PT-2026-79350

Name of the Vulnerable Software and Affected Versions CodeAstro Online Job Portal version 1.0 Description An issue exists in the /users/update-profile.php endpoint where manipulation of the Name argument allows for unrestricted upload. This flaw can be exploited remotely. Recommendations At the...

MINI-WRXF-RMGC-4HFR

Bulletin has no description...

MINI-42RP-P8X6-QX5V

Bulletin has no description...

MINI-FHX5-4RGC-QG3C

Bulletin has no description...

MINI-5H8C-23MQ-WH7Q

Bulletin has no description...

MINI-MV86-J6VH-639R

Bulletin has no description...

MINI-9FPV-6G3R-GQRG

Bulletin has no description...

MINI-GFP9-R82R-VVG3

Bulletin has no description...

MINI-3XMW-7R3X-C3X5

Bulletin has no description...

CVE-2026-77647

SPIP before 4.4.20 is vulnerable to unauthenticated remote code execution (CVSS 9.8, CRITICAL). The root cause is an incorrect identification of <?php blocks combined with var_export's mishandling of certain cases involving a

CVE-2026-19449

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root...

CVE-2026-18842

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...

CVE-2026-16991

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links...

CVE-2026-16936

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow...

USN-8659-1: Linux kernel vulnerability

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;...

CVE-2026-19449 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root...

CVE-2026-18842

CVE-2026-18842 is an out-of-bounds write vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker to gain elevated privileges . The CVSS 3.1 score is 8.4 (HIGH) with a local attack vector requiring no privileges or user interaction, resulting in high impact to confi...

CVE-2026-17118

A use-after-free (CWE-416) in AIX 7.2/7.3 and PowerVM VIOS 4.1 enables unauthenticated remote attackers to execute arbitrary code (CVSS 9.8). IBM has published APARs (IJ59563–IJ59566) and cumulative SPs/FPs as fixes, requiring an LPAR reboot. No workarounds are available; no exploitation in the w...

CVE-2026-64728

A flaw was found in WebKitGTK. Processing malicious web content can violate the iframe sandboxing policy due to improper validation. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-77151

A security flaw has been discovered in lin-snow Ech0 up to 5.4.1. Affected by this issue is the function MD5Encrypt of the file internal/util/crypto/crypto.go. Performing a manipulation results in risky cryptographic algorithm. Remote exploitation of the attack is possible. The complexity of an...