CVE-2026-16465

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information...

Cisco Advance Notification for Publication of August 5, 2026, Security Advisories

On August 5, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026...

CVE-2026-17550

CVE-2026-17550 describes an out-of-bounds read vulnerability in Autodesk AutoCAD when parsing malicious DWG/DXF files. The issue affects the DWG/DXF parsing component and can cause a crash or disclosure of sensitive information. According to the provided metrics, the CVSSv3.1 base score is 5.5 (M...

EUVD-2026-50373

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.3.hum...

RHSA-2026:36862 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

CVE-2026-58187

CVE-2026-58187 affects the Apache Traffic Server multiplexer plugin. The issue overruns the plugin’s chunk-decode buffer using upstream input, enabling a denial of service. Affected versions are 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Apache recommends upgrading to 9.2.15 or 10.1.4, which c...

CVE-2026-58177

The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...

EUVD-2026-50219

Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

EUVD-2026-50216

The FAB auth manager's Azure AD OAuth login defaulted verifysignature=False when decoding the ID token, so an attacker able to present a forged or unsigned alg:none ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role...

CVE-2026-58154 Apache Traffic Server: Memory-safety errors in MIME and header parsing

Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fi...

BELL-CVE-2026-64506 CVE-2026-64506 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64498 CVE-2026-64498 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64427 CVE-2026-64427 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64285 CVE-2026-64285 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64238 CVE-2026-64238 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64211 CVE-2026-64211 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-64430

Bulletin has no description...

BELL-CVE-2026-64222

Bulletin has no description...

Permissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-

Overview Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains the following vulnerability: Permissive Regular Expression CWE-625 - CVE-2026-64940 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...