CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the system.run. An attacker can execute unauthorized local code by obtaining approval for a benign script-runner command, then rewriting the referenced script ...

GHSA-8G75-Q649-6PV6 OpenClaw's system.run approvals did not bind mutable script operands across approval and execution

OpenClaw's system.run approval flow did not bind mutable interpreter-style script operands across approval and execution. A caller could obtain approval for an execution such as sh ./script.sh, rewrite the approved script before execution, and then execute different content under the previously...

This Android vulnerability can break your lock screen in under 60 seconds

A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...

virt:rhel and virt-devel:rhel security and bug fix update

An update is available for seabios, swtpm, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.libvirt-python, netcf, module.netcf, module.seabios, module.libguestfs, hivex,...

EUVD-2026-10595

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

EUVD-2026-10594

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

CVE-2026-23672

CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...

CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, sops, falcoctl, kyverno-policy-reporter-ui, kubernetes-dashboard-web, crossplane-provider-aws-ec2, crossplane-provider-aws-eks, loki, terraform-provider-random, go, crossplane-provider-aws-cloudfront, grafana-rollout-operator, trillian,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: nfpm, sbom-scorecard, kyverno-policy-reporter-ui, local-path-provisioner, go, gatekeeper, tempo, kubernetes-csi-driver-hostpath, k8s-device-plugin, snyk-cli, spire-controller-manager, kyverno, crossplane-provider-aws-route53, redpanda, croc, k8sgpt, nri-redis,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, step, tekton-chains-fips, flux-image-automation-controller, authservice-fips, newrelic-fluent-bit-output-fips, kubeflow-katib, thanos-fips, restic, chartmuseum, ingress-nginx-controller-fips, rook, sftpgo-plugin-geoipfilter,...

CLEANSTART-2026-GJ95666 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CLEANSTART-2026-AF35851 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CLEANSTART-2026-QK48981 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...