CVE-2026-19871 Use of hard-coded credentials in Prospero Flow CRM employee onboarding

Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onboarded through the standard flow, knowing only their email address, because the employee save controller falls back t...

CVE-2026-19871 Use of hard-coded credentials in Prospero Flow CRM employee onboarding

Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onboarded through the standard flow, knowing only their email address, because the employee save controller falls back t...

DEBIAN-CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CVE-2026-19730

The 'podman quadlet install --replace' command opens the existing destination file with OCREATE|OWRONLY but omits OTRUNC. When the initial reflink copy attempt fails common on non-reflink-capable filesystems including many RHEL default XFS configurations, the fallback in ReflinkOrCopy uses io.Cop...

CVE-2026-19730

Podman 5.8.x contains a file-write bug in the quadlet replacement flow. When using podman quadlet install --replace, the destination quadlet is opened with O_CREATE|O_WRONLY but without O_TRUNC. If the initial reflink copy fails on non-reflink-capable filesystems, the fallback path uses non-trunc...

CVE-2026-52075

mgrandom rand fallback used for TLS secrets...

PT-2026-71717

Name of the Vulnerable Software and Affected Versions Podman version 5.8.x Description The podman quadlet install --replace command fails to truncate existing destination files when opening them with O CREATE|O WRONLY without O TRUNC. On filesystems that do not support reflinks, such as many...

CVE-2026-73290 RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallback

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions request in rustfs/src/storage/access.rs that lacks a direct bucket-policy grant falls back to an s3:ListBucket check and returns before the policyallowed path applies...

DEBIAN-CVE-2026-68436

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time most of it the two inlined dcscratchspace copies and now sits close to the page allocator's 4 MiB contiguous allocation limit. Its actual siz...

CVE-2026-68385

CVE-2026-68385 concerns the Linux kernel on s390 where the checksum calculation in csum_partial() can be incorrect on systems without a vector facility. The code path falls back to csum(dst, …) via csum_copy() with copy=false and dst=NULL, which causes the checksum to be derived from address zero...

CVE-2026-68385 s390/checksum: Fix csum_partial() without vector facility

In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy with copy=false and dst=NULL. On machines without the vector facility, csumcopy falls back to cksmdst, ..., causing the checksum to be...

CVE-2026-68385 s390/checksum: Fix csum_partial() without vector facility

In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy with copy=false and dst=NULL. On machines without the vector facility, csumcopy falls back to cksmdst, ..., causing the checksum to be...

CVE-2026-68186

The CVE-2026-68186 issue affects the Linux kernel’s binfmt_misc handling. load_misc_binary() sets bprm->have_execfd when it encounters the O/C flag, before the interpreter is opened, which could cause a NULL dereference in begin_new_exec() if an interpreter open fails and a later format is cho...

CVE-2026-68098 ksmbd: bound DACL dedup walk to copied ACEs

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that happens, numaces reflects only the ACEs that were actually copied into...

Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages

SummaryAny authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the...

CVE-2025-71410

Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...

CVE-2025-71410 Malicious Link Control Frames Can Cause Loss of CPDLC Functions

Unnumbered Disconnect U DISC and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio...

EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-2925)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...

CVE-2026-55523

PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.webcrawltools.webcrawl function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blocks direct loopback and private destinations, its default httpx...

CVE-2026-70426

In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JEP-200 class filter is not applied to classes resolved via a fallback path in the Remoting deserialization implementation, allowing agent processes, cod...