CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6

CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6. A patched version of the package is available...

CVE-2026-10822 affecting package bind for versions less than 9.20.26-1

CVE-2026-10822 affecting package bind for versions less than 9.20.26-1. A patched version of the package is available...

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8

CVE-2026-56852 affecting package kubevirt for versions less than 1.7.1-8. A patched version of the package is available...

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6

CVE-2026-56852 affecting package cloud-provider-kubevirt for versions less than 0.5.1-6. A patched version of the package is available...

CVE-2026-56852 affecting package gh for versions less than 2.62.0-19

CVE-2026-56852 affecting package gh for versions less than 2.62.0-19. A patched version of the package is available...

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7

CVE-2026-56852 affecting package kube-vip-cloud-provider for versions less than 0.0.10-7. A patched version of the package is available...

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE-2026-66066 CVSS score: 9.5, the flaw can expose the Rails process environment and secre...

RLSA-2026:36331 Important: nginx security, bug fix, and enhancement update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Bug Fixes...

coreutils bug fix and enhancement update

An update is available for coreutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

EUVD-2026-43720

Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass...

EUVD-2026-43722

Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

GHSA-4P3G-4HCJ-WPVX prebid-server's request forgery vulnerability allows for possible host environment data extraction

Impact Certain bidder adapters accept user-supplied parameters that are interpolated into outbound request URLs. Without proper input validation, a malicious actor could craft bid request parameters that cause the server to send HTTP requests to unintended destinations, potentially exposing...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

EUVD-2026-38084

Quarkus: Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities...

GHSA-3JH7-WM29-Q568 veraPDF Validation XXE via Rich Text

Summary Description An XML External Entity Injection CWE-611 vulnerability in veraPDF allows a remote attacker to read arbitrary files on the server file system and perform Server-Side Request Forgery by submitting a crafted PDF containing a malicious rich-text /RC or /RV entry. This affects all...