CLSA-2026-1773015258 TuxCare security update for hawk (2 CVEs)

TuxCare rebuilt hawk to address 2 CVEs. Fixed in 3.1.0-tuxcare.1...

CLSA-2026-1773101683 TuxCare security update for form-data (1 CVE)

TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.1...

CLSA-2026-1772151045 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 3.4.8.post4+tuxcare...

CLSA-2025-1765411676 TuxCare security update for org.apache.lucene (1 CVE)

TuxCare rebuilt 31 org.apache.lucene packages to address 1 CVE. Fixed in 5.5.5-tuxcare.1...

CVE-2026-67195

CVE-2026-67195 describes a remote code execution in Perspective 5.0.0 via an eval() expression injection in the PolarsVirtualServer backend. The vulnerability occurs when client-supplied input is passed directly to Python’s eval() with almost no sandboxing (builtins cleared). Attackers can traver...

CVE-2026-10710

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10710

Summary: CVE-2026-10710 involves a stack-based buffer overflow in Autodesk FBX SDK, specifically in the fbxsdk::ExtractDrive path when parsing a malicious FBX file. The NVD/CVE records describe that exploitation can allow arbitrary code execution in the context of the current process, with a CVSS...

CVE-2026-10710 FBX ExtractDrive Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDrive. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-10709

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-52669

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files...

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

WordPress Zoner - Real Estate WordPress Theme theme < 4.2 - Real Estate WordPress Theme < 4.2 - Cross-Site Scripting vulnerability

WordPress Zoner - Real Estate WordPress Theme theme 4.2 - Real Estate WordPress Theme 4.2 - Cross-Site Scripting vulnerability discovered by R3N0 in WordPress Theme Zoner - Real Estate versions 4.2...

RHSA-2026:49604 Red Hat Security Advisory: gstreamer1-plugins-good security update

Bulletin has no description...

RHSA-2026:49511 Red Hat Security Advisory: frr security update

Bulletin has no description...

CVE-2026-14175

Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...

MSC-2026-6427

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malware dropper – this package contains a Trojan...

MSC-2026-6425

Malware wrapper: package has no code of its own; its sole dependency pulls in discord-vibegrations-api-natives whose postinstall opens a reverse shell to 5.tcp.eu.ngrok.io:15496. Dependency-based dropper...

MSC-2026-6429

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...

MSC-2026-6428

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Contacting external host – this package sends...