Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Next.js (CVE-2026-44572, CVE-2026-44573)

Summary Multiple vulnerabilities including SSRF and header manipulation in Next.js CVE-2026-44572, CVE-2026-44573 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 15.5.21. Vulnerability Details CVEID:CVE-2026-44572 DESCRIPTION: Next.js is a Rea...

SUSE-SU-2026:4272-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118....

Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118...

SUSE-SU-2026:4270-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260264. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

K000163348: Multiple Linux kernel vulnerabilities CVE-2024-41073, CVE-2025-40252, CVE-2025-68724 CVE-2026-23401 and CVE-2026-43077

Security Advisory Description CVE-2024-41073 In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the...

Malicious code in @nimbusedge2/x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d678f278cdb8171d7ac41ffa9f50b57ccb508dfa5a64bec6430efa17b2662e package.json declares a preinstall lifecycle script that runs automatically on npm install. The script invokes bash -i &...

MAL-2026-16305 Malicious code in @nimbusedge2/x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d678f278cdb8171d7ac41ffa9f50b57ccb508dfa5a64bec6430efa17b2662e package.json declares a preinstall lifecycle script that runs automatically on npm install. The script invokes bash -i &...

PT-2026-96056

Name of the Vulnerable Software and Affected Versions Open VSX affected versions not specified Description An unauthenticated remote attacker can poison the per-extension metadata cache by supplying crafted X-Forwarded-Host, X-Forwarded-Proto, and X-Forwarded-Prefix request headers. The...

CVE-2026-79317

A session invalidation flaw exists in x-ui 0.3.2 because the full user object is stored in a client-side signed cookie . The application's authentication mechanism only verifies that a user object can be retrieved from the cookie without re-validating against the database or checking a session ve...

PT-2026-96241

Name of the Vulnerable Software and Affected Versions x-ui version 0.3.2 Description A session invalidation flaw occurs because the full user object is stored in a client-side signed cookie. The authentication process only verifies that a user object can be retrieved from the cookie, failing to...

CVE-2026-79317: Insufficient Session Expiration

A session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side signed cookie, and authentication only checks that a user object can be retrieved from the cookie without re-validating against the database or any session version. When an administrator changes the...

CVE-2026-91164: Improper Access Control

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.23.0 until 0.27.3, HTTP API token authentication resolves ConfigProvider::validateapitoken into RequestAuthorization::UserToken without enforcing the owning user's allowedipranges against the trusted client address in...

PT-2026-96222

Name of the Vulnerable Software and Affected Versions Warpgate versions 0.23.0 through 0.27.2 Description HTTP API token authentication fails to enforce the allowed ip ranges of the owning user against the trusted client address during the resolution of ConfigProvider::validate api token into...

CVE-2026-79316: Improper Access Control

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2. Any authenticated panel user can modify the xray configuration template through the settings interface and trigger a panel restart, causing the xray management gRPC service, which is bound to loopback by default, to be regenerated and...

PT-2026-96145

Name of the Vulnerable Software and Affected Versions Mailu versions 2.0 through 2024.06.54 Mailu helm-charts versions prior to 2.7.3 Description Deployments configured with PROXY AUTH WHITELIST but without REAL IP HEADER set trust a client-controlled X-Forwarded-By header for proxy authenticatio...

CVE-2026-85751: Authentication Bypass by Spoofing

Mailu is a mail server distributed as a set of Docker images. From Mailu 2.0 until 2024.06.55 and prior to Mailu helm-charts 2.7.3, deployments with PROXYAUTHWHITELIST configured but REALIPHEADER unset trusted a client-controlled X-Forwarded-By header for header-based proxy authentication. The...

PT-2026-96219

Name of the Vulnerable Software and Affected Versions Warpgate versions prior to 0.25.6 Description The copy server request function in warpgate-protocol-http/src/proxy.rs forwards a client-supplied x-warpgate-username header before the inject own headers function appends the authenticated...

RHEL 8 : rhc (RHSA-2026:69258)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:69258 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security Fixes:...