CLSA-2026-1790676372 TuxCare security update for morgan (1 CVE)

TuxCare rebuilt morgan to address 1 CVE. Fixed in 1.5.3-tuxcare.4...

Intel-CVE-2018-3639-Mitigation_RegistryUpdate

Intel-CVE-2018-3639-軽減RegistryUpdate...

ROOT-OS-ALPINE-319-CVE-2024-50382 CVE-2024-50382 in botan - Patched by Root

Root has patched CVE-2024-50382 in the botan package for Root:Alpine:3.19. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-38471 CVE-2023-38471 in avahi - Patched by Root

Root has patched CVE-2023-38471 in the avahi package for Root:Alpine:3.18. Multiple fixed versions available...

EUVD-2026-88666

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

The Hitachi Energy RTU500 contains an authentication bypass vulnerability in its firmware update endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to upload arbitrary firmware . Successful exploitation allows the attacker to modify device functionality or c...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CLSA-2026-1790673455 TuxCare security update for fast-uri (2 CVEs)

TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 2.4.5-tuxcare.2...

CLSA-2026-1790673431 TuxCare security update for pacote (1 CVE)

TuxCare rebuilt pacote to address 1 CVE. Fixed in 19.0.2-tuxcare.1...

CVE-2023-5965

Espo CRM 7.2.4 CVE-2023-5965 & CVE-2023-5965 の PoC CVE-2023-5965 アドバイザリ 認証された特権攻撃者は、更新フォームを介して、特別に細工されたzipをバージョン7.2.5のEspoCRMサーバーにアップロードし、任意のPHPコード実行につながる可能性があります。 ファイルをアップロードするには、Administration = Upgrades に移動します。 CVE-2023-5966 アドバイザリ...

CVE-2026-47102-PoC

CVE-2026-47102 — LiteLLM 権限昇格 via /user/update LiteLLM v1.83.7（v1.83.10 より前のバージョン）の /user/update エンドポイントは、このエンドポイントへのアクセス権を持つ 低権限ユーザーが自分のアカウントを更新する際に userrole フィールドを proxyadmin に変更でき、 未承認の権限昇格を実現します。 フィールド| 値 ---|--- CVE| CVE-2026-47102 CVSS v3.1| 8.8 HIGH — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CW...

CLSA-2026-1790671318 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.post15+tuxcare...

CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation

org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CLSA-2026-1790666525 TuxCare security update for org.springframework.data:spring-data-commons (3 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 3 CVEs. Fixed in 3.2.11-tuxcare.1...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update 不正アクセス制御の脆弱性 Broken Access Control LiteLLM の /config/update エンドポイントは呼び出し元のロール権限をチェックしません 。有効な API Key を持つ 認証済みユーザー（管理者権限不要）はプロキシ設定を変更し、悪意のある Pass-Through エンドポイントを登録して 環境変数の窃取、任意のファイル読み取り、リモートコード実行 などの攻撃が可能です。 フィールド| 値 ---|--- CVE| CVE-2026-35029 CVSS v4.0|...

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...