EUVD-2026-95027

Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty resetkey match...

CVE-2026-107640 Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API

Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty resetkey match...

CVE-2026-107640

Integrics Enswitch versions 3.13 through 4.4 are vulnerable to an authentication bypass within the /api/json/user/password/update/ endpoint. The root cause is a weak password recovery mechanism where an unauthenticated attacker can change account passwords by omitting the reset parameter. By targ...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CLSA-2026-1791464212 TuxCare security update for org.springframework (30 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 30 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.2...

CVE-2026-104658

The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...

CLSA-2026-1791457895 TuxCare security update for io.projectreactor (1 CVE)

TuxCare rebuilt 3 io.projectreactor packages to address 1 CVE. Fixed in 3.4.41-tuxcare.1...

CLSA-2026-1791457538 TuxCare security update for org.antlr (3 CVEs)

TuxCare rebuilt 6 org.antlr packages to address 3 CVEs. Fixed in 4.13.0-tuxcare.1...

CVE-2026-104658

Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to a privilege escalation flaw in the hmailserver-update helper. The helper runs as root but processes a request file written by the unprivileged hmailserver service account. It improperly uses the program path for AppImage sig...

EUVD-2026-94832

The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...

CVE-2026-104658 Reliance on Untrusted Inputs in a Security Decision in hMailServer

The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...

CVE-2026-104658 Reliance on Untrusted Inputs in a Security Decision in hMailServer

The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...

CLSA-2026-1791448365 TuxCare security update for mlflow (2 CVEs)

TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post13+tuxcare...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...

CLSA-2026-1791447404 TuxCare security update for com.fasterxml.jackson.core:jackson-core (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 2 CVEs. Fixed in 2.17.3-tuxcare.1...

SUSE-SU-2026:4571-1 Security update 5.2.1 for Multi-Linux Manager Server

This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 Security fixes Ubuntu 26.04 LTS Support Confidential Computing Attestation for IBM Z Series New uyuni-tftpd Container Monitoring:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.72 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...