Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.4.1 is now available. See the documentation for bug fix information:...

CVE-2026-16051

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

EUVD-2026-57085

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

CVE-2026-16051 WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

CVE-2026-16051

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

CVE-2026-16051

The CVE covers the wpmudev-updates WordPress plugin prior to 5.0.1. Affected component: the remote management interface; it does not verify the integrity of installed packages and lacks replay protection for management requests. This enables an attacker who can obtain or replay a valid signed man...

EUVD-2025-210717

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

PT-2026-71072

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to properly validate LUKS Linux Unified Key Setup encryption. When encryption is detected, the system skips all CryptoPro file integrity checks, which a...

EUVD-2025-210713

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59324

CVE-2025-59324 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The vulnerability is that the component fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped. This can undermine integrity verification for protect...

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59327

CVE-2025-59327 affects CPSD CryptoPro Secure Disk for Bitlocker (before v7.7.4). The bootxsa.efi component fails to properly validate LUKS encryption, and if encryption is present, all CryptoPro file integrity checks are skipped. This may impair detection of integrity violations when BitLocker is...

CVE-2025-59326

CVE-2025-59326 affects CPSD CryptoPro Secure Disk for Bitlocker; prior to v7.7.4, it does not enforce IMA policy protections on temporary file systems, enabling unsigned code execution from those locations. Root cause: IMA policy enforcement gap. Impact: high (per CVSS 3.1). Remediation: upgrade ...

PT-2026-71071

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to validate the integrity of the DataStore, which is a non-partitioned filesystem used to store configuration and cryptographic details. An attacker can...

GitLab 19.0 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-15423)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19... CVE-2026-15423 Note that Nessus has not tested for this issue but has instead relied only on the...

PT-2026-71163

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw...

PT-2026-71075

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The bootxsa.efi component fails to properly validate LUKS Linux Unified Key Setup encryption. When encryption is detected, the system skips all CryptoPro file integrity...

CVE-2025-59323

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details. Crafted DataStore contents can impact service availability and/or allow for code execution in the...

EUVD-2025-210711

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value. A crafted Linux partition could be inserted ahead of this intended target, allowing for code execution in the...

CVE-2025-59319

CVE-2025-59319 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The vulnerability arises because the boot partition integrity is not certified and the software selects the first partition index that matches a hardcoded type value. An attacker could insert a crafted Linux partitio...