Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053404 advisory. In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev Create a new macsec device but not get reference to realdev. That...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053412)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053412 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053319 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its pare...

CVE-2026-16310: Authorization Bypass Through User-Controlled Key

The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the password of any WordPress...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053239)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053239 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053244)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053244 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053317 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: fix reference leak when pmruntimegetsync fails The PM reference count is not expected ...

MINI-M72G-5V75-F639

Bulletin has no description...

MINI-8VQ4-87JX-RG79

Bulletin has no description...

CVE-2026-86113 BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records

BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the editreadthrough function that allows authenticated users to modify other users' reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users' start dates, finish dates, progress, and...

CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses

BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...

CVE-2026-81424 Accept Stripe Payments < 2.1.4 - Unauthenticated Product Substitution via IDOR

The Accept Stripe Payments WordPress plugin before 2.1.4 does not verify that the product fulfilled when a checkout is completed matches the product the authoritative payment was actually made for, checking only that the amount paid is at least the referenced product's price, allowing...

SUSE CVE-2026-71325

Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are not rejected for TraefikService backend references resolved by the service resolver. A tenant confined by RBAC to a...

SUSE CVE-2026-80778

In the Linux kernel, the following vulnerability has been resolved: futex/pi: Reject cross-mm private futex owners A private futex key borrows the waiter's mm without taking an mmusers reference. Nevertheless, attachtopiowner currently accepts an owner from a different address space and copies th...

SUSE CVE-2026-80878

In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

MINI-X3VQ-JW43-HR55

Bulletin has no description...

AZL-99636 CVE-2026-80909 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80898

In the Linux kernel, the following vulnerability has been resolved: netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the copy-to-cache rolling buffer. If the append fails, the folio is not...

CVE-2026-80897

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...