Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.1

Logging for Red Hat OpenShift - 6.6.1 Red Hat OpenShift Logging 6.6.1 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2026-69391

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69391

CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

Windows Broker Infrastructure Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally...

CVE-2026-79576

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

EUVD-2026-72848

An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...

CVE-2026-79576

Digital-Infrastructure v9.6.7 has a vulnerability in its Single-Sign On (SSO) component that allows an unauthenticated, remote attacker to authenticate as any user, including the Admin, without a password . The flaw is network-exploitable with no user interaction or prior privileges required, rat...

PT-2026-85379

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device...

PT-2026-85378

CVE-2026-82684: Missing authorization in Tycon Systems TPDIN-Monitor-WEB3 ≤2.2.9 lets attackers dump system credentials, configs, or flash contents. CVSS 8.1. Unpatched—assume exposure. Isolate affected units and restrict access https://t.co/MztgdxQJ6F CVE CVEAlert infosec SysAdmin cybersecurity...

PT-2026-85371

Name of the Vulnerable Software and Affected Versions Rockwell Automation 1756-ENBT affected versions not specified Description A denial-of-service flaw exists in the 1756-ENBT module, which serves as an EtherNet/IP bridge for ControlLogix controllers. An attacker can crash the device by sending ...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: pinot-fips, kserve-modelmesh, cassandra, druid, seata, kafbat-ui, geoserver, apache-tika, sonarqube, opensearch, hadoop-fips, logstash, solr, apache-nifi, pinot, opensearch-fips, neo4j, strimzi-kafka-operator, trino, jenkins, localstack, ruby3.4-jrjackson,...

CVE-2026-53682

Dogtag PKI (pki-core) exposes the Security Domain hosts inventory via the REST endpoint GET /ca/rest/securityDomain/hosts without requiring authentication (no principal, client certificate, or session). An unauthenticated client can receive a structured response enumerating internal PKI/CA hosts ...

CLEANSTART-2026-NM54655 Security fixes in newrelic-infrastructure-agent 1.78.1-r4

Package newrelic-infrastructure-agent version 1.78.1-r4 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-PI75213 Security fixes in newrelic-infrastructure-agent 1.78.1-r2

Package newrelic-infrastructure-agent version 1.78.1-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-PP67363 Security fixes in newrelic-infrastructure-agent 1.79.0-r1

Package newrelic-infrastructure-agent version 1.79.0-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-FY98026 Security fixes in newrelic-infrastructure-agent 1.76.2-r1

Package newrelic-infrastructure-agent version 1.76.2-r1 fixes 3 vulnerabilities: ghsa-hrxh-6v49-42gf, CVE-2026-41178, ghsa-259r-337f-4rfw...

CLEANSTART-2026-ZB65236 Security fixes in newrelic-infrastructure-agent 1.78.1-r1

Package newrelic-infrastructure-agent version 1.78.1-r1 fixes 2 vulnerabilities: CVE-2026-41178, ghsa-259r-337f-4rfw...

PT-2026-84458

Name of the Vulnerable Software and Affected Versions GeoNetwork versions prior to 4.4.12 GeoNetwork versions prior to 4.2.17 Description The Saxon XSLT processor used to render formatters is configured without secure processing FEATURE SECURE PROCESSING and without disabling Java extension...

PT-2026-84456

Summary An unauthenticated server-side request forgery vulnerability lets any anonymous user make the GeoNetwork server issue arbitrary outbound HTTP requests. This gives an external attacker a position inside the server's network, making it possible to make internal requests no matter if the...