CVE-2026-26932 Improper Validation of Array Index in Packetbeat Leading to Denial of Service

Improper Validation of Array Index CWE-129 in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation CAPEC-153. An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requir...

CVE-2026-26932

CVE-2026-26932 affects Elastic Packetbeat (PostgreSQL protocol parser) and can cause a Denial of Service via a Go runtime panic when the pgsql protocol is enabled and monitoring traffic on the targeted port. Affected versions include Packetbeat 8.x (up to 8.19.10) and 9.x (up to 9.2.4). The under...

GHSA-42WG-38GX-85RH Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

Vikunja has Path Traversal in CLI Restore

Summary Path Traversal Zip Slip and Denial of Service DoS vulnerability discovered in the Vikunja CLI's restore functionality. Details The restoreConfig function in vikunja/pkg/modules/dump/restore.go of the https://github.com/go-vikunja/vikunja/tree/main repository fails to sanitize file paths...

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines. "The activity aligns with a broader cluster of threats that...

CVE-2026-26932: Improper Validation of Array Index

Improper Validation of Array Index CWE-129 in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation CAPEC-153. An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requir...

Elastic Packetbeat security vulnerabilities

Elastic Packetbeat is a data collector developed by the Dutch company Elastic. There is a security vulnerability in Elastic Packetbeat, which stems from improper array index validation in the PostgreSQL protocol parser. This vulnerability could allow attackers to trigger a Go runtime crash by...

Important Photon OS Security Update - PHSA-2026-5.0-90-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Lifecycle-Integrated Security for AI-Cloud Convergence in Cyber-Physical Infrastructure

The convergence of Artificial Intelligence AI inference pipelines with cloud infrastructure creates a dual attack surface where cloud security standards and AI governance frameworks intersect without unified enforcement mechanisms. AI governance, cloud security, and industrial control system...

Important Photon OS Security Update - PHSA-2026-5.0-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-91-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2026-5.0-92-0778

Updates of 'dotnet-runtime' packages of Photon OS have been released...

CVE-2026-27819

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja repository fails to sanitize file paths within the provided ZIP archive. A maliciously crafted ZIP can bypass the...

CVE-2026-27819 Vikunja has Path Traversal in CLI Restore

Vikunja is an open-source self-hosted task management platform. Prior to version 2.0.0, the restoreConfig function in vikunja/pkg/modules/dump/restore.go of the go-vikunja/vikunja repository fails to sanitize file paths within the provided ZIP archive. A maliciously crafted ZIP can bypass the...

CVE-2026-27819

Vikunja prior to 2.0.0 contains a path traversal vulnerability in the CLI restore path. The restore.go logic in go-vikunja/vikunja uses the ZIP entry’s Name directly in os.OpenFile calls without validating paths, allowing a malicious ZIP to escape the intended extraction directory and overwrite a...

GHSA-QRVQ-68C2-7GRW vulnerabilities

Vulnerabilities for packages: telegraf, kine, nats-top, k3s, nats-top-fips, rke2-runtime...

CVE-2026-27571 vulnerabilities

Vulnerabilities for packages: telegraf, kine, nats-top, k3s, nats-top-fips, rke2-runtime...

@enclave-vm/broker (>=2.8.0, <=2.10.1), @enclave-vm/runtime (>=2.8.0, <=2.10.1) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=2.8.0, <=2.10.1)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.1 Source cves: CVE-2026-27597 Source advisory: GHSA-F229-3862-4942...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925, CVE-2026-1188. These vulnerabilities are addressed. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTIO...

@enclave-vm/broker (>=0.0.1, <=2.11.0), @enclave-vm/runtime (>=0.0.1, <=2.11.0) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=0.0.1, <=2.11.0)

@enclave-vm/core NPM version =0.0.1, =0.0.1, =0.0.1, =2.11.0 Source cves: CVE-2026-27597 Source advisory: MEND:CVE-2026-27597...