Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-build-tools (UTSA-2026-016748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016748 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

CVE-2026-47101

creationtimestamp| type| source ---|---|--- 2026-05-21 22:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmfgadref72q 2026-05-21 22:16:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmfh44f5ca27 2026-05-25 10:00:04+00:00| seen|...

CVE-2026-8411 Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete

Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery CSRF at concrete/controllers/dialog/page/bulk/delete. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.3 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Yonata...

@hulumi/policies: CIS 1.16 admin policy bypass for inline and attached IAM policies

Impact: @hulumi/policies versions before 1.3.2 did not fully inspect inline and attached IAM policy evidence for the administrator-policy guardrail, so some admin-equivalent policy paths could pass policy evaluation. Patched in 1.3.2: the validator inspects the affected policy shapes and includes...

EUVD-2026-31333

The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the processajaxrestoreaction function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and...

CVE-2026-48249

creationtimestamp| type| source ---|---|--- 2026-05-21 19:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5nah2ou2o 2026-05-21 19:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf6i3tggj2c...

CVE-2026-48246

creationtimestamp| type| source ---|---|--- 2026-05-21 19:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf44ohpdc2v 2026-05-21 19:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4blasqq2n...

CVE-2026-48247

creationtimestamp| type| source ---|---|--- 2026-05-21 18:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3jagyq62q 2026-05-21 19:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf675fama2h...

CVE-2026-48248

creationtimestamp| type| source ---|---|--- 2026-05-21 18:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3d3ehj52e 2026-05-21 19:17:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf53dd7lx2e...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality (CVE-2026-41242, CVE-2026-4800) and denial of service (CVE-2026-27141)

Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality CVE-2026-41242, CVE-2026-4800 and denial of service CVE-2026-27141. This bulletin provides patch information to address the reported vulnerabilities in Node.js modules protobufjs...

CVE-2026-47243

creationtimestamp| type| source ---|---|--- 2026-05-21 18:26:35+00:00| published-proof-of-concept| https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227 2026-05-21 19:08:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf4lcuoc42m 2026-05-...

DoS (Denial of Service) loader-utils Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.17.2 and 10.3.20 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacke...

CVE-2026-48233 Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/sitincidents.php where the offset GET parameter is concatenated into the LIMIT clause of a SELECT statement without sanitization. Authenticated attackers can craft requests that alter query semantics to read, modify, o...

CVE-2026-48225 Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the type POST parameter directly into an HTML form hidden input value attribute. Attacker...

CVE-2026-48217

Open ISES Tickets prior to 3.44.2 is affected by a reflected XSS in delete_module.php. The vulnerability allows an authenticated attacker to inject arbitrary JavaScript by passing unsanitized values through POST parameters module_choice, flag, and confirmation, which are then rendered into HTML c...

grub2 security update

An update is available for grub2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a...

grub2 security update

An update is available for grub2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a...

CVE-2026-45760

creationtimestamp| type| source ---|---|--- 2026-05-21 16:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmetfq2chc2n 2026-05-21 17:10:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmevyijonm2z 2026-05-25 02:43:24+00:00| seen|...

CVE-2026-43501

creationtimestamp| type| source ---|---|--- 2026-05-21 15:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmerv5mswo2p 2026-05-22 10:45:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116617821124935045 2026-07-02 06:19:42+00:00| seen|...

Security Bulletin: IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability (CVE-2026-8405)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-8405 DESCRIPTION: IBM Guardium Data Protection's add-on feature of Guardium Data Protection named "Long Term Retention" LTR can expose sensitive credentials in debug mode...