kernel-rt security update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues

Summary Multiple vulnerabilities affect IBM Sterling External Authentication Server and are addressed in the latest release and ifix Vulnerability Details CVEID:CVE-2025-62718 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not...

CVE-2026-14203

The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the...

Important: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2026-17500

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function visitpattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance...

PT-2026-65361

Gitea: REST API exposes organization membership of private organizations to public in gitea.dev...

PT-2026-65164

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.8 macOS versions prior to 14.8.8 macOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access...

PT-2026-65209

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.6 Description An access issue exists where an application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms that isolate...

PT-2026-65283

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update iOS to version 26.6...

PT-2026-65365

Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API in gitea.dev...

PT-2026-65247

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A privacy issue exists where an app may be able to leak sensitive user information. This was addressed by removing the...

PT-2026-65114

Name of the Vulnerable Software and Affected Versions JFrog Artifactory affected versions not specified Description An authentication handling weakness exists in internal request processing. Under specific conditions, this flaw may allow an attacker to bypass authentication and escalate privilege...

PT-2026-65127

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue involving state management leads to memory corruption, which may allow an application to cause a denial o...

PT-2026-91467

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.8 Description A correctness issue exists where an attacker with physical access to a device may be able to silently persist an Apple Account on a device that has been erased. Recommendations Update macOS...

PT-2026-65183

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue exists where an application may be able to intercept network connections intended for another process...

PT-2026-65382

Gitea: Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access in gitea.dev...

PT-2026-65137

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious application may be able to bypass Privacy preferences...

PT-2026-65167

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A permissions issue exists where an application may be able to read files outside of its sandbox. Sandboxing is a...

PT-2026-65165

Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.6 watchOS versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an app to access sensitive user data. Recommendations Update macOS to version 26.6. Updat...

PT-2026-65269

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management. This flaw could allow a malicious application to break...