PT-2026-70050

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently sanitize certain request headers before forwarding traffic to internal components. This allows an unauthenticated attacker to send a specially crafte...

PT-2026-76421

These are all security issues fixed in the git-cliff-2.13.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70388

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70829

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.16.0 Description The dtls server input handler and create new connected udp socket functions in src/apps/relay/dtls listener.c retain the state of the OpenSSL dtls1 reassemble fragment function when processing a...

CVE-2026-19546: Improper Control of Generation of Code

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

PT-2026-70688

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An issue in Windows DNS allows an authorized attacker to elevate privileges locally, which can enable them to affect the system. Recommendations At the moment, there is no information abo...

PT-2026-70071

Name of the Vulnerable Software and Affected Versions Device Configuration Framework affected versions not specified Description An authentication bypass flaw exists within the Device Configuration Framework. This issue can be exploited by an attacker who has already authenticated using a service...

chromedriver-151.0.7922.108-1.1 on GA media (moderate)

chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...

CVE-2026-11812

The UpdateHub management subsystem subsys/mgmt/updatehub/updatehub.c drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds1. Access to ctx was not serialized, and preparef...

CVE-2026-11812 UpdateHub: race condition on shared context causes out-of-bounds write and DoS

The UpdateHub management subsystem subsys/mgmt/updatehub/updatehub.c drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds1. Access to ctx was not serialized, and preparef...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.1.hum1 aarch64, x8664 glibc-2.43-8.1.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.1.hum1 aarch64, x8664 glibc-benchtests-2.43-8.1.hum1 aarch64, x8664...

CLSA-2026-1786393792 TuxCare security update for 40 packages (2 CVEs)

TuxCare rebuilt 40 packages to address 2 CVEs. Fixed in 10.1.42-tuxcare.7...

CVE-2026-72886 Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch...

CVE-2026-72886 Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch...

CVE-2026-72886 Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow due to the July 2026 CPU

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...