libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security mTLS settings, particularly those for client certificates, should have prevented such reuse...

httpd: Apache HTTP Server: Buffer overflow in mod_proxy_html allows security bypass

A vulnerability has been identified in the Apache HTTP Server. If the server is configured to connect to a malicious or compromised backend server, an attacker could exploit this flaw to bypass security controls or run unauthorized code on the system...

CVE-2026-74338

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could bypass security checks by directly using the bpf2 system call to load a sleepable BPFLSMCGROUP program. This could lead to a kernel crash, resulting in a Denial of Service DoS on the affected syste...

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

CVE-2026-74973

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74949

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...

PT-2026-78428

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Network Installation Management NIM could allow a remote attacker to bypass security restrictions. This issue occurs because intermediate certificate authority private keys...

PT-2026-78324

Name of the Vulnerable Software and Affected Versions mod cluster affected versions not specified Description A flaw exists in the AdvertiseListenerImpl of the org.jboss.modcluster core module. An unauthenticated attacker can cause a denial of service by sending a single crafted UDP multicast...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, allows attackers to enhance their privileges.

The vulnerability of the Microsoft Malware Protection Engine, a component of the Microsoft Defender antivirus protection tool, relates to an improper definition of symbolic links before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to bypass existing security mechanisms.

The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the Content Credentials SDK libraries, related to errors in the certificate authentication process, allows attackers to circumvent existing security restrictions.

The vulnerability of the Content Credentials SDK libraries is related to errors in the certificate authentication process. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

ROS-20260819-73-0041

The vulnerability in Tomcat is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

CentOS 9 : openssh-9.9p1-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the openssh-9.9p1-12.el9 build changelog. - In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. CVE-2026-59999...

CVE-2026-62624

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle Repor...

CVE-2026-62614

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Repor...

Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM WebSphere Remote Server, are affected by a security bypass vulnerability (CVE-2026-10842)

Summary IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting IBM WebSphere Application Server and IBM WebSphere Application Server Liberty has been published in a security...

CVE-2026-72286

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM with Secure Encrypted Virtualization SEV and Secure Nested Paging SNP virtual machines. The intra-host migration and mirroring feature is not fully implemented for SEV-SNP VMs. This incomplete implementation means that critic...

CVE-2026-71573

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...

CVE-2026-71573

Joomla! Core - 20260802 - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper implementation prevented configured CORS origins from being properly validated in CORS requests...