Rocky Linux 9.6 [TuxCare] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / ant-apache-oro / etc (ALMALINUX9.6:CLSA-2026:1789746085)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789746085 advisory. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it ...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1750785864)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750785864 advisory. - Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated clien...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS-STREAM8:CLSA-2026:1778839666)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1778839666 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing...

CVE-2026-96825: Authentication Bypass by Spoofing

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

PT-2026-103210

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CentOS Linux 8.4 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.4:CLSA-2026:1782979343)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1782979343 advisory. - A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security TLS servers. An attacker...

AlmaLinux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1783436433)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783436433 advisory. - In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an...

Rocky Linux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1783436433)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783436433 advisory. - In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an...

CVE-2026-100296 Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5

In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web server's SOAP-RPC handler, silently downgrades the administrator password to the default value and corrupts the in-memory authentication state until the device reloads. The handler...

CVE-2026-95340

An incorrect authorization flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553268567...

CVE-2026-95358

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

Improper Certificate Validation

Netty is vulnerable to Improper Certificate Validation. The vulnerability is due to disabled TLS hostname verification in the SslProvider.OPENSSL client path under specific configurations, which allows a man-in-the-middle attacker to present a certificate issued for a different hostname and...

Improper Neutralization of Special Elements in Data Query Logic

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in fast-uri.

Summary Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in fast-uri. CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parse...

CVE-2026-93761

A flaw was found in Mongoid. An inefficient regular expression regex complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated attacker to cause excessive processing within an embedding application. This can lead to a denial of service DoS...

Confidence-Guided Protocol IR for LLM-Aided Security Protocol Modeling

Large language models offer a promising interface for translating natural-language protocol descriptions into formal security models, but their outputs remain difficult to trust without expert validation. In this paper, we present a human-in-the-loop framework for generating Tamarin-verifiable...

CVE-2026-95328: Unintended Proxy or Intermediary

Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Low...

CVE-2026-95358: Incorrect Authorization

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

Amazon Linux 2023 : awscli-2 (ALAS2023-2026-3133)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3133 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most...

Medium: awscli-2

Issue Overview: Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most systems may allow other local users on the same host to read credentials written by certain...