Red Hat Security Advisory 2026-54581-03

Red Hat Security Advisory 2026-54581-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include buffer overflow, bypass, information leakage, privilege escalation, and traversa...

Red Hat Security Advisory 2026-55804-03

Red Hat Security Advisory 2026-55804-03 - An update for nghttp2 is now available for Red Hat Enterprise Linux 8...

Red Hat Security Advisory 2026-56143-03

Red Hat Security Advisory 2026-56143-03 - An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Issues addressed include a privilege escalation vulnerability...

RoboTask 11.0.5.1229 Authentication Bypass

RoboTask version 11.0.5.1229 contains a missing authentication vulnerability in its REST API. When the REST service is enabled with its default API-key setting, a remote unauthenticated attacker can enumerate and trigger existing tasks. Tasks execute with the privileges of the RoboTask process an...

ActFax Server 10.70 Remote Code Execution

ActFax Server version 10.70 contains an unauthenticated remote code execution vulnerability in its LPD service. A remote attacker can submit a crafted print job containing an @F211 fax destination and PostScript content that abuses the Ghostscript pipe operator. When the document is rasterized by...

Microsoft Windows Admin Center Remote Code Execution

Microsoft Windows Admin Center builds prior to 2.7.4 contain a command injection vulnerability in the PowerShell tool REST API. An authenticated low-privileged gateway user can supply arbitrary commands through the properties.script field of an invokeCommand request, resulting in command executio...

SUSE Security Advisory - SUSE-SU-2026:3638-1

SUSE Security Advisory - This update for redis fixes the following issue. Remote code execution via a RESTORE payload where the same NACK is referenced by more than one consumer...

TENET: Telegram Mini App (In)Security

Telegram, with over 450 million daily active users, has introduced Mini Apps---web-based applications running directly within its client. However, this integration introduces notable security risks. As we demonstrate, many Mini Apps store authentication materials---such as session tokens and wall...

Red Hat Security Advisory 2026-56219-03

Red Hat Security Advisory 2026-56219-03 - An update for python3 is now available for Red Hat Enterprise Linux 8. Issues addressed include a bypass vulnerability...

Red Hat Security Advisory 2026-55862-03

Red Hat Security Advisory 2026-55862-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55803-03

Red Hat Security Advisory 2026-55803-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...

Veeam ONE Reporter 13.1 Remote Code Execution

Veeam ONE Reporter version 13.1 contains an authenticated remote code execution vulnerability in dashboard scheduling. A remote PowerUser can supply an arbitrary command through reportSettings.command, which is subsequently executed without command validation or privilege reduction. Commands...

Red Hat Security Advisory 2026-55930-03

Red Hat Security Advisory 2026-55930-03 - An update for modhttp2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and out of bounds read vulnerabilities...

Red Hat Security Advisory 2026-55772-03

Red Hat Security Advisory 2026-55772-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9. Issues addressed include denial of service and integer overflow vulnerabilities...

Benchmarking Automated Security Patch Backporting: How Far Are We?

Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...

Red Hat Security Advisory 2026-33521-03

Red Hat Security Advisory 2026-33521-03 - An update for Red Hat Hardened Images RPMs is now available...

Red Hat Security Advisory 2026-54769-03

Red Hat Security Advisory 2026-54769-03 - Red Hat OpenShift Container Platform release 4.22.10 is now available with updates to packages and images that fix several bugs and add enhancements. Issues addressed include bypass, code execution, denial of service, double free, out of bounds write,...

Red Hat Security Advisory 2026-54580-03

Red Hat Security Advisory 2026-54580-03 - Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements...

Red Hat Security Advisory 2026-55858-03

Red Hat Security Advisory 2026-55858-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 10. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-55857-03

Red Hat Security Advisory 2026-55857-03 - An update for .NET 10.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-55861-03

Red Hat Security Advisory 2026-55861-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Issues addressed include a denial of service vulnerability...

Typemill 2.25.0 Authorization Bypass

Typemill version 2.25.0 and below contains an authorization bypass vulnerability in role-restricted media downloads. The application performs its authorization check using the raw request path while accessing the file using the filesystem-resolved path. An unauthenticated remote attacker can use...

Red Hat Security Advisory 2026-56130-03

Red Hat Security Advisory 2026-56130-03 - An update for sg3utils is now available for Red Hat Enterprise Linux 8...

JetBrains Datalore 2026.2.3 Remote Code Execution

JetBrains Datalore On-Premises version 2026.2.3 contains an authorization flaw in publicly shared interactive reports. An unauthenticated remote attacker with access to a public report can have READ permissions incorrectly mapped to EXECUTE permissions, allowing access to computation RPC methods...

