PT-2026-68142

Name of the Vulnerable Software and Affected Versions Node-RED affected versions not specified Description The local-filesystem library storage module contains a path traversal flaw in the getLibraryEntry and saveLibraryEntry functions. This issue occurs because the user-supplied path parameter i...

PT-2026-68085

Name of the Vulnerable Software and Affected Versions Red Hat Advanced Cluster Management for Kubernetes ACM affected versions not specified Description A flaw in the Application Subscription controller multicluster-operators-subscription allows a user with namespace-scoped edit privileges in an...

resource-agents security update

4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...

RHEL 9 : fence-agents (RHSA-2026:50655)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50655 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 10 : freerdp (RHSA-2026:50747)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50747 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP...

RHEL 9 : libpq (RHSA-2026:50779)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50779 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...

RHEL 9 : fence-agents (RHSA-2026:50654)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50654 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 9 : libtiff (RHSA-2026:50774)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50774 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Heap-bas...

CVE-2026-16443: Improper Verification of Cryptographic Signature

A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...

CVE-2026-10090: Privilege Defined With Unsafe Actions

A flaw was found in the Application Subscription controller multicluster-operators-subscription of Red Hat Advanced Cluster Management for Kubernetes ACM. A user with namespace-scoped "edit" privileges in an ACM hub namespace can create a Channel resource pointing to a Helm repository they contro...

RHEL 7 : libpng (RHSA-2026:50808)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50808 advisory. The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics PNG image format files. Security Fixes:...

RHEL 9 : fence-agents (RHSA-2026:50653)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50653 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

RHEL 10 : mod_http2 (RHSA-2026:50538)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50538 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: modhttp2:...

PT-2026-67992

Name of the Vulnerable Software and Affected Versions ZTE NX799J Red Magic 11 Air affected versions not specified Description The built-in PostgreSQL service contains misconfiguration flaws and command injection issues. The service operates with root privileges, listens on a specific port, and us...

Agent against Agent: An Agentic System for Automatic Prompt Injection Red Teaming

Prompt injection poses significant security risks to LLM agents. Efficient and effective red-teaming is therefore critical, both for evaluating these risks and for collecting training data to improve defenses. Existing state-of-the-art prompt injection red-teaming methods primarily rely on...

RHEL 9 : gstreamer1-plugins-ugly-free (RHSA-2026:50691)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50691 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose...

RHEL 8 : freeipmi (RHSA-2026:50772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50772 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...

RHEL 10 : gstreamer1-plugins-ugly-free (RHSA-2026:50688)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50688 advisory. GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins whose...

RHEL 10 : libpq (RHSA-2026:50863)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50863 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql...

RHEL 9 : postgresql (RHSA-2026:50811)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50811 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution...