Red Hat has issued a security advisory for a high severity use-after-free vulnerability (CVE-2026-19445) affecting python3.15 packages in Red Hat Hardened Images RPMs for aarch64 and x86_64 architectures. The advisory does not provide detailed technical information or explicit patch versions but references updated python3.15 packages. The vulnerability is related to CWE-416. No known exploits are reported in the wild, and no explicit fix version is stated in the advisory.
CVE-2026-106587 is a low-severity vulnerability in OpenSSH before version 10.6 where the configuration option value "none" is sometimes incorrectly interpreted as a filename instead of disabling a feature. This type confusion flaw can lead to unintended behavior in the sshd daemon.
An off-by-one error (CWE-193) in OpenSSH's ssh-keygen before version 10.6 causes certificates to have incorrect expiration times due to mishandling of Daylight Saving Time. This issue can have a slightly more severe effect on users in certain Antarctic locations. The vulnerability has a low CVSS score of 2.5 and does not impact confidentiality or availability, only integrity to a limited extent.
CVE-2026-106586 is a low-severity vulnerability in OpenSSH versions before 10.6 where the 'restrict' keyword in authorized_keys was intended to restrict tunnel forwarding but did not function as expected. This flaw represents an incorrect control flow implementation distinct from CVE-2026-73283.
CVE-2026-106582 is a low-severity vulnerability in OpenSSH versions before 10.6 where the use of an LZ77 dictionary coder creates a covert channel risk. This issue relates to CWE-514, involving unintended information flow. The vulnerability is based on findings from the arXiv paper 2609.07709 "Crossing the Streams". No known exploits are reported in the wild. The vulnerability affects OpenSSH versions from initial releases up to but not including 10.6.
CVE-2026-106555 is a low-severity vulnerability in OpenSSH versions before 10.6 where the GSSAPIAuthentication state can be incorrectly persisted across authentication attempts. This issue relates to incorrect resource transfer between security contexts during authentication. The vulnerability has a CVSS score of 2.2, indicating low impact, primarily affecting confidentiality with limited attack vector and complexity.
CVE-2026-106553 is a low-severity vulnerability in OpenSSH versions before 10.6 where credentials may persist incorrectly after a failed GSSAPIAuthentication attempt. This issue relates to improper resource handling during authentication failures.
CVE-2026-106552 is a medium severity vulnerability in OpenSSH before version 10.6. It involves a relative path traversal issue in the sftp component, which can be triggered by a server during a recursive copy operation, potentially causing files to be written to unintended locations.
CVE-2026-106583 is a low-severity vulnerability in OpenSSH before version 10.6 where the presence of a $ or \ character in a command-line username can lead to resource injection. This improper control of resource identifiers could allow injection attacks via crafted usernames. The vulnerability has a CVSS score of 2.5, indicating low impact, with limited integrity impact and no confidentiality or availability impact.
CVE-2026-80048 is a medium severity vulnerability in the sssd-kcm component of Red Hat Enterprise Linux 10. A local user or process with access to the sssd-kcm UNIX socket can exploit this flaw by sending a large request length header and stalling the connection. This causes the system to preallocate excessive memory, leading to memory exhaustion and a denial of service condition.
CVE-2026-106588 is a medium severity vulnerability in OpenSSH up to version 10.6 where using the macOS 27 (or later) SDK causes loss of sandboxing in sshd. This represents improper isolation or compartmentalization, potentially leading to reduced security boundaries.
CVE-2026-106589 is a least privilege violation vulnerability in OpenSSH through version 10.6. In certain environments such as QNX 6 and SCO OpenServer 5, the sshd-session process can unexpectedly run with root privileges due to issues related to GatewayPorts and StreamLocalForwarding configuration options and lack of support for file-descriptor passing and unprivileged PTY allocation. The vulnerability has a low CVSS score of 2.9 and is rated medium severity. No known exploits are reported in the wild. No patch information is provided.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When SecAuditLogFormat Native is enabled, injected line breaks can create forged lines inside a transaction record. An attacker who controls request or response body, header, error-message, or matched-rule data can inject carriage returns and line feeds that appear as forged audit lines within a transaction record. The forged content can mislead operators and line-oriented SIEM processing, although the unpredictable transaction boundary prevents straightforward impersonation of a separate complete session. This issue is fixed in version 3.8.0.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multipart processor in internal/bodyprocessors/multipart.go treats io.ErrUnexpectedEOF as nonfatal without setting MULTIPART_STRICT_ERROR. A remote attacker can submit a truncated multipart body that produces io.ErrUnexpectedEOF, causing parsing to stop without raising the strict-error signal used by the recommended defensive rule. Rules 200002 and 200003 do not fire, allowing multipart parser-disagreement payloads to reach a backend that interprets the truncated body differently. This issue is fixed in version 3.8.0.
A protection mechanism failure exists in OWASP Coraza WAF versions 3.0.0 through 3.8.0. The WAF silently drops arguments exceeding the SecArgumentsLimit during request processing, causing some arguments to be omitted from inspection. This omission can allow attackers to bypass WAF rules. Additionally, processing of urlencoded and JSON bodies can consume excessive memory, potentially degrading service. The issue is fixed in version 3.8.1.
NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.
NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service.
Stored cross-site scripting (XSS) vulnerabilities in the Ninja Forms and WPC Product Bundles for WooCommerce WordPress plugins are being exploited to install backdoors and create rogue administrator accounts. The attacks deliver malicious JavaScript payloads that execute in the context of authenticated administrators, allowing the installation of a malicious plugin and creation of hidden admin accounts. These backdoors persist even after removal of the malicious plugin. The vulnerabilities require an authenticated session to exploit and affect Ninja Forms versions 3.15.3 and older and WPC Product Bundles for WooCommerce versions 8.6.6 and older. Site administrators are advised to upgrade to Ninja Forms 3.15.4 or later and WPC Product Bundles for WooCommerce 8.6.7 or later. Existing infections require manual cleanup as updates do not remove backdoors.
CVE-2026-106585 is a medium severity vulnerability in OpenSSH versions before 10.6. It involves improper handling of highly compressed data during decompression in sshd and ssh, where no check is performed to ensure the maximum packet length is not exceeded. This can lead to data amplification issues.
CVE-2026-104045 is a vulnerability in the SSSD component of Red Hat Enterprise Linux 10. It involves a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. A local user can exploit this flaw to cause a denial of service by triggering memory leaks through repeated concurrent map enumeration and invalidation requests, potentially disrupting or crashing the autofs service.