org.apache.camel.quarkus:camel-quarkus-infinispan (2.10.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.10.0) +3 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.17.0)

org.apache.camel:camel-infinispan MAVEN version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.10.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (2.11.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (2.11.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.18.0)

org.apache.camel:camel-infinispan MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan 2.11.0 -...

org.apache.camel.kafkaconnector:camel-infinispan-kafka-connector (0.7.0), org.apache.camel.quarkus:camel-quarkus-infinispan (>=1.5.0, <=1.6.0) +3 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.7.0)

org.apache.camel:camel-infinispan MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.kafkaconnector:camel-infinispan-kafka-connector 0.7.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=0.3.0, <=0.4.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=0.3.0, <=0.4.0) +2 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.0.0-rc3)

org.apache.camel:camel-infinispan MAVEN version 3.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =0.3.0, =0.3.0, =0.3.0, =0.4.0 -...

org.apache.camel.quarkus:camel-quarkus-infinispan (>=2.8.0, <=2.9.0), org.apache.camel.quarkus:camel-quarkus-infinispan-deployment (>=2.8.0, <=2.9.0) +3 more potentially affected by CVE-2026-6857 via org.apache.camel:camel-infinispan (3.16.0)

org.apache.camel:camel-infinispan MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-infinispan and may be impacted: - org.apache.camel.quarkus:camel-quarkus-infinispan =2.8.0, =2.8.0, =2.8.0, =2.9.0 -...

CVE-2026-4117

The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5. This is due to a missing capability check in the CalJSettingsPage class constructor, which processes the 'save-obtained-key' operation directly from POST data without verifying that the...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Security Bulletin: Due to use angular-1.8.2.min.js , IBM webMethods Integration Server is affected by multiple vulnerabilities.

Summary Multiple vulnerabilities were addressed in IBM webMethods Integration Server by upgrading the version of the Angular framework. Vulnerability Details CVEID:CVE-2025-0716 DESCRIPTION: Improper sanitization of the value of the 'href' and 'xlink:href' attributes in 'image' SVG elements in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013526 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible leaked pernet namespace in smcinit In smcinit,...

PT-2026-34611

Name of the Vulnerable Software and Affected Versions monetr versions prior to 1.12.5 Description A server-side request forgery SSRF issue in the Lunch Flow integration allows authenticated users on self-hosted instances to force the server to send HTTP GET requests to arbitrary URLs. The respons...

PT-2026-34568

WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions without proper privilege verification. Attackers can enumerate integrations including webhook URLs, create new...

CVE-2026-41455: Server-Side Request Forgery (SSRF)

WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...

CVE-2026-41454: Missing Authorization

WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrative actions without proper privilege verification. Attackers can enumerate integrations including webhook URLs, create new...

EUVD-2026-24384

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Knowledge Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM...

CVE-2026-40608

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers /api/state, /api/restore, and /api/history-svg that process incoming requests by accumulating the entire request body into a...

EUVD-2026-24217

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers /api/state, /api/restore, and /api/history-svg that process incoming requests by accumulating the entire request body into a...

CVE-2026-40608 Next AI Draw.io: Unbounded HTTP Body — Denial of Service

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers /api/state, /api/restore, and /api/history-svg that process incoming requests by accumulating the entire request body into a...

5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time

Security teams often present MTTR as an internal KPI. Leadership sees it differently: every hour a threat dwells inside the environment is an hour of potential data exfiltration, service disruption, regulatory exposure, and brand damage. The root cause of slow MTTR is almost never "not enough...

CVE-2026-34297: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite component: Knowledge Integration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM...

Oracle HCM Common Architecture security vulnerabilities

Oracle HCM Common Architecture is an HR management system architecture component developed by Oracle, a US-based company. Versions 12.2.3 to 12.2.15 of Oracle HCM Common Architecture contain security vulnerabilities. These vulnerabilities stem from issues with the Knowledge Integration component,...