CVE-2026-63003 django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, page duplication lacks an object-level authorization check on the source page. In cms/admin/forms.py, DuplicatePageForm.source accepts any Page, the AddPageForm constructor...

CVE-2026-63003

A staff user with only "add page" permission can POST a crafted source page ID to the duplicate endpoint, copying all placeholders/plugins of an unauthorized page and stripping its view restrictions, exposing restricted or cross-site content. The fix adds an object-level user_can_view_page() chec...

K000162855: Intel SMM vulnerability CVE-2025-20028

Security Advisory Description Time-of-check time-of-use race condition in the WheaERST SMM module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege...

CVE-2026-54624

In django CMS before 5.0.8, the structure endpoint in cms/views.py renders structure.html without calling user_can_view_page(), unlike edit/preview endpoints. A low-privileged staff user can read restricted pages' plugin short descriptions (link names, URLs, snippets) when CMS_PERMISSION=True and...

CVE-2026-66788

A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized...

kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

Moderate: Red Hat Security Advisory: kbd security update

An update for kbd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Important: Red Hat Security Advisory: mrtg security update

An update for mrtg is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-18284

Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Sony XAV-9500ES devices. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2026-18273

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

CVE-2026-18262

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-13121

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. MFSA 2026-74 bsc1274867 CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. CVE-2026-74935: Privilege escalation in the DOM: Networking component...

SUSE-SU-2026:3658-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 bsc1274867 - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escalation in the DOM: Networking component. -...

CVE-2026-74317

A flaw was found in the Linux kernel's ixgbe network driver. This vulnerability occurs when configuring eXpress Data Path XDP queues on systems with a high number of CPUs and specific network adapters. An attacker could potentially trigger a memory corruption issue by exploiting the incorrect...

CVE-2026-74313

A flaw was found in the Linux kernel's vduse component. A race condition in the vdusedevopen function allows a memory object to be freed while still in use. This use-after-free vulnerability could enable a local attacker to cause a system crash denial of service or potentially execute arbitrary...

EUVD-2026-63464

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...

CVE-2026-18263

The flaw is in the RAS RDP Backend Service of Parallels RAS Client, which exposes a dangerous function. A local low-privileged attacker can exploit it to execute arbitrary code as SYSTEM. CVSS 7.8 (HIGH). No patch or exploit details are provided in the documents. Monitor ZDI-26-556 for remediatio...