PT-2026-65853

Name of the Vulnerable Software and Affected Versions Logging operator versions prior to 6.6.0 Description The Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes Custom Resource Definition CRD strings directly into the fluent.conf file without proper...

Exploit for Insertion of Sensitive Information into Log File in Ayesa Ibermatica_Rps

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security...

UBUNTU-CVE-2026-64527

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receive callback hypervreceivesub reads msg-vidhdr.type and dispatches into one of four message-type branches without knowing how many bytes the host wrote into hv-recvbuf. The completion...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, cinc-auditor...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kube-logging-operator, cinc-auditor, gitlab-rails-ce...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: cinc-auditor, pact-broker-docker, ruby3.2-fluentd-kubernetes-daemonset, logstash, gitlab-rails-ce-fips, pghero, kube-logging-operator, gitlab-rails-ce, pghero-fips...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: cinc-auditor, pact-broker-docker, ruby3.2-fluentd-kubernetes-daemonset, logstash, gitlab-rails-ce-fips, pghero, kube-logging-operator, gitlab-rails-ce, pghero-fips...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, kube-logging-operator, cinc-auditor, gitlab-rails-ce...

GHSA-464C-974J-9XM6 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

Summary The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS...

EUVD-2026-48658

In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in childregionswithfirmware Move ofnodeputchildregion after the error print to avoid accessing freed memory when prerr references childregion. Yilun: Fix the Fixes tag...

laravel-threat-detection v1.4.0

Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS CodeBuild...

Oracle Linux 10 : tomcat9 (ELSA-2026-25341)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25341 advisory. - Resolves: RHEL-150720 Tomcat: Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: Tomcat: OCSP checks sometime...

Updated dnsmasq packages fix security vulnerabilities

The updated dnsmasq packages fix multiple security issues: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an...

MGASA-2026-0288 Updated dnsmasq packages fix security vulnerabilities

The updated dnsmasq packages fix multiple security issues: A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an...