PT-2026-125217

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

PT-2026-123355

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script processes symlinks from uploaded parameter archive files and embeds the symlink target path into a shell command without...

PT-2026-123385

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode with large tag size In inline mode, dm integrity check and dm integrity inline recheck compute the checksum of each block into an on-stack buffer of HASH MAX DIGESTSIZE bytes...

Apple MacOS: CVE-2026-112492: OS X update for StorageKit

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

ALSA-2026:89850 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary write in root context via pat...

PT-2026-123356

Name of the Vulnerable Software and Affected Versions Avocent ACS8000 versions prior to 2.32.4 Description The root-privileged wsserver terminal-bridge daemon allows a connected client to execute arbitrary commands on the appliance as root. This occurs because the daemon constructs a shell comman...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from authentication issues and improper validation of user attributes, potentially allowing...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a use-after-free issue, which may allow applications with App Sandbox restrictions to escape...

Xovis APS-R security vulnerability

The Xovis APS-R has a security vulnerability. This vulnerability arises because the /sbin/ImportParamSet.sh script fails to reference or sanitize symbolic link targets when processing uploaded parameter archive files; instead, it embeds shell commands directly into these targets. These embedded...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow malicious applications to gain root privileges...

OpenHands Software Agent SDK configuration error vulnerability

Versions prior to OpenHands Software Agent SDK 1.52.0 contain a configuration error vulnerability. This vulnerability arises because DockerWorkspace and Apptainer workspace starters bind the sandbox proxy server to all network interfaces, and since sessionapikeys is set to an empty value,...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2 and macOS Tahoe versions prior to 26.7.2. This vulnerability stems from permission issues and may allow attackers with root privileges to access protected user data...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a logic issue that may allow applications to gain root privileges...

Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, and Apple macOS Tahoe versions prior to 26.7.2. This vulnerability stems from a race condition issue that may allow applications to gain root privileges...

Apple MacOS: CVE-2026-112438: OS X update for Kernel

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An unprivileged attacker may be able to execute arbitrary code as root...

Apple MacOS: CVE-2026-112487: OS X update for Storage

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

Apple MacOS: CVE-2026-112541: OS X update for StorageKit

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

Apple MacOS: CVE-2026-65392: OS X update for Sandbox

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app with root privileges may be able to access private information...

PT-2026-123400

Name of the Vulnerable Software and Affected Versions OpenHands Software Agent SDK versions prior to 1.52.0 Description An unauthenticated remote code execution issue exists where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0...

UBUNTU-CVE-2026-115378

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entrie...