Description of the security update for SharePoint Server Subscription Edition: August 11, 2026 (KB5002893)

Description of the security update for SharePoint Server Subscription Edition: August 11, 2026 KB5002893 Applies To SharePoint Server Subscription Edition Summary Important If you're currently running SharePoint Workflow Manager, you must install SharePoint Workflow Manager KB5002799 to your farm...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securi...

RLSA-2026:80495 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

flatpak-builder security update

An update is available for flatpak-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Flatpak-builder is a tool for building flatpaks from sources. Securit...

RLSA-2026:80496 Important: flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: flatpak-builder: Host code execution via git am hook execution in patch source extraction use-git-am CVE-2026-86320 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

ROOT-APP-PYPI-CVE-2024-45231 CVE-2024-45231 in django - Patched by Root

Root has patched CVE-2024-45231 in the django package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root

Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-109412: Exposed Dangerous Method or Function

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...

PT-2026-111684

Name of the Vulnerable Software and Affected Versions Ivanti Neurons Patch for Intune affected versions not specified Description An exposed dangerous endpoint allows a remote authenticated attacker to leak sensitive authentication information. Recommendations At the moment, there is no informati...

CVE-2026-110216: Missing Authorization

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lacks a @PreAuthorize check. Attackers can send PATCH requests to /api/v1/users/userId/status to disable root or admin...

PT-2026-111840

Name of the Vulnerable Software and Affected Versions youlai-boot versions prior to 2.21.2 Description A missing authorization issue allows any authenticated user to enable or disable accounts. This occurs because the updateUserStatus handler lacks a @PreAuthorize check, which is a security...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2026-109341

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2026-109341 SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

CVE-2026-109341

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

EUVD-2026-97643

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

CVE-2026-109341

SurrealDB versions prior to 3.3.0 are vulnerable to an authorization bypass that allows users with table-level write permissions to access SELECT-restricted fields . The root cause is the resolution of JSON Patch pointers against an unreduced record, which can be exploited to copy hidden fields i...

CVE-2026-109341 SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into...

Ivanti Neurons Patch for Intune: Permissions licensing and access control issues

The Ivanti Neurons Patch for Intune has vulnerabilities related to permissions and access control. These vulnerabilities stem from exposed dangerous endpoints, which may allow remote, authenticated attackers to disclose sensitive authentication information...