EUVD-2026-51559

The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates to it, but missed several sinks that had been placed in testsqlstringliterallint.py's ALLOWLIST on the incorrect assumption that schema, table, publication, and...

Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests

In a review triggered by OpenAI’s Hugging Face incident, Anthropic discovered three of its AI models had breached real-world organizations during third-party evaluations...

openSUSE 16 Security Update : runc (openSUSE-SU-2026:21431-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21431-1 advisory. Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Othe...

CVE-2026-16799

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks...

CVE-2026-16799

Affected product: Devolutions PowerShell Universal (versions 2026.2.2 and earlier). Vulnerability: improper access control in automation tests and workflows features, enabling an authenticated user with only the Reader role to execute automation tests and modify workflow properties due to missing...

EUVD-2026-48606

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks...

CVE-2026-16799

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks...

PT-2026-64308

Name of the Vulnerable Software and Affected Versions Devolutions PowerShell Universal versions prior to 2026.2.3 Description Improper access control within the automation tests and workflows features allows an authenticated user assigned the Reader role to execute automation tests and modify...

OPENSUSE-SU-2026:21431-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...

SUSE-SU-2026:22942-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...

CVE-2026-65014

n8n before 2.28.0 and before 2.27.4 on the 2.27.x branch registers the DELETE /$restEndpoint/test-webhook/:id endpoint before authentication middleware is applied, allowing any unauthenticated network caller who knows a workflow ID to cancel that workflow's active test webhook registration. The...

podman security update

5.8.2-5.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 7:5.8.2-5 - rebuild for CVE-2026-39822 - Resolves: RHEL-193642 7:5.8.2-4 - update to the latest state of the sustaining branch - fixes CVE-2026-42508 CVE-2026-39829 CVE-2026-39830 CVE-2026-39832...

golang security update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1 1.25.5-1 - Update to Go 1.25.5 fips-1 1.25.3-5 - gating.yaml: Add tier1 s390x tests 1.25.3-4 - Cleanup lib/ ownership - Remove legacy logic forcing lib/...

Xalgorix Autonomous AI Pentesting Agent 4.5.67

Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported - so you get proof, not a pile of maybes to triage. Self-hosted, private, and bring-your-own-LLM. Built in Go + TypeScript...

libtiff security, bug fix, and enhancement update

4.6.0-8.4 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189374 - make sure documentation is updated during build for CVE-2023-52355 RHEL-178281 4.6.0-8.3 - reintroduce ignore option -i as it is required for tests RHEL-185328 4.6.0-8.2 - backport...

Linux Distros Unpatched Vulnerability : CVE-2026-64163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - testkprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. root@martin-riscv-1...

glib2 security update

2.56.4-170 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 2.68.4-169 - Add patch for CVE-2025-14087 and CVE-2025-14512 2.56.4-168 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase 2.56.4-167 - gdbusconnection: Prevent sending a serial of zero...

EUVD-2026-45874

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.longname that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...

CVE-2026-64163

In the Linux kernel, the following vulnerability has been resolved: testkprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. root@martin-riscv-1 echo 1 /sys/kernel/debug/kunit/kprobestest/run ... Totals: pass:5...

CVE-2026-64163

Implemented fix in the Linux kernel to clear kprobes between test runs to prevent leftover probe data from causing failures or kernel paging issues. The issue arose because static kprobes/kretprobes retained state across tests; after register_kprobe and unregister_kprobe, a kprobe retained data t...