RHSA-2026:48758 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:48604 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:48605 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:48537 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:48305 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:42899 Red Hat Security Advisory: java-25-openjdk security update

Bulletin has no description...

CVE-2026-11770

creationtimestamp| type| source ---|---|--- 2026-07-31 10:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4264s2zafk3mq 2026-07-31 12:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrwvrz7cro2l...

ROOT-APP-PYPI-CVE-2026-48735 CVE-2026-48735 in rootio-pypdf - Patched by Root

Root has patched CVE-2026-48735 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54530 CVE-2026-54530 in rootio-pypdf - Patched by Root

Root has patched CVE-2026-54530 in the rootio-pypdf package for Root:PyPI. Multiple fixed versions available...

CVE-2026-10079

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...

CVE-2026-51248

creationtimestamp| type| source ---|---|--- 2026-07-31 08:58:36+00:00| seen| https://gist.github.com/programmervuln/e87d48c8a9e36ddf43cc02db54f5151f...

ROOT-APP-NPM-CVE-2024-29409 CVE-2024-29409 in @rootio/nestjs__common - Patched by Root

Root has patched CVE-2024-29409 in the @rootio/nestjscommon package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-18209

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect OIDC authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. Whe...

CVE-2026-18214

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This mean...

CVE-2026-18211

A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...

CVE-2026-16236

creationtimestamp| type| source ---|---|--- 2026-07-31 08:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/73yfkyntgsmwp 2026-07-31 23:02:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mry2rlharq2i...

CVE-2026-51275

creationtimestamp| type| source ---|---|--- 2026-07-31 08:03:05+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrwij65sge2l...

CVE-2026-18452

creationtimestamp| type| source ---|---|--- 2026-07-31 07:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwg4aowwe2k 2026-07-31 08:09:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6elztljrmbc4t...

CVE-2026-15209

The JS Help Desk WordPress plugin before 3.1.5 does not verify that the requesting user owns the ticket being loaded: a low-privileged authenticated user can supply another user's ticket ID and read that ticket's contents, including the reporter's PII and message body...