CVE-2026-44881

Summary: Portainer Community Edition before fixes is vulnerable to arbitrary file read via Git-symlink injection when deploying stacks from Git repositories. During Git-backed stack creation/update, go-git v5 may create real OS symlinks for most files (except .gitmodules). The GET /api/stacks/{id...

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Summary Portainer supports deploying stacks from Git repositories. When a Git-backed stack is created or updated, Portainer clones the repository using go-git v5, which translates Git blob entries with mode 0o120000 symlink into real OS symlinks on the host filesystem via os.Symlink. The only ent...

May 12, 2026—KB5089548 (OS Build 28000.2113)

May 12, 2026—KB5089548 OS Build 28000.2113 ​​​​​This cumulative update for Windows 11, version 26H1 KB5089548 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the Windows release health dashboard for the latest...

April 19, 2026—KB5091571 (OS Build 25398.2276) Out-of-band

April 19, 2026—KB5091571 OS Build 25398.2276 Out-of-band Summary This out-of-band update for Windows Server, version 23H2 KB5091571 is cumulative. It includes fixes and improvements that are part of the following update: April 14, 2026—KB5082060 OS Build 25398.2274 The following is a summary of t...

April 19, 2026—KB5091157 (OS Build 26100.32698) Out-of-band

April 19, 2026—KB5091157 OS Build 26100.32698 Out-of-band ​​​​This out-of-band OOB update for Windows Server 2025 KB5091157 is a non-security cumulative update. Improvements This out-of-band update contains quality improvements from KB5082063 released April 14, 2026. The following summary outline...

KB5082089: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: April 14, 2026

KB5082089: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: April 14, 2026 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain...

KB5075902: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: February 10, 2026

KB5075902: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: February 10, 2026 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain...

January 24, 2026—KB5078135 (OS Build 26100.32236) Out-of-band

January 24, 2026—KB5078135 OS Build 26100.32236 Out-of-band ​​​​This out-of-band update for Windows Server 2025 KB5078135 is cumulative. It includes updates from previous security releases, along with an additional fix. To learn more about differences between security updates, optional non-securi...

January 24, 2026—KB5078136 (OS Build 20348.4651) Out-of-band

January 24, 2026—KB5078136 OS Build 20348.4651 Out-of-band This out-of-band update for Windows Server 2022 KB5078136 is cumulative. It includes updates from previous security, along with an additional fix. To learn more about differences between security updates, optional non-security preview...

January 17, 2026—KB5077793 (OS Build 26100.32234) Out-of-band

January 17, 2026—KB5077793 OS Build 26100.32234 Out-of-band ​​​​This out-of-band update for Windows Server 2025 KB5077793 is cumulative. It includes updates from previous security releases, along with an additional fix. To learn more about differences between security updates, optional non-securi...

January 17, 2026—KB5077800 (OS Build 20348.4650) Out-of-band

January 17, 2026—KB5077800 OS Build 20348.4650 Out-of-band ​​This out-of-band update for Windows Server 2022 KB5077800 is cumulative. It includes updates from previous security, along with an additional fix. To learn more about differences between security updates, optional non-security preview...

January 17, 2026—KB5077792 (OS Build 25398.2096) Out-of-band

January 17, 2026—KB5077792 OS Build 25398.2096 Out-of-band ​​​​This out-of-band update for Windows Server 23H2 KB5077792 is cumulative. It includes updates from previous security, along with an additional fix. To learn more about differences between security updates, optional non-security preview...

KB5073447: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: January 13, 2026

KB5073447: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: January 13, 2026 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain...

KB5071813: Servicing stack update for Windows Server 2012: November 11, 2025

KB5071813: Servicing stack update for Windows Server 2012: November 11, 2025 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices ...

KB5070247: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 11, 2025

KB5070247: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: November 11, 2025 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain...

KB5068783: Servicing stack update for Windows Server 2012 R2: November 11, 2025

KB5068783: Servicing stack update for Windows Server 2012 R2: November 11, 2025 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devic...

CVE-2025-40074

In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dstdevrcu Change icmpv4xrlimallow, ipdefrag to prevent possible UAF. Change ipmrpreparexmit, ipmrqueuefwdxmit, ipmroutput, ipv4neighlookup to use lockdep enabled dstdevrcu...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

October 23, 2025—KB5070881 OS Build 26100.6905 Out-of-band Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices to boot securely i...

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025

KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business devices t...

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025

KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. This might affect the ability of certain personal and business device...