PT-2026-55077

An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be...

PT-2026-55068

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a downstream HTTP/3 request that is complete at the transport layer HEADERS with FIN / headers-only close but still carries a nonzero...

PT-2026-55069

Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared caching layer that results in cached content being shared between different visitors, an unauthenticated user could send an x-ghost-preview header that altered the rendered frontend response. In affecte...

PT-2026-53943

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.1.6 Description The Object Query Language OQL engine resolves class names provided by an attacker using Class.forName and invokes their constructors without an allow-list at three sinks:...

PT-2026-53911

Name of the Vulnerable Software and Affected Versions Zephyr version 4.3.0 Zephyr version 4.4.0 Description The DNS resolver in subsys/net/lib/dns fails to properly validate the rdlength of resource records in DNS responses within the dns unpack answer function. This allows the acceptance of an...

WordPress Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin <= 3.7.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Attachment Creation vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Media Attachment Creation vulnerability discovered by se1en in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.7...

Critical Photon OS Security Update - PHSA-2026-5.0-0910

Updates of 'python3', 'gnupg' packages of Photon OS have been released...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21135-1 Rating: important References: bsc1268373 Cross-References: CVE-2026-12437 CVE-2026-12438 CVE-2026-12439 CVE-2026-12440 CVE-2026-12441...

Security update for nano (moderate)

openSUSE security update: security update for nano ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21166-1 Rating: moderate References: bsc1258260 bsc1262643 bsc1263022 bsc1263437 Cross-References: CVE-2026-40556 CVE-2026-6842 CVE-2026-6843 Affected...

Security update for openssl-3 (important)

openSUSE security update: security update for openssl-3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21005-1 Rating: important References: bsc1259652 bsc1266340 bsc1266341 bsc1266342 bsc1266344 bsc1266345 bsc1266347 bsc1266349 bsc1266350 bsc12663...

Security update for google-cloud-sap-agent (important)

openSUSE security update: security update for google-cloud-sap-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21010-1 Rating: important References: bsc1265764 bsc1265991 bsc1266604 Cross-References: CVE-2026-33186 CVE-2026-33814 CVE-2026-3498...

Fedora 43 : perl-DBI (2026-d74dd170ab)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d74dd170ab advisory. Update to 1.648; Fix CVE-2026-9698 and CVE-2026-10879 Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-13763

creationtimestamp| type| source ---|---|--- 2026-06-29 22:45:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphkvs6ply2x 2026-06-29 23:29:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphndjd77w2u 2026-06-29 23:29:04+00:00| seen|...

CVE-2026-55956

creationtimestamp| type| source ---|---|--- 2026-06-29 22:38:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphkji2ejb2s 2026-06-29 23:02:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphltgcvtn24 2026-06-29 23:19:22+00:00| seen|...

CVE-2026-57498

creationtimestamp| type| source ---|---|--- 2026-06-29 22:37:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkgkb5nx2y 2026-06-29 23:03:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mphlw6ku5s2x 2026-06-29 23:28:36+00:00| seen|...

CVE-2026-55276

creationtimestamp| type| source ---|---|--- 2026-06-29 22:28:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjxl65jr27 2026-06-29 22:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphlo2ck6t24 2026-06-29 23:11:34+00:00| seen|...

CVE-2026-13762

creationtimestamp| type| source ---|---|--- 2026-06-29 22:08:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mphiu4vkl324 2026-06-29 22:50:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphl6qlfck2s 2026-06-29 23:12:40+00:00| seen|...

CVE-2026-53426

creationtimestamp| type| source ---|---|--- 2026-06-29 22:01:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphiguy5rn2x 2026-06-29 22:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkestmkb2d 2026-06-29 23:20:45+00:00| seen|...

CVE-2026-12912

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

Chromium extension uses AI‑related branding to redirect browser search

In this article 1. Extension overview 2. Key indicators of malicious behavior 3. Dynamic analysis findings 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft Threat Intelligence has identified a malicious Chromium-based extension that spoofs the AI-powered answer engine...