PT-2026-97217

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A local privilege escalation issue exists in the update daemon of Foxit PDF Editor/Reader. This is caused by an insecure permission configuration that allows regular users to...

PT-2026-97232

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A race condition exists in the update mechanism of Foxit PDF Editor/Reader. Due to insufficient file locking and integrity validation, an update package can be replaced by a...

postgresql:15 security update

pgaudit 1.7.0-1 - Update to 1.7.0 - Support postgresql 15 - Related: 2128241 1.5.0-1 - Update to version 1.5.0 Related: 1855776 1.4.0-4 - Bump release for rebuild against libpq-12.1-3 1.4.0-3 - BuildRequires libpq-devel 1.4.0-2 - BuildRequires postgresql-server-devel 1.4.0-1 - Update to 1.4.0...

PT-2026-97125

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...

CVE-2026-86785: Missing Authorization

The Social Commerce for WooCommerce WordPress plugin through 2.5.4 does not have authorisation checks on some of its REST API endpoints, allowing unauthenticated users to update Social Commerce for WooCommerce WordPress plugin through 2.5.4 configuration and product synchronisation state...

PT-2026-97514

Name of the Vulnerable Software and Affected Versions Easy Store versions 1.0.0 through 3.0.0 Description An authenticated administrator can perform a SQL Injection through the coupon bulk update task. The issue occurs because the application takes input IDs and directly concatenates them into ra...

CVE-2026-63000: Cross-Site Request Forgery (CSRF)

REDAXO is a PHP-based content management system. Prior to 5.21.2, rexapiinstallpackageupdate in redaxo/src/addons/install/lib/api/apipackageupdate.php inherits the false default from rexapifunction::requiresCsrfProtection instead of requiring a CSRF token. An unauthenticated attacker can cause a...

CLSA-2026-1790109523 TuxCare security update for 14 packages (2 CVEs)

TuxCare rebuilt 14 packages to address 2 CVEs. Fixed in 3.2.4-tuxcare.2...

EUVD-2026-84038

Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards...

CLSA-2026-1790102459 TuxCare security update for org.springframework (12 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 12 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.11...

CVE-2026-43643

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote attackers to modify any tenant's account balance by supplying crafted act and frombillingmodule parameters to the admin panel...

Security update for openssl-certs

This update for openssl-certs fixes the following issue: Updated to 2.90 state bsc1279961: Removed: AffirmTrust Commercial AffirmTrust Networking AffirmTrust Premium AffirmTrust Premium ECC certSIGN ROOT CA Entrust Root Certification Authority PKI Root Certification Authority FIRMAPROFESIONAL CA...

CVE-2026-75517 Novu: Cross-Environment Integration Manipulation (IDOR)

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu integration mutation use cases including remove-integration, update-integration, auto-configure-integration, and set-integration-as-primary look up an integration by integrationId and organizationId...

CLSA-2026-1790080840 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.14-tuxcare.2...

CLSA-2026-1790074384 TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1...

CLSA-2026-1790069660 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (Gaudi)

Red Hat AI Base Images 3.4.2 Gaudi is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

BigDiskBuster

BigDiskBuster Windows Defender Update Denial of Service Vulnerability This proof of concept is similar to UnDefend, it prevents windows defender from performing platform/signature updates, Seems to work on all supported windows versions but PoC is a bit buggy and needs some rewritting but you get...

Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities

Summary The vulnerabilities are found in the dependent open source libraries used in IBM Quantum Safe Remediator code base. IBM Quantum Safe Remediator has addressed these vulnerabilities by updating the versions of the affected libraries. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION:...