CVE-2026-41452

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

CVE-2026-18606

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

OPENSUSE-SU-2026:21519-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.13.0 ESR. - MFSA 2026-70 bsc1271649: CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719: Site isolation issue in the DOM: Navigation component...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.15: spire1.15-1.15.2-0.4.hum1 aarch64, x8664 spire1.15-agent-1.15.2-0.4.hum1 aarch64, x8664 spire1.15-oidc-discovery-provider-1.15.2-0.4.hum1 aarch64, x8664 spire1.15-server-1.15.2-0.4.hum...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.4.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.4.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.4.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.4.hum...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.hum1.src src Security Fixes: grafana13.1: CVE-2026-67313 CVE-2026-67314 CVE-2026-67315 CVE-2026-67316 CVE-2026-67317...

Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266651. Changes for aws-iam-authenticator: Update golang.org/x/net to v0.57.0. Pat...

SUSE-SU-2026:3473-1 Security update for aws-iam-authenticator

This update for aws-iam-authenticator fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266651. Changes for aws-iam-authenticator: - Update golang.org/x/net to v0.57.0...

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: Update golang.org/x/net to v0.57.0...

Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: Update golang.org/x/net to v0.57.0...

SUSE-SU-2026:3471-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266604. Changes for google-cloud-sap-agent: - Update golang.org/x/net to v0.57....

Security update for nginx

This update for nginx fixes the following issue: CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow bsc1271514. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2026:3469-1 Security update for nginx

This update for nginx fixes the following issue: - CVE-2026-42533: referencing regex capture variables before map output variables can trigger a heap buffer overflow bsc1271514...

Important: Red Hat Security Advisory: delve security, bug fix, and enhancement update

An update for delve is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-18606

RCE-like local privilege escalation in Razer RzUpdateService 1.10.14.0 via Named Pipe Handler (RzUpdateService.exe). Manipulating lpThreadParameter is reported to cause improper privilege management; requires local access. Publicly available exploit noted; vendor contacted early. No remediation d...

CVE-2026-61372

CVE-2026-61372 is a path traversal vulnerability in Apache Jena Fuseki (through version 6.1.0). The issue arises from improper limitation of a pathname to a restricted directory within the web-facing component. Exploitation status and specific vectors are not described in the provided documents. ...

CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...

Moderate: Red Hat Security Advisory: p11-kit security update

An update for p11-kit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: p11-kit security update

An update for p11-kit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: hplip security update

An update for hplip is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...