Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2026-102146

An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could ...

CVE-2026-102129

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

CVE-2026-102132

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...

CVE-2026-102120

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution on one node of a clustered Kiteworks deployment to run operating system commands with elevated privileges on another node of the same cluster. Insufficient input validation in ...

CVE-2026-102126

A stored cross-site scripting XSS weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to store crafted content that later executes arbitrary JavaScript in the authenticated session of a System Administrator who views the affected pag...

CVE-2026-102122

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

CVE-2026-102118

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

CVE-2026-102112

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

CVE-2026-102113

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102093

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...

EUVD-2026-90313

Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce administrator authentication, so the required password check could be bypassed. An attacker who referenced a valid...

CVE-2026-47512

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an out-of-bounds read within the kernel mode layer to access sensitive kernel memory. This flaw may allow an attacker to escalate privileges, execute arbitrary code, cause a Denial of Service DoS, or tamper with system da...

CVE-2026-47511

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local user with basic privileges to write data beyond allocated memory boundaries. Successful exploitation could allow an attacker to achieve arbitrary code execution, escalat...

CVE-2026-47510

A flaw was found in the NVIDIA GPU display driver. A local user can trigger an integer overflow in the kernel mode layer, leading to an out-of-bounds write to graphics processing unit GPU memory. A successful exploit could allow an attacker to execute arbitrary code, escalate privileges, cause a...

CVE-2026-47508

A flaw was found in the NVIDIA GPU Display Driver. An issue in the kernel mode layer allows a local user to cause an incorrect conversion between numeric types. A successful exploit can allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS, or disclose...

CVE-2026-47507

A flaw was found in nvidia-driver. A local user can trigger an out-of-bounds array access in the driver's kernel mode layer. This vulnerability could allow an attacker to escalate privileges, execute arbitrary code, cause a denial of service DoS, or access and modify sensitive system data...

CVE-2026-47500

A flaw was found in nvidia-driver. The kernel mode layer fails to properly clean up memory reference counts during error recovery paths, leading to a use-after-free condition where memory is accessed after it has been released. A local attacker with standard user privileges could exploit this fla...

CVE-2026-47494

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can exploit this vulnerability by providing crafted input that triggers a format string flaw. Successful exploitation may lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or unauthorized...

CVE-2026-102112 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...