ALSA-2026:5145 Important: yggdrasil-worker-package-manager security update

yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disable repositories, and does rudimentary detection of the host it is running on to guess the package manager to use. It only installs packages that matc...

RHEL 10 : yggdrasil-worker-package-manager (RHSA-2026:5145)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:5145 advisory. yggdrasil-worker-package-manager is a simple package manager yggd worker. It knows how to install and remove packages, add, remove, enable and disab...

yggdrasil-worker-package-manager security update

0.2.3-4 - Bump release for rebuild...

arlbench (0.1.3), backend-ai-appproxy-coordinator (>=25.13.0rc1, <=26.8.3) +3 more potentially affected by CVE-2026-32722 via memray (>=1.12.0, <=1.17.2)

memray PYPI version =1.12.0, =25.13.0rc1, =25.13.0rc1, =26.2.0rc1, =26.4.4rc8 - feluda-image-vec-rep-resnet 0.1.0 Source cves: CVE-2026-32722 Source advisory: SNYK:PYTHON-MEMRAY-15763582...

arlbench (0.1.3), backend-ai-appproxy-coordinator (>=25.13.0rc1, <=26.8.3) +3 more potentially affected by CVE-2026-32722 via memray (>=1.12.0, <=1.17.2)

memray PYPI version =1.12.0, =25.13.0rc1, =25.13.0rc1, =26.2.0rc1, =26.4.4rc8 - feluda-image-vec-rep-resnet 0.1.0 Source cves: CVE-2026-32722 Source advisory: OSV:PYSEC-2026-2203...

arlbench (0.1.3), backend-ai-appproxy-coordinator (>=25.13.0rc1, <=26.8.3) +3 more potentially affected by CVE-2026-32722 via memray (>=1.12.0, <=1.17.2)

memray PYPI version =1.12.0, =25.13.0rc1, =25.13.0rc1, =26.2.0rc1, =26.4.4rc8 - feluda-image-vec-rep-resnet 0.1.0 Source cves: CVE-2026-32722 Source advisory: MEND:CVE-2026-32722...

CVE-2026-25769

Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution RCE vulnerability due to Deserialization of Untrusted Data. All Wazuh deployments using cluster mode master/worker architecture and any...

EUVD-2026-12595

Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution RCE vulnerability due to Deserialization of Untrusted Data. All Wazuh deployments using cluster mode master/worker architecture and any...

CVE-2026-25769

Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution RCE vulnerability due to Deserialization of Untrusted Data. All Wazuh deployments using cluster mode master/worker architecture and any...

CVE-2026-25769 Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution RCE vulnerability due to Deserialization of Untrusted Data. All Wazuh deployments using cluster mode master/worker architecture and any...

CVE-2026-25769 Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.0.0 through 4.14.2 have a Remote Code Execution RCE vulnerability due to Deserialization of Untrusted Data. All Wazuh deployments using cluster mode master/worker architecture and any...

arlbench (0.1.3), backend-ai-appproxy-coordinator (>=25.13.0rc1, <=26.8.3) +3 more potentially affected by CVE-2026-32722 via memray (>=1.12.0, <=1.17.2)

memray PYPI version =1.12.0, =25.13.0rc1, =25.13.0rc1, =26.2.0rc1, =26.4.4rc8 - feluda-image-vec-rep-resnet 0.1.0 Source cves: CVE-2026-32722 Source advisory: OSV:GHSA-R5PR-887V-M2W9...

arlbench (0.1.3), backend-ai-appproxy-coordinator (>=25.13.0rc1, <=26.8.3) +3 more potentially affected by CVE-2026-32722 via memray (>=1.12.0, <=1.17.2)

memray PYPI version =1.12.0, =25.13.0rc1, =25.13.0rc1, =26.2.0rc1, =26.4.4rc8 - feluda-image-vec-rep-resnet 0.1.0 Source cves: CVE-2026-32722 Source advisory: GHSA-R5PR-887V-M2W9...

Azure Automation Hybrid Worker Windows Extension Auth Bypass Privilege Escalation

The vulnerability of the Azure Automation Hybrid Worker Windows Extension is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2026-23240 tls: Fix race condition in tls_sw_cancel_work_tx()

In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tlsswcancelworktx This issue was discovered during a code audit. After canceldelayedworksync is called from tlsskprotoclose, txworkhandler can still be scheduled from paths such as the Delayed ACK handl...

CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

...

CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

...

CVE-2026-26141

CVE-2026-26141 corresponds to an Elevation of Privilege in the Hybrid Worker Extension (Arc-enabled Windows VMs) of Azure Arc, caused by improper authentication that could let an authorized attacker escalate privileges locally. The CVE entry notes a HIGH base score (CVSS 3.1: 7.8, LOCAL, LOW user...

Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...

Build Numbers and Versions of Veeam Plug-In for HPE Morpheus VM Essentials

This KB article lists all versions of the Veeam Plug-In for HPE Morpheus VM Essentials and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for HPE Morpheus VM Essentials 2 Releases Veeam Plug-In for HPE Morpheus VM Essentials 2.0...