CVE-2026-50775: Server-Side Request Forgery (SSRF)

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

Linux kernel module fat DoS

The vulnerability of the fat kernel module in the Linux operating system is related to a significant loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure using a corrupted FAT image...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099777 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-65347: Uncontrolled Resource Consumption

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to a denial-of-service...

Medium: gimp

Issue Overview: A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions ysize and zsize are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum valu...

CVE-2026-58560: NULL Pointer Dereference

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: udisks2 (UTSA-2026-090565)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090565 advisory. A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this...

Unity Linux 20.1070e Security Update: ntfs-3g (UTSA-2026-099508)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099508 advisory. In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100321 advisory. In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted...

Unity Linux 20.1060e / 20.1070-8ae / 20.1070e Security Update: podman (UTSA-2026-099588)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099588 advisory. The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform,...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099455 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occur...

PT-2026-73225

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-60351

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-50775

A blind SSRF vulnerability exists in DataHub v.1.5.0.1 , which allows a remote attacker to achieve arbitrary code execution . The root cause occurs when the server retrieves an image from a crafted URL ; notably, the application fails to return any content or errors directly. No specific remediat...

PT-2026-73224

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-76672

In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lines or into manifests. This mostly applies to the Image URL and BMC credentials which are not verified by FakeFish...

CVE-2026-65346: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution...

PT-2026-76596

A vulnerability was found in Kira-Pgr PromptShopMCP up to 5bc0cd17358e19a5415d11a531088170d7b81452. Affected is the function download image of the file server.py of the component Image-Toolkit-MCP-Server. Performing a manipulation of the argument image url results in server-side request forgery...