CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

ROOT-OS-DEBIAN-11-CVE-2026-32775 CVE-2026-32775 in libexif - Patched by Root

Root has patched CVE-2026-32775 in the libexif package for Root:Debian:11. Multiple fixed versions available...

CLSA-2026-1787224571 TuxCare security update for gitpython (2 CVEs)

TuxCare rebuilt gitpython to address 2 CVEs. Fixed in 3.1.31.post8+tuxcare...

RHSA-2026:57253 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57254 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57252 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57251 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57010 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:56973 Red Hat Security Advisory: mysql:8.4 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:56969 Red Hat Security Advisory: php8.4 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:56936 Red Hat Security Advisory: mysql:8.4 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:56636 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:54420 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:49732 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:49718 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:43940 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CLSA-2026-1787220376 TuxCare security update for urllib3 (1 CVE)

TuxCare rebuilt urllib3 to address 1 CVE. Fixed in 1.25.11.post7+tuxcare...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.27: golang1.27-1.27.0-0.1.hum1 aarch64, x8664 golang1.27-bin-1.27.0-0.1.hum1 aarch64, x8664 golang1.27-docs-1.27.0-0.1.hum1 noarch golang1.27-misc-1.27.0-0.1.hum1 noarch...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an authentication bypass vulnerability (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...