Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS is to support a new UMA carveout model. This resolves a null dereference issue when accessing Ctx-dcbios-integratedinfo, as this variable...

CLSA-2026-1782781173 TuxCare security update for org.apache.struts (3 CVEs)

TuxCare rebuilt 35 org.apache.struts packages to address 3 CVEs. Fixed in 2.5.33-tuxcare.2...

CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...

CLSA-2026-1777250296 TuxCare security update for 35 packages (3 CVEs)

TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...

CLSA-2026-1776818211 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.8...

CLSA-2026-1775608273 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.7...

CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)

TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1765411682 TuxCare security update for 35 packages (3 CVEs)

TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.5...

CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

CLSA-2025-1753056170 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100.tuxcare.2...

CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)

TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)

Last week, there were 264 vulnerabilities disclosed in 210 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 117 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-LY12450 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r2

Package certificate-transparency-trillian-ctserver version 1.3.2-r2 fixes 35 vulnerabilities: ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2026-27143, CVE-2026-42499...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CLEANSTART-2026-KK78041 Security fixes in weaviate 1.35.2-r0

Package weaviate version 1.35.2-r0 fixes 5 vulnerabilities: ghsa-j5w8-q4qc-rx2x, CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

EUVD-2026-44835

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...

CVE-2026-53447 Wekan: `cloneBoard` Meteor method has no authorization check — any user can clone (read) any private board by ID

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...

CVE-2026-53447 Wekan: `cloneBoard` Meteor method has no authorization check — any user can clone (read) any private board by ID

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...