CVE-2026-68980

Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework...

CVE-2026-62354 Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests

Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation...

CVE-2026-69088

Grav CMS 2.0.7–2.0.10 is affected by an arbitrary method invocation vulnerability in blueprint dynamic-field directives. The issue arises because Blueprint::isSafeDynamicCall() only applies its denial list to strings without '::', allowing an account with page-editing rights to insert a directive...

ROOT-OS-DEBIAN-11-CVE-2026-41992 CVE-2026-41992 in gzip - Patched by Root

Root has patched CVE-2026-41992 in the gzip package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-7598 CVE-2026-7598 in rootio-libssh2 - Patched by Root

Root has patched CVE-2026-7598 in the rootio-libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-55200 CVE-2026-55200 in rootio-libssh2 - Patched by Root

Root has patched CVE-2026-55200 in the rootio-libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-55199 CVE-2026-55199 in rootio-libssh2 - Patched by Root

Root has patched CVE-2026-55199 in the rootio-libssh2 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-18059

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerce purchase metadata...

ROOT-OS-DEBIAN-11-CVE-2026-58014 CVE-2026-58014 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2026-58014 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58012 CVE-2026-58012 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2026-58012 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58010 CVE-2026-58010 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2026-58010 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58011 CVE-2026-58011 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2026-58011 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-60011

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:38+00:00| seen| https://jvn.jp/en/vu/JVNVU98759887 2026-08-03 10:04:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fpysahdivspe...

CVE-2026-16441 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9...

GHSA-CP45-6Q6C-3772 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9...

GHSA-PW53-4WCC-WM6V vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9...

Security update for tomcat11 (important)

openSUSE security update: security update for tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21490-1 Rating: important References: bsc1271397 bsc1271398 Cross-References: CVE-2026-59083 CVE-2026-59084 CVSS scores: CVE-2026-59083 SUSE : 8.2...

EUVD-2026-51306

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

Important: Red Hat Security Advisory: RHACS 4.11.2 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...