PT-2026-82088

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 3.11.0 through 3.17.0 Description An issue exists where the attach-consumer-label plugin fails to correctly sanitize certain input values. This allows an attacker to perform an authorization bypass or escalate privileges...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104571 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: aalabelalloc use aalabelfree on alloc failure aalabelalloc allocates a secid before...

Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104840 advisory. A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098816)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098816 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: facm: Refactor bind path to use free After an bind/unbind cycle, the acm-notifyreq i...

RHEL 9 : rhc (RHSA-2026:60354)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60354 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099014 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor bind path to use free After an bind/unbind cycle, the ecm-notifyreq i...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the JWE.deserialize method jwcrypto/jwe.py:555, which calls rawjwe.split'.' on the input before checking that the compact serialization has the required five segments . An attacker...

A Self-Evolving Multi-Agent Framework Defense against LLM Jailbreak Attacks

Large language models LLMs remain vulnerable to jailbreak attacks that exploit techniques such as role-playing, obfuscation, code transformation, and multi-step indirection to elicit harmful outputs. As jailbreak strategies keep emerging, defenses have proliferated in an ongoing cat-and-mouse gam...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-032351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032351 advisory. A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104569 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before nonewprivs test aachangeprofile builds a replacement label wit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104559 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104802)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104802 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098940)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098940 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhcinit accepts rslots == 0 a...

RHEL 9 : rhc (RHSA-2026:60315)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:60315 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

CVE-2026-80570: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

PT-2026-82177

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the decode locker function within cls lock client.c contains three unsafe decode operations. A malicious or compromised OSD Object Storage Device in a multi-tenant...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pyyaml (UTSA-2026-093159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093159 advisory. A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML...

PT-2026-82097

Name of the Vulnerable Software and Affected Versions Formidable Charts versions prior to 2.0.2 Description An issue exists that allows unauthenticated attackers to perform Directory Traversal, a method used to access files and directories that are stored outside the web root folder. By...

CVE-2026-80194: Exposure of Sensitive Information to an Unauthorized Actor

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...

CVE-2026-80201: Improper Control of Generation of Code

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken and getPlainApiToken methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered...