CVE-2026-84268 is a heap-based buffer overflow vulnerability in the GNOME gvfs component, specifically in the SFTP protocol handling function read_reply(). This vulnerability has a high severity with a CVSS score of 8.8, indicating it can lead to high impact on confidentiality, integrity, and availability. The issue affects Red Hat Enterprise Linux 8 and related distributions. A security update addressing this vulnerability is available from Red Hat.
This security update for glibc addresses multiple vulnerabilities including invalid free, stack overflow, buffer overflows, out-of-bounds writes, assertion failures, and a race condition that could allow local privilege escalation. The update fixes issues in components such as wordexp, resolv_conf, fopen ccs extension, strfmon, tdelete, and character decoding routines. The vulnerabilities affect local and network contexts and can lead to process crashes or privilege escalation. The update is provided by SUSE and Red Hat for various glibc packages across architectures.
Mozilla Firefox Extended Support Release 153.4.0 ESR addresses multiple security vulnerabilities across various components including networking, audio/video playback, DOM, graphics, JavaScript engine, storage, sandbox escapes, privilege escalations, and mitigation bypasses. These issues include use-after-free bugs, information disclosure, sandbox escapes, privilege escalations, denial-of-service, and same-origin policy bypasses. The update fixes these vulnerabilities to improve browser security.
ClipBucket v5 through version 5.5.3-#197 contains a high-severity SQL injection vulnerability. Authenticated users with ad_manager_access permission can exploit this flaw by injecting SQL commands via the delete parameter in the ads_manager.php admin interface. This allows attackers to perform time-based blind SQL injection attacks to extract sensitive data such as user credentials and emails or to modify and delete arbitrary database records.
Mooncake versions up to 0.3.13.post1 have a missing authentication vulnerability in the HTTP metadata server's /metadata handler. This flaw allows unauthenticated attackers to read, overwrite, and delete critical transfer engine metadata keys. Exploitation can lead to poisoning of segment descriptors or redirection of KV cache transfers to attacker-controlled listeners, as well as potential server memory exhaustion.
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size values using READ or WRITE opcodes to disclose KV cache contents, prompts and secrets or corrupt memory toward code execution.
Red Hat Satellite versions from 6.16 up to but not including 6.19.5 contain multiple critical security vulnerabilities affecting various components. These include command injection, unauthenticated information disclosure, server-side template injection, SQL injection, denial of service, cross-site scripting, and authorization bypass. The vulnerabilities enable potential arbitrary code execution, denial of service, information disclosure, and privilege escalation. Red Hat has released security updates in Satellite 6.19.5 for RHEL 9 and related versions to address these issues.
CVE-2026-103761 is a high-severity memory exhaustion vulnerability in the kvcache-ai Mooncake transfer engine version 0.3.13.post1 and earlier. It allows unauthenticated attackers to send large notify frames repeatedly to the handshake RPC port, causing unbounded memory growth and potential process termination by the out-of-memory killer.
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single listener thread in writeFully(), breaking all subsequent handshakes, metadata fetches, notify and probe requests.
CVE-2025-71427 is a path traversal vulnerability in GongRzhe Office-PowerPoint-MCP-Server versions up to 2.0.7. It allows attackers to read and write files outside the intended working directory by using absolute paths or directory traversal sequences. This can be exploited by steering an AI agent via prompt injection to abuse certain functions, potentially overwriting server-writable files or loading external files.
CVE-2026-18397 is a critical vulnerability in Thales SConnect native host component that allows unauthenticated remote code execution. It arises from improper verification of cryptographic signatures combined with memory management issues. The vulnerability exploits an unrestricted messaging interface between attacker-controlled web pages and the native host, enabling malicious input to bypass security checks. This affects versions prior to 2.16.1.0.
A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed. The second worker blocks until nsslapd-ioblocktimeout while holding the connection mutex, preventing delivery of the completed operation's result. Repeating this across a small number of connections proportional to the configured worker-thread pool size exhausts the entire pool under default configuration, denying service to all clients (anonymous and authenticated, plaintext and TLS) for as long as the attacker maintains the connections.
CVE-2026-64893 is a vulnerability in Johnson Controls EasyIO NEO that allows cleartext transmission of sensitive information. This flaw affects versions before 3.3b25 and could enable a man-in-the-middle attack. The vulnerability has a high severity rating with a CVSS score of 7.3. No official patch or remediation details are provided in the available data.
CVE-2026-64892 is a medium severity vulnerability in Johnson Controls Easy IO Neo that allows exposure of sensitive information by collecting data from common resource locations. It affects versions before 3.3b63. The vulnerability requires high privileges and user interaction but has low complexity and no network impact on integrity or availability.
PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code authorization token in src/inc/core.php. Attackers can predict or infer the PRNG state to guess valid delete_code values and perform unauthorized deletion of hosted files without needing to read the code from the info endpoint.
CVE-2026-34494 is a high-severity vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 devices before version 3.3b63. It allows unauthorized collection of data from common resource locations. The vulnerability has a CVSS 4.0 base score of 7.2, indicating a significant security risk. No official patch or remediation details are provided in the available data. The vulnerability requires high attack complexity and user interaction but does not require privileges or authentication.
CVE-2026-34493 is a high-severity vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 devices before version 3.3b63. It allows unauthorized collection of data from common resource locations. The vulnerability has a CVSS 4.0 base score of 7.2, indicating significant impact but requiring high attack complexity and user interaction. A patch is available to address this issue. The product is a cloud service, so the vendor manages remediation server-side.
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.
This issue affects EasyIO FS32: before 3.0b63.