GHSA-3WRR-7QPF-2PRH vulnerabilities

Vulnerabilities for packages: druid, spark...

CVE-2026-50193 vulnerabilities

Vulnerabilities for packages: druid, spark...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, druid, flyway, elasticsearch-fips, solr, opensearch, knative-kafka-broker, management-api-for-apache-cassandra-5.0, elasticsearch, strimzi-kafka-operator-fips, infinispan, grpc-java-fips, spark-kubernetes-operator, knative-kafka-broker-fips,...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, druid, flyway, elasticsearch-fips, solr, opensearch, knative-kafka-broker, management-api-for-apache-cassandra-5.0, elasticsearch, strimzi-kafka-operator-fips, infinispan, grpc-java-fips, spark-kubernetes-operator, knative-kafka-broker-fips,...

GHSA-4GRM-H2QV-H6W6 vulnerabilities

Vulnerabilities for packages: apache-hop, spark...

GHSA-4GRM-H2QV-H6W6 vulnerabilities

Vulnerabilities for packages: spark...

CVE-2026-50009 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

CVE-2026-48748 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-563Q-J3CM-6JXM vulnerabilities

Vulnerabilities for packages: celeborn, kserve-modelmesh, thingsboard, management-api-for-apache-cassandra-5.0, neo4j, infinispan, spark, strimzi-kafka-operator, druid, apache-pulsar, docker-selenium, sonarqube, flyway...

CVE-2026-50560 vulnerabilities

Vulnerabilities for packages: celeborn, kserve-modelmesh, thingsboard, management-api-for-apache-cassandra-5.0, neo4j, infinispan, spark, strimzi-kafka-operator, druid, apache-pulsar, docker-selenium, sonarqube, flyway...

CVE-2026-50020 vulnerabilities

Vulnerabilities for packages: tez, celeborn, kserve-modelmesh, thingsboard, keycloak, management-api-for-apache-cassandra-5.0, neo4j, logstash, infinispan, wildfly, spark, strimzi-kafka-operator, druid, apache-pulsar, docker-selenium, opensearch, sonarqube, flyway...

GHSA-HVCG-QMG6-JM4C vulnerabilities

Vulnerabilities for packages: tez, celeborn, kserve-modelmesh, thingsboard, keycloak, management-api-for-apache-cassandra-5.0, neo4j, logstash, infinispan, wildfly, spark, strimzi-kafka-operator, druid, apache-pulsar, docker-selenium, opensearch, sonarqube, flyway...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: tez, celeborn, kserve-modelmesh, cassandra, solr, management-api-for-apache-cassandra-5.0, neo4j, logstash, infinispan, thingsboard, spark, druid, apache-pulsar, docker-selenium, opensearch, sonarqube, flyway...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: tez, celeborn, kserve-modelmesh, cassandra, solr, management-api-for-apache-cassandra-5.0, neo4j, logstash, infinispan, thingsboard, spark, druid, apache-pulsar, docker-selenium, opensearch, sonarqube, flyway...

CVE-2026-50752 - VPN site to site certificate bypass vulnerability in deprecated IKEv1 key exchange

Symptoms - A vulnerability in the certificate validation logic of the deprecated IKEv1 key exchange method may lead to a man-in-the-middle attack on the VPN site-to-site configuration. This vulnerability was discovered by Check Point security research team. There are no reported exploits of this...

EUVD-2026-33281

Path traversal vulnerability in Remote Spark https://www.Remotespark.Com/ SparkView allows reading and writing arbitrary files in all directories as root. This leads to RCE. The affected component is the RDP drive redirection. Depending on implementation, the vulnerability can be exploited by an...

Remote Spark SparkView 安全漏洞

Remote Spark SparkView is a browser-based client software developed by Remote Spark, enabling remote desktop and terminal access. Versions of Remote Spark SparkView prior to build 1127 contained security vulnerabilities. These vulnerabilities stemmed from path traversal in RDP driver redirection,...

CVE-2026-48132 - VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

Symptoms - The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption o...

Security Bulletin: NVIDIA DGX Spark - May 2026

NVIDIA has released a software update for NVIDIA® DGX Spark. To protect your system, download and install the latest version of NVIDIA DGX OS from the NVIDIA DGX site. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update...