Rocky Linux 10.2 [CIQ] Security Update: yggdrasil-worker-package-manager / etc Multiple Vulnerabilities (crlsa-2026_69099)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of...

CVE-2026-102122

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

CVE-2026-102122

The Kiteworks Core platform contains an incorrect authorization vulnerability where the system fails to properly restrict role assignments for shared folders. In a default configuration, an authenticated user with the Manager role can escalate their privileges by granting themselves or other fold...

CVE-2026-102122 Kiteworks Core Incorrect Authorization

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

CVE-2026-102122 Kiteworks Core Incorrect Authorization

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

EUVD-2026-90296

Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...

Exploit for CVE-2026-76504

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Unauthenticate...

CLEANSTART-2024-XJ18859 Composer is a dependency manager for PHP

Security vulnerability affects the composer package. Composer is a dependency manager for PHP...

CLEANSTART-2024-SA12234 Composer is an open source dependency manager for the PHP language

Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language...

CLEANSTART-2024-VD23894 Composer is a dependency manager for the PHP programming language

Security vulnerability affects the composer package. Composer is a dependency manager for the PHP programming language...

CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP

Security vulnerability affects the composer package. Composer is a dependency manager for PHP...

CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language

Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...

CLEANSTART-2024-ND02975 Composer is a dependency manager for PHP

Security vulnerability affects the composer package. Composer is a dependency manager for PHP...

CVE-2026-103474

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...

CVE-2026-47567

A flaw was found in the NVIDIA GPU display driver. A local user with standard privileges can trigger this vulnerability within the kernel mode layer by exhausting the Direct Rendering Manager DRM virtual memory area VMA offset address space. This uncontrolled resource consumption can lead to a...

CVE-2026-47496

A flaw was found in the NVIDIA Virtual GPU vGPU Manager within the NVIDIA GPU Display Driver. A user within a guest virtual machine VM can exploit this vulnerability by sending a specially crafted Remote Procedure Call RPC request to the host system, causing an out-of-bounds memory write. A...

CVE-2026-102392

The Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin for WordPress is vulnerable to a PHP Object Injection vulnerability in versions

CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...

EUVD-2026-90205

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...

CVE-2026-47574

NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability where an attacker could cause incorrect resource transfer between spheres. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...