Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013207)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013207 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace A received TKIP key may b...

CVE-2026-5724 vulnerabilities

Vulnerabilities for packages: temporal-server...

GHSA-Q98V-9F9W-F49Q vulnerabilities

Vulnerabilities for packages: temporal-server...

Explainable Attention-Based LSTM Framework for Early Detection of AI-Assisted Ransomware Via File System Behavioral Analysis

Ransomware continues to evolve as one of the most disruptive cyber threats, with recent variants increasingly leveraging automated and AI-assisted techniques to evade traditional signature-based defenses. Early detection of such attacks remains a significant challenge, particularly when malicious...

CVE-2026-5724 vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server...

GHSA-Q98V-9F9W-F49Q vulnerabilities

Vulnerabilities for packages: temporal-fips, temporal-server-fips, temporal-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: snyk-cli, kube-metrics-adapter, fq, temporal, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: snyk-cli, kube-metrics-adapter, fq, temporal, temporal-ui-server...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq, temporal-ui-server-fips, temporal-fips, kube-metrics-adapter-fips, snyk-cli, gotenberg, temporal, temporal-ui-server...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq, temporal-ui-server-fips, temporal-fips, kube-metrics-adapter-fips, snyk-cli, gotenberg, temporal, temporal-ui-server...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-XPG8-3HHP-P7W8 vulnerabilities

Vulnerabilities for packages: temporal...

CVE-2026-5199 vulnerabilities

Vulnerabilities for packages: temporal...

Robust Semi-Supervised Temporal Intrusion Detection for Adversarial Cloud Networks

Cloud networks increasingly rely on machine learning based Network Intrusion Detection Systems to defend against evolving cyber threats. However, real-world deployments are challenged by limited labeled data, non-stationary traffic, and adaptive adversaries. While semi-supervised learning can...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: aws-fsx-csi-driver-fips, commercial-expanso-edge, kyverno-policy-reporter-plugins-trivy-fips, crossplane-provider-azure-managedidentity, azure-service-operator-fips, flux, nats-server-fips, jitsucom-bulker, kyverno-policy-reporter-plugins-trivy, kubevirt-cdi-apiserve...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, azure-service-operator-fips, crossplane-provider-aws-cognitoidentity-fips, lazydocker, linkerd2, seaweedfs-fips, xeol, rancher-telemetry, velero-plugin-for-csi-fips, dockerize-fips, modelmesh-runtime-adapter, crossplane-provider-keycloak-fips...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the AdminService/StreamWorkflowReplicationMessages endpoint. An attacker can access replication streams and exfiltrate data by connecting to the frontend gRPC server without providing...

EUVD-2026-21607

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

GHSA-Q98V-9F9W-F49Q Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...