RHSA-2026:53365 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:53363 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:51036 Red Hat Security Advisory: OpenShift Container Platform 4.22.9 packages and security update

Bulletin has no description...

ROOT-APP-PYPI-CVE-2025-48379 CVE-2025-48379 in pillow - Patched by Root

Root has patched CVE-2025-48379 in the pillow package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1786527009 TuxCare security update for guzzlehttp/psr7 (5 CVEs)

TuxCare rebuilt guzzlehttp/psr7 to address 5 CVEs. Fixed in 1.1.0-p1+tuxcare...

ROOT-APP-MAVEN-CVE-2025-67030 CVE-2025-67030 in org.codehaus.plexus:plexus-utils - Patched by Root

Root has patched CVE-2025-67030 in the org.codehaus.plexus:plexus-utils package for Root:Maven. Multiple fixed versions available...

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

The security researcher going by the name Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has released a proof-of-concept PoC for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for...

CVE-2025-15687

CVE-2025-15687 affects Open5GS up to version 2.7.6, specifically the SMF Diameter Gx Credit-Control-Answer Handler function smf_gx_cca_cb. The issue is described as a manipulation that results in a denial of service, with remote-launch potential. Public exploit exists according to the description...

MINI-8WQM-QMP7-74W9

Bulletin has no description...

EUVD-2026-57008

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

Linux Distros Unpatched Vulnerability : CVE-2026-68446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Mod...

Linux Distros Unpatched Vulnerability : CVE-2026-12072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK: Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox ENFORCE=True CVE-2026-12072...

Linux Distros Unpatched Vulnerability : CVE-2026-18725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open- iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handli...

Linux Distros Unpatched Vulnerability : CVE-2026-68306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996mcustabfereht mt76connacgetehtphycap routine can theoretically return NULL so check cap pointer...

Photon OS 5.0: Libxml2 PHSA-2026-5.0-92-0946

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2025-35973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized...

Linux Distros Unpatched Vulnerability : CVE-2026-12074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK has path traversal in FramenetCorpusReader.frame that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox...

grafana security, bug fix, and enhancement update

10.2.6-28.4 - Resolves RHEL-211020: CVE-2026-33377 10.2.6-28.3 - Resolves RHEL-211376: CVE-2026-8609 10.2.6-28.2 - Resolves RHEL-210981: CVE-2026-33376 10.2.6-28.1 - Resolves RHEL-211389: CVE-2026-33382 10.2.6-28 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build...

Linux Distros Unpatched Vulnerability : CVE-2026-18724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - open-iscsi - None Red Hat Enterprise Linux - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing Ubuntu Linux - Unknown...