Red Hat Security Advisory 2026-55856-03

Red Hat Security Advisory 2026-55856-03 - An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, denial of service, and information leakage vulnerabilities...

Red Hat Security Advisory 2026-55765-03

Red Hat Security Advisory 2026-55765-03 - An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Issues addressed include code execution and out of bounds write vulnerabilities...

Apple Security Advisory 08-17-2026-1

Apple Security Advisory 08-17-2026-1 - iOS 26.6.1 and iPadOS 26.6.1 addresses bypass, code execution, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities...

Red Hat Security Advisory 2026-55801-03

Red Hat Security Advisory 2026-55801-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...

Gitea 1.27.0 diffpatch Remote Code Execution

Gitea version 1.27.0 and below contains a remote code execution vulnerability in the diffpatch API. An authenticated attacker with repository write access can submit the same specially crafted patch multiple times to trigger Git's three-way merge fallback and cause an executable post-index-change...

Red Hat Security Advisory 2026-55758-03

Red Hat Security Advisory 2026-55758-03 - An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55740-03

Red Hat Security Advisory 2026-55740-03 - An update for pcp is now available for Red Hat Enterprise Linux 9. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

Red Hat Security Advisory 2026-55618-03

Red Hat Security Advisory 2026-55618-03 - An update for kpatch-patch-6120-211161 is now available for Red Hat Enterprise Linux 10...

Red Hat Security Advisory 2026-55679-03

Red Hat Security Advisory 2026-55679-03 - An update for haproxy is now available for Red Hat Enterprise Linux 10. Issues addressed include denial of service and integer overflow vulnerabilities...

dyen macOS In-Memory Mach-O Loader

dyen is a macOS in-memory Mach-O dynamic library loader designed to execute a dylib using the stock Python interpreter without writing the decrypted Mach-O to disk or registering the payload with dyld. It supports encrypted standalone payloads and encrypted dylibs appended to otherwise valid cove...

Cisco Secure Firewall Management Center Authentication Bypass / Remote Code Execution

Cisco Secure Firewall Management Center contains an authentication bypass vulnerability that can allow an unauthenticated remote attacker to access a startup-created machine session and ultimately execute code as root. This proof of concept implements the publicly documented attack chain, includi...

Red Hat Security Advisory 2026-55841-03

Red Hat Security Advisory 2026-55841-03 - An update for unbound is now available for Red Hat Enterprise Linux 9. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-56131-03

Red Hat Security Advisory 2026-56131-03 - An update for pam is now available for Red Hat Enterprise Linux 8...

Red Hat Security Advisory 2026-55865-03

Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...

Red Hat Security Advisory 2026-55837-03

Red Hat Security Advisory 2026-55837-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions...

Red Hat Security Advisory 2026-55560-03

Red Hat Security Advisory 2026-55560-03 - An update for pcp is now available for Red Hat Enterprise Linux 8. Issues addressed include bypass, code execution, denial of service, integer overflow, and privilege escalation vulnerabilities...

Red Hat Security Advisory 2026-56050-03

Red Hat Security Advisory 2026-56050-03 - An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 E4S for RHEL 9. Issues addressed include buffer overflow and null pointer vulnerabilities...

Red Hat Security Advisory 2026-55892-03

Red Hat Security Advisory 2026-55892-03 - An update for unbound is now available for Red Hat Enterprise Linux 10. Issues addressed include a denial of service vulnerability...

memdumper macOS EDR Process Attribution Evasion

memdumper is a macOS process memory inspection utility that injects a dynamic library into an existing signed binary possessing Apple debugger and DYLD-related entitlements. The injected library uses the entitled process to obtain a target task port, search or dump readable process memory, attach...

Red Hat Security Advisory 2026-55762-03

Red Hat Security Advisory 2026-55762-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 8...

Debian Security Advisory 6446-1

Debian Linux Security Advisory 6446-1 - A flaw was discovered in the UTF-16 decoding support of expat, an XML parsing C library, where low surrogates were treated in the same way as high surrogates. Parsing crafted XML input may result in an out-of-bounds read and a resultant infinite loop, leadi...

Red Hat Security Advisory 2026-55860-03

Red Hat Security Advisory 2026-55860-03 - An update for haproxy is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Issues addressed include a denial of service vulnerability...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

tcpreplay 4.6.1

tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...

Red Hat Security Advisory 2026-56029-03

Red Hat Security Advisory 2026-56029-03 - An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include a code execution vulnerability...

SureForms 2.1.2 Denial of Service

SureForms version 2.1.2 and below contains a denial of service vulnerability in its form submission functionality. A remote attacker can submit a large number of attacker-controlled key-value pairs containing oversized content, resulting in resource exhaustion and temporarily preventing...