CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3

CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5

CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...

CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3

CVE-2026-34501 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3

CVE-2025-49506 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...

CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2

CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1

CVE-2026-71225 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...

ANT-2026-WQ7HHBE1 · supabase/postgres · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-WQ7HHBE1: Internal admin roles omitted from supautils reserved lists The supautils config template lists roles the...

CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend popup.testtriggerexpr action, leading to potential denial of service...

CVE-2026-74982 Denial-of-service in the Widget component

Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

EUVD-2026-60695

Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...

CVE-2026-74934

Site isolation issue in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2026-75845

ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass vulnerability in the setserversetting MCP server-level tool. SetServerSettingTool.execute gates only on the global allowAdmin flag and never checks the caller's role, so in an MCP deployment with allowAdmin=true and a non-roo...

EUVD-2026-60584

SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...

CVE-2026-74903 SiYuan before v3.7.4 Insufficient Access Control via spinBlockDOM

SiYuan before v3.7.4 contains an insufficient access control vulnerability in the /api/lute/spinBlockDOM endpoint, which is guarded only by CheckAuth middleware instead of CheckAdminRole like its sibling endpoint. Authenticated users with RoleEditor or RoleReader roles can invoke the endpoint to...

CVE-2026-72382

A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...

CVE-2026-72231

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking module of the Linux kernel. An incorrect check during the handling of TT Topology Table requests can prevent the proper cleanup of request nodes when send buffer allocation fails. This can lead to a remote attacker...

RHSA-2026:55803 Red Hat Security Advisory: haproxy security update

Bulletin has no description...

RHSA-2026:55802 Red Hat Security Advisory: haproxy security update

Bulletin has no description...

RHSA-2026:54515 Red Hat Security Advisory: kernel security update

Bulletin has no description...

CVE-2026-72264

A flaw was found in the fbdev: tridentfb component of the Linux kernel. A memory leak occurs in the tridentpciprobe function because memory allocated for the modelist is not properly freed in certain error paths. This could allow a local attacker to exhaust available memory resources, leading to ...