Malicious code in app-soda-layer (npm)

app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...

CVE-2026-10051 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, solr, druid, confluent-kafka, strimzi-kafka-operator...

GHSA-W7X5-G22V-XQHR vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, trino, akhq, solr, druid, confluent-kafka, strimzi-kafka-operator...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, akhq, solr, druid, confluent-kafka, strimzi-kafka-operator...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: neo4j, dependency-track, trino, akhq, solr, druid, confluent-kafka, strimzi-kafka-operator...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi, tez, management-api-for-apache-cassandra-5.0, apache-pulsar, akhq, spark, opensearch, zipkin, druid, apicurio-registry, strimzi-kafka-operator...

Mirage Kitten targets Middle East and Africa region with new malware

Introduction Mirage Kitten – also known as UNC1549, Smoke Sandstorm, and Nimbus Manticore – is an advanced persistent threat APT group focused on cyber-espionage operations against aerospace, aviation, defense, and telecommunications sectors across the Middle East and Africa, using highly targete...

RHEL 8 : gstreamer1-plugins-good (RHSA-2026:47174)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47174 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:47052)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47052 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a...

RHEL 7 : gstreamer1-plugins-bad-free (RHSA-2026:47176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47176 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

PT-2026-65656

Summary The WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce --no-delete on the WebDAV MOVE verb. MOVE deletes the source file rename removes it from its original path, and with Overwrite: T it additionally performs an explicit RemoveAll on the destination. Under -w...

PT-2026-65664

Summary When datamodel-code-generator fetches a remote schema and follows an HTTP redirect, it re-sends the original request headers, including any Authorization header, to the redirect target even when the redirect changes origin host/port/scheme. Credentials that an operator scoped to a trusted...

PT-2026-65666

GHSA-wvhv-qcqf-f3cx fixed the per-folder .goshs ACL bypass on the state-changing routes PUT/POST upload/?mkdir/?delete and added recursive ACL resolution, and its description states the read/list path correctly enforces .goshs. That premise does not hold for the ?bulk zip-download route...

RHEL 9 : kernel (RHSA-2026:47040)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47040 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling...

RHEL 10 : pipewire (RHSA-2026:47083)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47083 advisory. PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary...

RHEL 8 : nodejs:22 (RHSA-2026:47059)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47059 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:47076)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47076 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

PT-2026-65635

Summary The Constellation-tunnel bypass branch in tokenMiddleware at src/proxy/routerGen.go:53-66 returns to the upstream handler before the request's x-cosmos-user, x-cosmos-role, x-cosmos-user-role, and x-cosmos-mfa headers are stripped at lines 68-72, and before the AdminOnlyWithRedirect gate ...

Samba AD LDAP Compare filter injection and trusted-request

Description Samba's LDAP CompareRequest path contains two independent security flaws that can be combined by an authenticated attacker to construct a reliable oracle for protected confidential Active Directory attributes. 1. Filter Injection Flaw When processing an LDAP Compare request, Samba...

RHEL 8 : gstreamer1-plugins-bad-free (RHSA-2026:47075)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:47075 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...