EUVD-2026-50502

MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport...

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A...

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

CVE-2026-13584

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module,...

CLEANSTART-2026-QU83405 Security fixes in cert-manager 1.18.6-r0

Package cert-manager version 1.18.6-r0 fixes 5 vulnerabilities: CVE-2026-33186, CVE-2026-34986, CVE-2026-39883, ghsa-78h2-9frx-2jm8, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-MZ11582 Security fixes in velero-fips 1.17.1-r1

Package velero-fips version 1.17.1-r1 fixes 9 vulnerabilities: CVE-2025-61730, CVE-2025-61726, CVE-2025-61728, CVE-2025-68121, CVE-2026-27142...

CLEANSTART-2026-FT67124 Security fixes in tempo 2.7.2-r0

Package tempo version 2.7.2-r0 fixes 9 vulnerabilities: CVE-2026-33186, CVE-2026-32287, CVE-2026-24051, CVE-2025-22868, CVE-2025-30204...

CLEANSTART-2026-FT19254 Security fixes in apache-nifi 2.9.0-r0

Package apache-nifi version 2.9.0-r0 fixes 8 vulnerabilities: CVE-2026-2332, CVE-2026-3505, ghsa-355h-qmc2-wpwf, ghsa-cj8j-37rh-8475, CVE-2026-0636...

CLEANSTART-2026-MG63413 Security fixes in spark-sc213-jdk17-py312 3.5.8-r0

Package spark-sc213-jdk17-py312 version 3.5.8-r0 fixes 74 vulnerabilities: CVE-2026-54515, ghsa-5jmj-h7xm-6q6v, ghsa-337m-mw94-2v6g, CVE-2026-45205, ghsa-2r2c-cx56-8933...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-RT83480 Security fixes in distribution 3.1.0-r0

Package distribution version 3.1.0-r0 fixes 4 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-39882, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-CQ05037 Security fixes in stakater-reloader 1.1.0-r1

Package stakater-reloader version 1.1.0-r1 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-39836, CVE-2026-33811...

CLEANSTART-2026-ND31418 Security fixes in percona-xtradb-cluster-operator 1.19.1-r1

Package percona-xtradb-cluster-operator version 1.19.1-r1 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-NU09450 Security fixes in nats-streaming 0.24.6-r2

Package nats-streaming version 0.24.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

CVE-2026-41855

CVE-2026-41855...

EUVD-2025-210564

CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...

Linux Distros Unpatched Vulnerability : CVE-2026-17995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...