125286

This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data...

PT-2026-125362

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.2 iPadOS versions prior to 26.7.2 iOS versions prior to 27.2 iPadOS versions prior to 27.2 macOS Golden Gate versions prior to 27.2 macOS Sequoia versions prior to 15.8.2 macOS Tahoe versions prior to 26.7.2 tvOS...

PT-2026-125146

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data...

PT-2026-125414

A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

PT-2026-123479

Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. get global header repeatedly copies portions of comment data while assembling the global header, including comments retained from an untrusted input image. An...