BIT-AIRFLOW-2026-48891 Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

CVE-2026-15513

The CVE-2026-15513 vulnerability affects the Wavlink WL-NU516U1 (model 260515) in the CGI handler /cgi-bin/adm.cgi, specifically the wlink_uci_set_value function. An attacker can remotely manipulate the lan_ip argument to trigger an OS command injection. Impact is described as network-accessible ...

CVE-2026-45571 affecting package packer for versions less than 1.9.5-17

CVE-2026-45571 affecting package packer for versions less than 1.9.5-17. An upgraded version of the package is available that resolves this issue...

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1

CVE-2026-59856 affecting package vim for versions less than 9.2.0782-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1

CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1

CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] [DLA 4678-1] libxfont security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4678-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura July 12, 2026 https://wiki.debian.org/LTS -...

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15488 hcr707305003 shiroiAdmin FileController.php upload unrestricted upload

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15488

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15488

The CVE affects hcr707305003 shiroiAdmin versions 1.1/1.3 where FileController.php (FileController::upload) can be manipulated to trigger an unrestricted file upload. This could be exploited remotely. A public exploit exists. Upgrade to version 1.4 to address the issue (patch 3ecde28ea8a20a3840db...

EUVD-2026-43210

A vulnerability was determined in hcr707305003 shiroiAdmin 1.1/1.3. Affected is the function FileController::upload of the file app/common/controller/FileController.php. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit...

CVE-2026-15476

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The...

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

CVE-2026-15476 QILING Disk Master Kernel Driver diskbckp.sys access control

A security vulnerability has been detected in QILING Disk Master 6.0.0.0. The impacted element is an unknown function in the library diskbckp.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack can only be performed from a local environment. The...