Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.84 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.84 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability arises from the possibility that low-privilege attackers could trigger critical system functions, potentially leading to service interruptions...

PT-2026-3111

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on MX, SRX and EX Series versions prior to 22.4R3-S8 Juniper Networks Junos OS on MX, SRX and EX Series versions 23.2 before 23.2R2-S5 Juniper Networks Junos OS on MX, SRX and EX Series versions 23.4 before 23.4R2-S6...

PT-2026-2996

Name of the Vulnerable Software and Affected Versions versions prior to 2026-22915 Description An attacker with limited access rights could potentially read files from designated directories on a device, which may lead to the disclosure of confidential data. Approximately zero devices are estimat...

Epic Games Store security vulnerabilities

Epic Games Store is an online gaming platform operated by Epic Games, a company based in the United States. There is a security vulnerability in Epic Games Store, which stems from the ability for low-privilege users to replace DLL files during the installation process, potentially leading to an...

PT-2026-3153

Name of the Vulnerable Software and Affected Versions Dolibarr ERP-CRM version 14.0.2 Description Dolibarr ERP-CRM version 14.0.2 has a stored cross-site scripting issue in the ticket creation module. Low-privilege users can inject malicious scripts. An attacker can create a specially designed...

PT-2026-2997

Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration...

PT-2026-3109

An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the...

PT-2026-3118

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S7 Juniper Networks Junos OS versions prior to 23.2R2-S4 Juniper Networks Junos OS versions prior to 23.4R2 Description A Stack-based Buffer Overflow exists in the Packet Forwarding Engine pfe...

SICK TDC-X401GL has security vulnerabilities

The SICK TDC-X401GL is a edge computing gateway from the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability arises from the possibility for low-privilege attackers to read files from specific directories on the device, potentially leading to the exposure of...

CVE-2025-68789

No description is available for this CVE. Mitigation To mitigate this issue, prevent the ibmpex module from being loaded if IBM PowerExecutive hardware monitoring is not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module...

CVE-2026-0531

A flaw was found in Kibana. An attacker with low-level privileges equivalent to the viewer role, can exploit this vulnerability by sending a specially crafted bulk retrieval request. This request can trigger redundant database operations, causing the application to consume excessive memory,...

CVE-2026-0513

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management SICF Handler in SRM Catalog, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application...

CVE-2026-0504

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...

CVE-2026-0493

Due to a Cross-Site Request Forgery CSRF vulnerability in SAP Fiori App Intercompany Balance Reconciliation an attacker could execute state?changing actions using an inappropriate request type, this deviation from expected request semantics may allow an attacker to trigger unintended actions on...

CVE-2026-0497

SAP Product Designer Web UI of Business Server Pages allows authenticated non-administrative users to access non-sensitive information. This results in a low impact on confidentiality, with no impact on integrity or availability of the application...

CVE-2026-0510

The User Management Engine UME in NetWeaver Application Server for Java NW AS Java utilizes an obsolete cryptographic algorithm for encrypting User Mapping data. This weakness could allow an attacker with high-privileged access to exploit the vulnerability under specific conditions potentially...

CVE-2026-0495

SAP Fiori App Intercompany Balance Reconciliation allows an attacker with high privileges to send uploaded files to arbitrary emails which could enable effective phishing campaigns. This has low impact on confidentiality, integrity and availability of the application...

CVE-2026-0503

Due to missing authorization check in the SAP ERP Central Component SAP ECC and SAP S/4HANA SAP EHS Management, an attacker could extract hardcoded clear-text credentials and bypass the password authentication check by manipulating user parameters. Upon successful exploitation, the attacker can...

kernel: e1000e: fix heap overflow in e1000_set_eeprom

A heap‑overflow vulnerability was discovered in the linux kernel e1000e driver’s e1000seteeprom function, insufficient validation of the requested length for an EEPROM change could allow a local, low‑privilege user to trigger memory corruption heap overflow. A local unprivileged user with access ...