Important: Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.2 delivers an Ansible-first Red Hat Developer...

CVE-2026-72193

A flaw was found in the Linux kernel's ntfs3 driver. A remote attacker could exploit this by providing a specially crafted NTFS3 disk image, which, when mounted, triggers an in-kernel infinite loop. This can cause the system to hang, leading to a Denial of Service DoS where the system becomes...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.26 and 13.4.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-66793

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

EUVD-2026-60951

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-66793

In Red Hat Advanced Cluster Management for Kubernetes, the governance-policy-addon-controller allows a user with annotation permissions on a namespaced ManagedClusterAddOn resource to override the governance-policy container image. The attacker's image runs with cluster-admin privileges on the ma...

CVE-2026-66793 Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

CVE-2026-66793 Governance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spoke

A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A user with permissions to annotate the namespaced ManagedClusterAddOn resource can override the governance-policy container image. This allows an attacker to run a controll...

Apple fixes another image-processing flaw that could allow code execution

Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and macOS Tahoe,including yet another image parsing vulnerability that could compromise your device. This update delivers security fixes that were first made available in the iOS 27 and iPadO...

GO-2026-6100 Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server in github.com/cloudreve/Cloudreve

Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server in github.com/cloudreve/Cloudreve...

GO-2026-6229 Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner

Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner...

ANT-2026-6YNNSAA0 · supabase/supabase · other

other low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-6YNNSAA0: Image-generation function fetches arbitrary caller URL with service-role in scope The...

CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-72185

A flaw was found in the Linux kernel's NTFS filesystem driver. A specially crafted NTFS image could cause the system to incorrectly process attribute data during mounting. This could lead to a kernel warning and corruption of internal data structures, potentially resulting in system instability o...

CLSA-2026-1787043483 TuxCare security update for pillow (1 CVE)

TuxCare rebuilt pillow to address 1 CVE. Fixed in 10.4.0.post4+tuxcare...

ANT-2026-F5JK7RDG · supabase/postgres · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-F5JK7RDG: Cloud image provisioned with default root password and SSH password auth The cloud-init user-data baked...

EUVD-2026-60509

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...