CVE-2026-106032 is a server-side request forgery (SSRF) vulnerability in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit versions 0.1.4 through 0.3.13. An authenticated remote actor within the same AWS account could exploit this flaw to cause the environment of a user importing a Bedrock Agent to make arbitrary outbound requests and read arbitrary local files. The vulnerability is fixed in version 0.3.14. The product is deprecated and users are advised to migrate to the supported replacement @aws/agentcore CLI, which does not contain this issue.
Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values incorporated into generated Python source without safe literal encoding.
To remediate this issue, users should upgrade to version 0.3.14. Because this issue persists into generated source, upgrading alone is not sufficient: agents imported with an affected version must be re-imported with version 0.3.14 or later and their local and deployed output artifacts replaced.
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header is nonnegative but allocates a compressed-input buffer of that attacker-controlled size before reading payload data, allowing a header-only stream to request a near-2 GiB allocation and exhaust the JVM heap. Canonical writers emit raw blocks when compression is not smaller than the original block, but vulnerable readers accept non-canonical oversized compressed blocks. This issue is fixed in version 1.11.2.
yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without exclusive creation, allowing another local user with access to the same shared temporary directory to create or replace the library file before System.load() uses it. Successful exploitation depends on shared-directory permissions, host protections, and winning the race, and can execute native code as the victim; hardened systems may instead cause library loading to fail and fall back to Java implementations. Configurations using a system library, a private java.io.tmpdir, or Java-only implementations are not affected. This issue is fixed in version 1.11.4.
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-frame mode allows attacker-controlled streams containing many minimal empty frames to trigger roughly 8 MiB of allocation for every 11 input bytes. The stream produces no decompressed output while consuming CPU and garbage-collection time, so decompressed-size limits do not mitigate the issue; readSingleFrame mode is not affected. This issue is fixed in version 1.11.4.
Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the log and source names are counted, and the event log then stored nothing and reported nothing. A party whose data reaches a log message could suppress the whole record by making it long enough. Only applications on Windows that use EventLogAppender are affected. This issue affects Apache log4net: from 1.2.9 before 3.5.0. Users are recommended to upgrade to version 3.5.0, which fixes the issue.
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before validating the compressed input, allowing a five-byte attacker-supplied input whose header declares a large output size to request up to approximately 2 GiB and exhaust the JVM heap. Convenience overloads backed by LZ4FastDecompressor or LZ4SafeDecompressor allocate the untrusted size, while overloads that write to a caller-provided destination buffer are not affected because the caller controls the destination size. This issue is fixed in version 1.11.2.
CVE-2026-94114 is a vulnerability in Apache Commons BCEL where symbolic names do not map to the correct objects. This occurs because BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing lookups and verification results to reference incorrect classes. The issue affects versions before 6.13.0. Users are advised to upgrade to version 6.13.0 to address this vulnerability.
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively calling refill(), allowing a long sequence of empty blocks in an attacker-controlled compressed stream to exhaust the decoding thread's stack and throw StackOverflowError. The default stopOnEmptyBlock setting is true and is not affected, and the issue does not cause memory corruption. This issue is fixed in version 1.11.4.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports). This issue affects Apache Commons BCEL: before 6.13.0. Users are recommended to upgrade to version 6.13.0, which fixes the issue.
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML script element. When an application precompiles attacker-controlled template text and embeds the generated source directly in an inline script element, a closing script delimiter can end the element and cause following attacker-controlled markup to be parsed and executed. Ordinary server-side rendering and precompiled templates served as external JavaScript files are not affected. This issue is fixed in version 4.7.10.
CVE-2026-106547 is a heap-based buffer overflow vulnerability in the HDF5 library before version 2.2.0. It occurs in the H5VM_array_fill() function when reading unallocated chunks of a dataset with inconsistent metadata, allowing writes beyond the allocated buffer size. This flaw can cause application crashes and potentially arbitrary code execution when processing crafted HDF5 files.
Mozilla's Node-convict version 6.2.2 is affected by a prototype pollution vulnerability in the config.set() function. This flaw allows an attacker who can control configuration keys to overwrite core JavaScript methods such as Object.assign by writing arbitrary properties to constructor.<key>. The vulnerability bypasses existing filters and can cause persistent process-wide failures, resulting in denial of service that requires a restart. Exploitation requires an endpoint that forwards attacker-controlled keys into config.set().
CVE-2026-43598 is a high-severity vulnerability in the AMD ROCm Communication Collectives Library (RCCL) used by AMD Instinct™ MI210. It involves improper input validation that could allow a compromised peer or network-adjacent attacker to dereference an attacker-controlled pointer, potentially leading to remote code execution.
Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambda_hooks/README.md ), available with QnABot on AWS versions 7.0.0 through 7.4.5, might allow an authenticated remote user to read arbitrary Amazon S3 objects in the deploying AWS account. This sample solution provides an example Lambda hook and requires separate, manual deployment and additional setup. It is not deployed automatically with QnABot. Customers who have not deployed this optional sample hook are not affected and do not need to take action.
To remediate this issue, affected customers should update the QnABot on AWS stack to version 7.4.6 or later and then redeploy the Amazon Q Business Lambda hook sample stack. Updating the QnABot on AWS stack alone does not deliver the fix.
CVE-2026-104046 is a vulnerability in the System Security Services Daemon (SSSD) on Red Hat Enterprise Linux 10. When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. This allows a local attacker to repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. The resulting memory exhaustion can degrade or terminate SSSD authentication services, leading to a denial of service (DoS).
CVE-2026-106062 is a heap-based buffer overflow vulnerability in GIMP's DirectDraw Surface (DDS) loader on Red Hat Enterprise Linux 10. The flaw arises from integer overflow in buffer size calculations using 32-bit arithmetic, leading to insufficient buffer allocation. This can cause heap corruption and potentially allow arbitrary code execution within the GIMP process context. The vulnerability has a high severity score of 7.8 CVSS 3.1.
CVE-2026-101258 is a high severity vulnerability in Ghostscript affecting Red Hat Enterprise Linux 8. It allows an attacker to bypass the -dSAFER sandbox and execute arbitrary shell commands by rendering a crafted PostScript or EPS document. This occurs due to memory corruption combined with disabling of internal path access controls at runtime. Exploitation can compromise confidentiality, integrity, and availability of data accessible to the Ghostscript process. Red Hat has released security updates addressing this issue in Ghostscript packages for RHEL 8.
CVE-2026-19029 is a heap-based buffer over-read vulnerability in the HDF5 library (The HDF Group) affecting versions prior to 2.2.0. The flaw exists in the H5Z__filter_scaleoffset() function, where an attacker can craft a malicious HDF5 file that triggers a denial of service via application crash. This occurs because the decoder copies data from a compressed chunk without verifying the chunk size when certain filter parameters are attacker-controlled.
Rockstar Games has suffered multiple confirmed security compromises from 2018 through 2026, involving diverse attack vectors rather than zero-day exploits. These include MFA fatigue attacks, exploitation of hardcoded credentials in collaboration tools, stolen OAuth tokens from third-party SaaS vendors, and reverse-engineered P2P network vulnerabilities leading to remote code execution. The most severe incident in August 2026 involved exfiltration of a playable GTA VI development build and extensive gameplay data due to failures in internal segmentation and data loss prevention. The attacks highlight systemic weaknesses in identity management, token security, and internal network controls.