CVE-2026-17550

CVE-2026-17550 describes an out-of-bounds read vulnerability in Autodesk AutoCAD when parsing malicious DWG/DXF files. The issue affects the DWG/DXF parsing component and can cause a crash or disclosure of sensitive information. According to the provided metrics, the CVSSv3.1 base score is 5.5 (M...

EUVD-2026-50373

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.3.hum...

WordPress Project Management, Bug and Issue Tracking Plugin plugin < 5.1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Mokksh Parekh in WordPress Plugin Software Issue Manager versions 5.1.0...

WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Profile Builder versions = 3.16.5...

RHSA-2026:36862 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

CVE-2026-58187

CVE-2026-58187 affects the Apache Traffic Server multiplexer plugin. The issue overruns the plugin’s chunk-decode buffer using upstream input, enabling a denial of service. Affected versions are 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Apache recommends upgrading to 9.2.15 or 10.1.4, which c...

CVE-2026-58177

The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...

EUVD-2026-50219

Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

EUVD-2026-50216

The FAB auth manager's Azure AD OAuth login defaulted verifysignature=False when decoding the ID token, so an attacker able to present a forged or unsigned alg:none ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role...

CVE-2026-58154 Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which f...

BELL-CVE-2026-64506 CVE-2026-64506 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64498 CVE-2026-64498 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64427 CVE-2026-64427 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64285 CVE-2026-64285 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64238 CVE-2026-64238 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64211 CVE-2026-64211 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64430

Bulletin has no description...

BELL-CVE-2026-64222

Bulletin has no description...

Permissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-

Overview Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains the following vulnerability: Permissive Regular Expression CWE-625 - CVE-2026-64940 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...