July 14, 2026—KB5099414 (OS Build 22631.7376)

July 14, 2026—KB5099414 OS Build 22631.7376 Applies To Windows 11 version 23H2, all editions This cumulative update for Windows 11, version 23H2 KB5099414, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the...

July 14, 2026—KB5101649 (OS Build 28000.2525)

July 14, 2026—KB5101649 OS Build 28000.2525 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5101649 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...

July 14, 2026—KB5099535 (OS Build 14393.9339)

July 14, 2026—KB5099535 OS Build 14393.9339 Applies To Windows Server 2016, all editions Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Windows Secure Boot certificate expiration --- Important Secure Boot certificates used by most Windows devices were set to expire starting in June 2026. Microsoft...

Teltonika Networks RUTOS command injection vulnerability

Teltonika Networks’ RUTOS versions from 7.22 to 7.24.6, as well as versions from 7.25 to 7.25.2, and also versions from 7.22 to 7.25.2, along with Teltonika Networks’ TSWOS version from 1.9 to 1.10.4, have command injection vulnerabilities. These vulnerabilities stem from command injection in the...

windows

Windows !Buildbuildurl !Versiontagurl !Sizetagurl !Packagepkgurl !Pullshuburl Windows dentro de un contenedor Docker. Características ✨ Ejecuta Windows dentro de un contenedor Docker Descarga automática e instalación sin intervención Soporta versiones modernas y antiguas de Windows Rendimiento ca...

DEBIAN-CVE-2026-108553

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

CVE-2026-108553

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

UBUNTU-CVE-2026-108553

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

CVE-2026-108553

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

PT-2026-109667

Name of the Vulnerable Software and Affected Versions OpenRefine versions prior to 3.10.2 Description A cross-site request forgery CSRF flaw exists in the get-rows command. This issue allows remote attackers to lure a user to a malicious page that issues a cross-origin GET request with a crafted...

CVE-2026-108553: Cross-Site Request Forgery (CSRF)

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating...

CVE-2026-108264

Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2...

ROOT-OS-UBUNTU-2404-CVE-2023-39328 CVE-2023-39328 in openjpeg2 - Patched by Root

Root has patched CVE-2023-39328 in the openjpeg2 package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-21947 CVE-2025-21947 in linux - Patched by Root

Root has patched CVE-2025-21947 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3-defaults - Patched by Root

Root has patched CVE-2026-3644 in the python3-defaults package for Root:Debian:12. Multiple fixed versions available...

EUVD-2026-95151

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operating system commands on the host running the helper via a crafted database command value introduced in the agent contex...

CVE-2026-107700

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get. The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run...

CVE-2026-107700

The dot-access library (versions 0.0.3 through 1.0.0 ) contains a code injection vulnerability (CWE-94) within the get() function. The root cause is the insecure concatenation of a path argument into a new Function body in index.js. This allows remote attackers to supply crafted paths to reach co...

EUVD-2026-95100

Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the...