Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101108 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100943 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101098 advisory. Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100971 advisory. Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable...

MINI-559Q-32Q9-5GJW

Bulletin has no description...

MINI-JC2R-CJCV-253M

Bulletin has no description...

CVE-2026-18385 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field

The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.19. This is due to the software allowing users to execute an...

PT-2026-73099

Name of the Vulnerable Software and Affected Versions ProfilePress versions prior to 4.16.20 Description Authenticated attackers with subscriber-level access and above can execute arbitrary shortcodes. This occurs because the software fails to properly validate values before executing the do...

Bounded Agents: Delegation Security for Multi-Agent AI Systems

LLM-based agents can act on behalf of a user to access cloud services, call tools, or invoke agents. At session start, the agent's permissions are set but remain static, and each request is evaluated independently, without considering prior actions. Within its permissions, an agent may act contra...

MINI-V52R-8V59-XRHM

Bulletin has no description...

MINI-MRRM-G3VP-8596

Bulletin has no description...

MINI-6C2Q-X439-RVWQ

Bulletin has no description...

MINI-VP58-G7P9-HR4X

Bulletin has no description...

MINI-2C29-Q3RH-PWX4

Bulletin has no description...

MINI-39Q4-GM5H-2537

Bulletin has no description...

MINI-8W7Q-38C3-CQHH

Bulletin has no description...

PT-2026-72030

Name of the Vulnerable Software and Affected Versions dnsmasq affected versions not specified Description A flaw in the dnssec.c library can cause the dnsmasq service to enter an infinite loop. An attacker controlling any DNSSEC-signed zone can trigger this state by sending a single crafted...

MINI-R2MJ-QPQG-M8FR

Bulletin has no description...

CVE-2026-56657

A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...

CVE-2026-46382

A flaw was found in the Meeting Room Booking System MRBS. This vulnerability, known as Server-Side Request Forgery SSRF, allows a remote attacker to trick the server into making requests to internal or local network resources. By exploiting this, an attacker could potentially gain unauthorized...