CVE-2026-81500

Summary The "incus" CLI, when exporting or copying an image from a remote server into a directory target, takes the local filename verbatim from the server-controlled "Content-Disposition: filename=" for UNIFIED images and passes it into "os.Renametmp, filepath.Jointarget, resp.MetaName" with no...

CVE-2026-81496

Summary "POST /1.0/instances" with an "application/octet-stream" body instance backup import reads the instance name from the tarball's "backup/index.yaml" verbatim and uses it as an on-disk path segment. A project user with the "cancreateinstances" entitlement can set "name:...

CVE-2026-81497

Summary The fix for CVE-2026-48752 "GHSA-vxp5-584q-c479", template-traversal to host read/write, addressed in 7.2.0 was applied to the LXC container driver only. The sibling QEMU/VM driver's template path "driverqemu.go" → "templateApplyNow" never received the same guard, so its template read and...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION:...

CVE-2026-60010

Summary "PUT /api/v1/repos/owner/repo/teams/team" allows a non-owner repository admin to attach organization teams to a repository even when the organization has disabled that behaviour with "RepoAdminChangeTeamAccess=false". An earlier advisory fixed the corresponding team-side endpoint; the...

Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by a vulnerability

Summary The apnotify utility was used by IBM Sterling Connect:Direct for UNIX in asset protection and may be seen in some IBM Connect:Direct for UNIX installation locations that have been upgraded in place since 2017 or earlier. IBM Sterling Connect:Direct for UNIX is impacted by a vulnerability ...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System and the Management GUI are now fixed in 6.2.3.6 or higher and 7.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale System and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 6.2.3.6 or higher and 7.0.1.1 or higher. Vulnerability Details CVEID:CVE-2026-13460 DESCRIPTION: IBM Storage Scal...

CVE-2026-77363

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-63030

CVE-2026-63030 WordPress REST API batch route confusion + SQL injection leading to unauthorized admin creation → Remote Code Execution RCE complete exploit chain PoC. For authorized security testing, vulnerability reproduction, and research only. Do not use against unauthorized targets...

CVE-2026-77363 obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-77363 obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-77363

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-77363 obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration uses auth.mode set to none, a maliciou...

CVE-2026-77363

The obsidian-tc Model Context Protocol server is vulnerable to cross-origin loopback vault access in versions prior to 1.3.1 . The Streamable HTTP transport fails to validate the Host or Origin headers and lacks DNS-rebinding protection . When configured with auth.mode set to none, a malicious we...

K000163669: libbsd vulnerability CVE-2019-20367

Security Advisory Description nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table strtab. CVE-2019-20367 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a clickjacking attack (CVE-2026-18194)

Summary IBM App Connect Enterprise Designer authoring is vulnerable to a clickjacking attack. Vulnerability Details CVEID:CVE-2026-18194 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls. CWE:CWE-1021:...

K000163668: Go vulnerability CVE-2024-9341

Security Advisory Description A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system int...

xworm-7.4-RCE-PoC

XWorm C2 Controller - 0-Day Remote Code Execution RCE !Au...

CVE-2026-102543

Impact For some client-issued requests concerning remote users or remote rooms belonging to a malicious homeserver, Synapse will make federation requests to that malicious homeserver and will forward received errors back to the client. This allows the malicious homeserver to cause the requesting...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...