IBM WebSphere Application Server: CVE-2026-11722: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

IBM WebSphere Application Server: CVE-2026-11549: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...

IBM WebSphere Application Server: CVE-2026-10841: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...

IBM WebSphere Application Server: CVE-2026-11545: IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...

IBM WebSphere Application Server: CVE-2026-11710: IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...

Debian: CVE-2026-61550: icinga2 -- security update

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

Ubuntu: USN-8598-1 (CVE-2026-61548): rsyslog vulnerabilities

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSDPARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed pVal32 1024 stack buffer and calls parsePARAMVALUE without supplying the...

Debian: CVE-2026-61552: icinga2 -- security update

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

IBM WebSphere Application Server: CVE-2026-11711: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...

Debian: CVE-2026-61551: icinga2 -- security update

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

IBM WebSphere Application Server: CVE-2026-11540: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

IBM WebSphere Application Server: CVE-2026-11548: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

IBM WebSphere Application Server: CVE-2026-11539: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...

IBM WebSphere Application Server: CVE-2026-11538: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...

IBM WebSphere Application Server: CVE-2026-11537: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

Red Hat: CVE-2026-46655: virtio-win: viosock.sys: integer overflow in VIOSockSelect leads to heap-based buffer overflow

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTLSELECT request with attacker-controlled VIRTIOVSOCKSELECT.Fdss.fdcount values that overflow the 32-bit sum used by VIOSockSelect...

Google Chrome Vulnerability: CVE-2026-93386 UI misrepresentation in WebAppInstalls

UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-90260: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a freed-but-still-dirty tree block is written out as zeros EXTENTBUFFERZONEDZEROOUT only to keep the zone write pointer advancing...

CVE-2026-93140: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking it dirty When an I/O error occurs while writing the Logical Volume Integrity Descriptor LVID buffer to the block device, the block layer's completion handler endbufferwritesync...

CVE-2026-92916: Exposure of Sensitive Information to an Unauthorized Actor

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled system.debugger.enabled: true, which is not the default, the Clockwork profiler endpoint is exposed without authentication: InitializeProcessor::handleDebuggerRequest intercepts any path...

CVE-2026-50275: Allocation of Resources Without Limits or Throttling

The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1.19.2, ddtracedeserializebaggage in ext/distributedtracingheaders.c parses incoming W3C baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES. A remote...

CVE-2026-50608: Missing Authentication for Critical Function

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The WebSocket handshake process does not properly require authentication before allowing connections to the service. Under certain circumstances, unauthorized access to service...

CVE-2026-52852: Uncontrolled Recursion

Traccar is an open source GPS tracking system. Prior to 6.14.0, an authenticated user with permission to manage groups and request reports can create a cyclic group-parent hierarchy and request a trips or stops report for a device in that hierarchy. org.traccar.api.resource.GroupResource permits...

CVE-2026-52727: Use of Hard-coded Cryptographic Key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-92927: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drugrecommendor.sql. Performing a manipulation results in information disclosure. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-54677: Missing Authorization

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

CVE-2026-93296: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card eventgeneral.ctp and the server/feed preview card previewgeneral.ctp constructed donut chart legend labels by directly concatenating object name or category keys into an...

CVE-2026-93292: Improper Neutralization of Special Elements used in an SQL Command

SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate servicename and spanname fields into ClickHouse string literals without escaping. Authenticated attackers can inject SQL through funnel step definitions to execute...

CVE-2026-93201: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate segid fields from persistent memory cacheposdecode, cachekeydecode and the last-kset branches of cachereplay, the writeback worker and the GC worker take a cache segment id from the cache device metadata and...

CVE-2026-93200: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirtytail chain at load The writeback worker follows the persisted dirtytail chain, which is decoded from the cache device independently of the keytail chain that cachereplay walks and bounds. A...

CVE-2026-93199: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

CVE-2026-93190: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosectypec: Reject out-of-bounds PD cap count crostypecregisterpartnerpdos copies the partner PDOs from the EC TYPECSTATUS response into the fixed capsdesc.pdoPDOMAXOBJECTS array. memcpycapsdesc.pdo,...

CVE-2026-93187: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Return error for invalid number of formats When the number of input or output formats is zero, sofipc4widgetsetupcompsrc and sofipc4widgetsetupcompasrc print an error and jump to the cleanup label. At th...

CVE-2026-93183: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drmmminit with a valid allocation range limavmcreate is currently run before vastart and vaend are set up, meaning they are both 0. limavmcreate runs drmmminit with them as arguments for the allocator, and if...

CVE-2026-93181: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93180: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NPD issue on partial unmap of an evicted BO This commit fixes the NULL pointer dereference issue that would have happened on the split of GPU mapping due to partial unmap of an evicted BO. There is a logic to...

CVE-2026-93175: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in CRTC reset function amdgpudmcrtcresetstate frees the old state before allocating a new one. If kzalloc fails, the function returns without updating the state pointer, leaving a dangling...

CVE-2026-93173: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf,lsm: Drop bpfprogfree from sleepablelsmhooks bpfprogputrcu is the callrcu callback for non-sleepable programs. securitybpfprogfree called from there fires bpfprogfree in softirq; if a sleepable LSM prog is attached to that...

CVE-2026-93168: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinxdma: Fix CPU stall in xilinxdmapolltimeout Currently when calling xilinxdmapolltimeout with delayus=0 and a condition that is never fulfilled, the CPU busy-waits for prolonged time and the timeout triggers only...

CVE-2026-93157: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hwrng: xilinx-trng - propagate timeout before any data is read xtrngreadblock32 polls for 16-byte chunks but returns the number of bytes read even when the first poll times out. Its caller then treats a zero return as a short...

CVE-2026-90177: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTRTOARENA. A second path can therefore reach the same instruction with an ordinary...

CVE-2026-90175: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of ksmbdipcloginrequestext returned buffer Free it unconditionally after ksmbdallocuser calls. kmemleak splat: unreferenced object 0xffff888103b83540 size 192: comm "pool-0", pid 16970, jiffies 4377290937 he...

CVE-2026-90156: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferred locks When vfslockfile defers a lock, smb2lock puts its ksmbdlock on rollbacklist before allocating and registering the asynchronous work. If either operation fails, rollback assumes th...

CVE-2026-90154: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bound connections ksmbdallconnsetstatus treats every connection whose transient binding flag is set as belonging to the target SessionId. A logoff or session replacement can consequently move...

CVE-2026-90153: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smbcheckpermdacl ACE walks by DACL size smbcheckpermdacl validates that the DACL fits inside the NT security descriptor, but then bounds its two ACE walks by the remaining NTSD length aclsize rather than the DACL's...

CVE-2026-90149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers flexfiles accepts NFSv4.0 data servers, but two NFSv4 code paths assume the data server client has a session. Unlike NFSv4.1+, an NFSv4.0 client has no session...

CVE-2026-90146: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

CVE-2026-90145: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix skb linearization mismatch and drop skb when skbchecksumhelp failed Previously, hinic3sendoneskb cached the skb fragment count before calling hinic3txoffload. If hinic3txcsum falls back to skbchecksumhelp for...

CVE-2026-90142: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fix resize of the RX ring When a AFXDP socket is attached, the virtnetrxresize should resize the rq-xskbuffs XSK buffer array. Otherwise, when the size grows, the virtnetrxresume causes a write past the end of the arra...