CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: sqlx, sdp-k8s-injector, vector, deno, rpm-sequoia, rustup, sccache...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

GHSA-PQF5-4PQQ-29F5 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: ztunnel-fips, bootc, guestproxyagent, komodo, sqlx, sdp-k8s-injector, valkey-ldap, vector, deno, rpm-sequoia, rustup, sccache, rustls-openssl-client, sentry-cli, typst...

OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR

Summary A flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files when Java injection is enabled and OBI is running with elevated privileges. The injector trusted TMPDIR from the target process and used unsafe file creation...

Metasploit Wrap-Up 03/27/2026

Better NTLM Relaying Functionality This week’s release brings an improvement to the SMB NTLM relay server. In the past, it’s support has been expanded with modules for relaying to HTTP ESC8, MSSQL and LDAP while still receiving connections over the humble SMB service. Prior to this release, clien...

CVE-2026-2809

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

CVE-2026-2809 Endpoint DLP Driver DLL

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

CVE-2026-2809 Endpoint DLP Driver DLL

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

CVE-2026-2809

CVE-2026-2809 is reported as a memory-safety bug in the JavaScript: WebAssembly component, per the FreeBSD VUXML entry for Mozilla—Multiple vulnerabilities. The connected document confirms the issue title but provides no product/version specifics or patch details. No exploitation details are prov...

PT-2026-25943

Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow a privileged user to trigger an integer overflow within the DLL Injector, leading to a Blue-Screen-of-Death BSOD. Successful...

Netskope Endpoint DLP Module 安全漏洞

The Netskope Endpoint DLP Module is a data loss protection module developed by the American company Netskope for endpoint devices. The Netskope Endpoint DLP Module has a security vulnerability, which stems from integer overflow in the DLL injector. This vulnerability could allow privileged users ...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: mountpoint-s3, sqlx, pixi, efs-utils, py3-xet-core, uv, wadm, yazi, cargo-audit, helix, wizer, nushell, linkerd-await, mdbook, geckodriver, shadowsocks-rust, linkerd2-proxy, lychee, tealdeer, rustup, cargo-c, sccache, wasmtime, netavark, berg, samply, topgrade, zizmo...