CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

OESA-2026-3771 webkitgtk security update

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3. Security Fixes: A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. The vulnerability...

EUVD-2026-77626

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-10853)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's cluster repository manager Vulnerability Details CVEID:CVE-2026-10853 DESCRIPTION: IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrar...

CVE-2026-21391

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

EUVD-2026-77425

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

EUVD-2026-77374

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate that a property field belongs to the specified run before updating its value which allows an authenticated user with run property-management access to crash the Playbooks plugin via a REST...

PT-2026-91714

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description Improper validation of HTTP headers allows a remote attacker to bypass authorization and invoke restricted endpoints. Recommendations At the moment, there is no...

RHEL 10 : tomcat (RHSA-2026:67164)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67164 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: Apache...

PT-2026-91439

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

CVE-2026-16338: External Control of File Name or Path

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths...

CVE-2026-15955: Improper Limitation of a Pathname to a Restricted Directory

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths...

PT-2026-91268

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway affected versions not specified Cisco Secure Email and Web Manager affected versions not specified Description Issues exist due to improper validation of specified quantity in input, which can lead to a remote denial...

PT-2026-91163

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

PT-2026-91162

Name of the Vulnerable Software and Affected Versions Mattermost version 11.9.0 Mattermost version 11.8.4 Mattermost version 11.7.7 Mattermost version 10.11.22 Description An issue exists where the system fails to validate if a property field belongs to the specified run before updating its value...

CVE-2026-76442: Improper Validation of Specified Quantity in Input

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

Linux Distros Unpatched Vulnerability : CVE-2026-90467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO...

CVE-2026-89716

A flaw was found in the zram component of the Linux kernel. This vulnerability occurs because the system does not properly validate user-supplied deflate parameters, specifically winbits values. An attacker could exploit this by providing malformed input, which would trigger an internal error BUG...

CVE-2026-89529

A flaw was found in the Linux kernel's svcrdma component, which handles Remote Procedure Call over Remote Direct Memory Access RPC/RDMA Read operations. This vulnerability occurs because the Read list decoder does not properly validate the lengths of incoming data segments. An attacker could send...

DEBIAN-CVE-2026-80993

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in phylinkinbandcaps In phylinkinbandcaps, the PCS returned by macselectpcs is only checked if NULL but macselectpcs can also return an error pointer. This can cause a kernel panic as...