MINI-3XXM-XH57-V9CH

Bulletin has no description...

MINI-J3HC-PP65-86G7

Bulletin has no description...

MINI-4J37-XM3R-2H67

Bulletin has no description...

MINI-6RVG-XC62-WR5V

Bulletin has no description...

MINI-XXX5-9452-6GQH

Bulletin has no description...

MINI-R3M9-VC4F-7FMC

Bulletin has no description...

MINI-C6F2-WW73-FR58

Bulletin has no description...

MINI-MM64-G928-R7C6

Bulletin has no description...

CGA-8GVQ-Q477-7CXR

Bulletin has no description...

MINI-X5PV-546Q-H957

Bulletin has no description...

MINI-866F-HR64-V57G

Bulletin has no description...

MINI-QG32-V54G-JJC7

Bulletin has no description...

pypdf: Possible long runtimes for repeated malformed cross-reference entries

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from ...

PYSEC-2026-3610 pypdf: Possible long runtimes for repeated malformed cross-reference entries

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...

MINI-CCRP-7RFG-3MQV

Bulletin has no description...

CVE-2026-16070 Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR

The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to...

CVE-2026-16070

The Brizy - Page Builder WordPress plugin (versions before 2.8.19 ) is vulnerable to an Insecure Direct Object Reference (IDOR) due to improper authorization checks. The plugin fails to verify authorization on the object being modified when updating a template's type meta, specifically by validat...

PT-2026-67811

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Flowise contains an Insecure Direct Object Reference IDOR where the openai-assistants-vector-store endpoints accept a client-controlled credential parameter. The system loads credentials by id and us...

When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning

Backdoor attacks in multimodal contrastive learning MCL have garnered growing attention in recent years, as many downstream tasks critically depend on pre-trained MCL models. Existing detection-based defenses predominantly rely on the CLIPScore metric, under the assumption that poisoned pairs...

kernel security update

5.14.0-687.33.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...