Fedora 44 : php (2026-6131a972fe)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6131a972fe advisory. PHP version 8.5.9 30 Jul 2026 Core: Fixed bug GH-22290 AST pretty printing does not correctly handle strings containing NUL. iliaal Fixed bug GH-222...

CVE-2026-10535

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...

CVE-2026-11536 IBM WebSphere Application Server is affected by a remote code execution vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector...

EUVD-2026-51274

IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector...

CVE-2026-11536

CVE-2026-11536 affects IBM WebSphere Application Server versions including 8.5 and 9.0 (SOAP/JMX connector). Connected documents confirm an RCE vulnerability via the SOAP/JMX/HTTP interface with CWE-502 (Deserialization of Untrusted Data) and IBM CVSS data (up to 8.8 base score in some bulletins;...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)

Last week, there were 223 vulnerabilities disclosed in 175 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 88 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...

CVE-2026-10842

CVE-2026-10842 – Affects IBM WebSphere Application Server (Traditional) 8.5, 9.0 and WebSphere Application Server Liberty 17.0.0.3–26.0.0.7. The vulnerability is a remote attacker bypass of security constraints (authentication bypass, CWE-289). Reported base CVSS v3.1 score is 7.5 (NONE user inte...

CVE-2026-17544

PHP core: vulnerability CVE-2026-17544 involves bccomp() receiving attacker-provided inputs that can trigger an out-of-bounds write, causing stack and heap corruption. Affected versions are PHP 8.4.* before 8.4.24 and 8.5.* before 8.5.9. The CVSS score is 9.3 (CRITICAL) with network attack vector...

CVE-2026-17544 Out-of-bounds write in bccomp() via crafted operand and scale

Attacker-provided inputs to bccomp could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9...

EUVD-2026-51091

Attacker-provided inputs to bccomp could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9...

OPENSUSE-SU-2026:21487-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...

RHSA-2026:48225 Red Hat Security Advisory: perl:5.32 security update

Bulletin has no description...

CLEANSTART-2026-QZ83575 Security fixes in elastic-beats 9.2.8-r6

Package elastic-beats version 9.2.8-r6 fixes 5 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-UF39876 Security fixes in grafana-alloy 1.14.1-r0

Package grafana-alloy version 1.14.1-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2026-33186, ghsa-6g7g-w4f8-9c9x...

CLEANSTART-2026-WE34008 Security fixes in kustomize 5.7.1-r3

Package kustomize version 5.7.1-r3 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-27137, CVE-2026-25679, CVE-2026-27138...

CLEANSTART-2026-CX88441 Security fixes in coredns 1.14.1-r1

Package coredns version 1.14.1-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-25679, CVE-2026-27139, CVE-2026-27138, CVE-2026-27137...

CLEANSTART-2026-BA45197 Security fixes in consul-k8s 1.7.13-r2

Package consul-k8s version 1.7.13-r2 fixes 5 vulnerabilities: CVE-2026-46680, CVE-2026-35469, CVE-2026-2303, CVE-2026-35206, CVE-2026-50151...

CLEANSTART-2026-RU30186 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r6

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r6 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-WA03770 Security fixes in kyverno-policy-reporter-fips 3.3.3-r4

Package kyverno-policy-reporter-fips version 3.3.3-r4 fixes 5 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-QB39229 Security fixes in istio-fips 1.29.1-r0

Package istio-fips version 1.29.1-r0 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...