PT-2026-26066

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

Malicious code in n8n-nodes-json-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c4e3ce64e72a6b818d69264d998a333db6081ac74c9335a9f33ece5434dbbc The package n8n-nodes-json-helper was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview n8n-nodes-json-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-1422 Malicious code in fastapi-middleware-cors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 305178589615e2247b892b3e305e5fd69a0fc02092f0b115b6b384441f5ddd46 Library disguised as FastAPI helper is executing obfuscated code during importing the module. The code is highly obfuscated; the code seems to contain an...

CVE-2026-22210

wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attachment URLs in HTML output by exploiting the WpdiscuzHelperUpload class. Attackers can craft malicious attachment records or filter hooks to inject arbitrary...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: cortex, rancher-agent, cilium, gitaly, kserve-rest-proxy, kubernetes-event-exporter, redka, snyk-cli, kube-state-metrics, thanos, cluster-api-gcp-controller, kafka-proxy, cilium-envoy, docker-cli, migrate, contour, nginx-prometheus-exporter, rancher-machine,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cortex, rancher-agent, cilium, gitaly, kserve-rest-proxy, kubernetes-event-exporter, redka, snyk-cli, kube-state-metrics, thanos, cluster-api-gcp-controller, kafka-proxy, cilium-envoy, docker-cli, migrate, contour, nginx-prometheus-exporter, rancher-machine,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: redka, keda, nri-redis, lvm-driver, thanos-operator, crossplane-provider-aws-iam, newrelic-k8s-metadata-injection, kserve-modelmesh-serving, kubeflow-pipelines, sftpgo-plugin-auth, pgpool2exporter, mkcert, consul-k8s, kubernetes-csi-driver-nfs, boring-registry, undoc...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: redka, keda, nri-redis, lvm-driver, thanos-operator, crossplane-provider-aws-iam, newrelic-k8s-metadata-injection, kserve-modelmesh-serving, kubeflow-pipelines, sftpgo-plugin-auth, pgpool2exporter, mkcert, consul-k8s, kubernetes-csi-driver-nfs, boring-registry, undoc...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: redka, keda, nri-redis, lvm-driver, thanos-operator, crossplane-provider-aws-iam, newrelic-k8s-metadata-injection, kserve-modelmesh-serving, kubeflow-pipelines, sftpgo-plugin-auth, pgpool2exporter, mkcert, consul-k8s, kubernetes-csi-driver-nfs, boring-registry, undoc...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: azurefile-csi, thanos, docker-cli-fips, kyverno-policy-reporter-plugins-trivy, wuzz, redis-operator-fips, linkerd2-fips, istio-fips, agentbeat, gitlab-pages-fips, crossplane-aws-provider, nri-apache, seaweedfs-operator-fips, kubernetes-csi-livenessprobe-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: azurefile-csi, thanos, docker-cli-fips, istio-fips, agentbeat, gitlab-pages-fips, crossplane-aws-provider, seaweedfs-operator-fips, kubernetes-csi-livenessprobe-fips, ceph-csi-operator, fscrypt, crossplane-provider-aws-efs, volume-modifier-for-k8s-fips,...

The vulnerability of the register_shm_helper() function in the drivers/tee/tee_shm.c module of the Linux kernel’s secure execution environment driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file, a driver for the secure execution environment of the Linux kernel, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

EUVD-2026-10332

Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...

CVE-2026-2261

The CVE-2026-2261 issue affects blocklistd where a programming error leaks a socket descriptor per adverse event, eventually exhausting file descriptors. After a moderate number of leaks, the process cannot run the helper script because a forked child dereferences a null pointer and crashes, prev...

CVE-2026-2261 blocklistd(8) socket leak

Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...

CLSA-2026-1773048865 kernel: Fix of 53 CVEs

xhci: Remove device endpoints from bandwidth list when freeing the device CVE-2022-50470 - HID: multitouch: Add NULL check in mtinputconfigured CVE-2024-58020 - netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX CVE-2025-38201 - fs: writeback: fix use-after-free in markinodedirty...

CLSA-2026-1773044010 kernel: Fix of 10 CVEs

ACPICA: Add AMLNOOPERANDRESOLVE flag to Timer CVE-2023-53395 - net: ppp: Add bound checking for skb data on pppsynctxmung CVE-2025-37749 - ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS CVE-2022-50315 - ext2: Check block size validity during mount CVE-2023-53569 - gfs2: Fix possible data races...

PT-2026-24060

Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...

MAL-2026-1282 Malicious code in xmrig-miner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3d760afc863697f46cbb6716644c1e7b7e937044ee10ce72b3bce7b549cdcc8 Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicio...