CVE-2026-64799

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

EUVD-2026-47915

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: spamcheck, pypy-3.10, mlflow-fips, duplicity, nvidia-nsight-compute-13.3, label-studio, openstack-horizon-2026.1, vast-csi, kubeflow-jupyter-web-app, datahub-ingestion, superset, openstack-placement-2025.2-fips, openstack-keystone-2026.1, kubeflow-volumes-web-app,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: spamcheck, k8s-sidecar, openstack-keystone-2025.2, localstack, duplicity, label-studio, kubeflow-jupyter-web-app, datahub-ingestion, kubeflow-pipelines, superset, litellm, kubeflow-volumes-web-app, metaflow-service-fips, openstack-keystone-2026.1, authentik-fips,...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: spamcheck, pypy-3.10, mlflow-fips, duplicity, nvidia-nsight-compute-13.3, label-studio, openstack-horizon-2026.1, vast-csi, kubeflow-jupyter-web-app, datahub-ingestion, superset, openstack-placement-2025.2-fips, openstack-keystone-2026.1, kubeflow-volumes-web-app,...

CVE-2026-59886 vulnerabilities

Vulnerabilities for packages: spamcheck, k8s-sidecar, openstack-keystone-2025.2, localstack, duplicity, label-studio, kubeflow-jupyter-web-app, datahub-ingestion, kubeflow-pipelines, superset, litellm, kubeflow-volumes-web-app, metaflow-service-fips, openstack-keystone-2026.1, authentik-fips,...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: spamcheck, k8s-sidecar, openstack-keystone-2025.2, localstack, duplicity, label-studio, kubeflow-jupyter-web-app, datahub-ingestion, kubeflow-pipelines, superset, litellm, kubeflow-volumes-web-app, metaflow-service-fips, openstack-keystone-2026.1, authentik-fips,...

openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)

A flaw was found in OpenJDK. 1 DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2 Missing bounds check in the DataView constructor fails to validate the capacity...

openjdk: Enhance XBM image support (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

CVE-2026-7534

The SUMO Reward Points plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the REST API endpoint /wp-json/wc-srp/v1/earning in versions up to, and including, 32.7.0. This is due to the userhascap filter in the SRPRESTEarningController class unconditionally granti...

EUVD-2026-47884

The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

[SECURITY] Fedora 44 Update: nginx-mod-naxsi-1.6-21.fc44

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

[SECURITY] Fedora 44 Update: nginx-1.30.4-1.fc44

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

PT-2026-64006

Name of the Vulnerable Software and Affected Versions AWS API MCP Server versions 0.2.13 through 1.3.46 Description Improper handling of an initialization failure during server startup allows an actor to bypass the user-configured security policy. If the data used to enforce the security policy...

Oracle Primavera P6 Enterprise Project Portfolio Management (July 2026 CPU)

The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host is affected by a vulnerability as referenced in the July 2026 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering...