CVE-2026-2258 aardappel lobster wfc.h WaveFunctionCollapse memory corruption

A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/lobster/wfc.h. Executing a manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been published and ma...

How to Change Where Logs are Stored on the Veeam Appliances

Changing Log Location Will Break Automated Log Collection The automated log collection tools built into both the Veeam Backup & Replication Web UI of the Veeam Software Appliance and the "Create support bundle" function within the Host Management Console collect logs only from the default log...

I2P 2.11.0

I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version...

Microsoft Windows 后置链接漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. Microsoft Windows has a post-release vulnerability. Attackers can exploit this vulnerability to gain higher privileges...

Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-39841)

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the...

CVE-2025-68366 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68366 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-25210 affecting package expat for versions less than 2.6.4-4

CVE-2026-25210 affecting package expat for versions less than 2.6.4-4. A patched version of the package is available...

CVE-2025-68795 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68795 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-55130 affecting package nodejs for versions less than 20.14.0-12

CVE-2025-55130 affecting package nodejs for versions less than 20.14.0-12. A patched version of the package is available...

CVE-2025-68780 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68780 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68796 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68796 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71077 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-68345 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68345 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2026-0672 affecting package python3 for versions less than 3.12.9-8

CVE-2026-0672 affecting package python3 for versions less than 3.12.9-8. A patched version of the package is available...

CVE-2025-68160 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-68160 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.0 release.

Red Hat Web Terminal Operator 1.15.0 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

CVE-2026-25885

CVE-2026-25885 affects PolarLearn: the group chat WebSocket (wss://polarlearn.nl/api/v1/ws) allowed unauthenticated clients to subscribe to and post in any group chat, storing messages in the chatContent. This is described for 0-PRERELEASE-16 and earlier. The vulnerability is unpatched/undetailed...