RHSA-2026:48780 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

AlmaLinux 10 : .NET 9.0 (ALSA-2026:41895)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41895 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...

UBUNTU-CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

SUSE CVE-2026-54562

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download and passes them to the configured downloader without blocking loopback, localhost, IPv6 localhost, or...

EUVD-2026-50501

MCP Ruby SDK: Ruby SSE Session Poisoning...

EUVD-2026-50502

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport...

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in @rootio/webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the @rootio/webpack-dev-server package for Root:npm. Multiple fixed versions available...

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A...

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-13584

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, Motion Control Board, Block-type remo...

CLEANSTART-2026-MG63413 Security fixes in spark-sc213-jdk17-py312 3.5.8-r0

Package spark-sc213-jdk17-py312 version 3.5.8-r0 fixes 74 vulnerabilities: CVE-2026-54515, ghsa-5jmj-h7xm-6q6v, ghsa-337m-mw94-2v6g, CVE-2026-45205, ghsa-2r2c-cx56-8933...

CLEANSTART-2026-FT67124 Security fixes in tempo 2.7.2-r0

Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-QU83405 Security fixes in cert-manager 1.18.6-r0

Package cert-manager version 1.18.6-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-RT83480 Security fixes in distribution 3.1.0-r0

Package distribution version 3.1.0-r0 fixes 4 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-39882, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-NU09450 Security fixes in nats-streaming 0.24.6-r2

Package nats-streaming version 0.24.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-CQ05037 Security fixes in stakater-reloader 1.1.0-r1

Package stakater-reloader version 1.1.0-r1 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-39836, CVE-2026-33811...