Threat database

Multiple vulnerabilities have been identified in Vim (Vi IMproved), a widely used text editor. These issues affect versions prior to and including 9.2.1308. A fixed version, 9.2.1308, has been released to address these vulnerabilities.

A path traversal vulnerability exists in the yggdrasil-worker-package-manager component of Red Hat Enterprise Linux 10. This flaw allows an attacker to exploit unsanitized repository names in the AddRepo and RemoveRepo functions. The vulnerability has been rated as Moderate severity by Red Hat Product Security. An update addressing this issue is available and should be applied to affected systems.

Multiple vulnerabilities have been identified in Apache Airflow, a platform for programmatic workflow creation, scheduling, and monitoring. These issues affect versions prior to and including 3.4.0. A fix is available in version 3.4.0.

Multiple vulnerabilities in JetBrains CLion, an integrated development environment for C and C++ programming, allow code execution. These issues affect versions prior to and including 2026.2. A fix is available in version 2026.2.

A vulnerability in JetBrains YouTrack allows the display of false information. YouTrack is a web-based platform used for project management, issue and bug tracking, helpdesk, and workflow and task management. The flaw affects versions prior to 2026.2.19422 and is fixed in version 2026.2.19422.

Multiple vulnerabilities have been identified in JetBrains IntelliJ IDEA, a Java integrated development environment (IDE). These issues affect versions prior to and including 2026.3. A fix is available in version 2026.3.

Multiple vulnerabilities have been identified in JetBrains PhpStorm, a PHP integrated development environment (IDE). These issues affect versions prior to and including 2026.3. The vulnerabilities have been addressed in version 2026.3.

A vulnerability in JetBrains PyCharm IDE for Python developers allows code execution. The issue affects versions before and including 2026.3. A fix is available in version 2026.3.

A vulnerability identified as CVE-2026-123974 affects PyTorch, an open-source tensor library for deep learning on GPUs and CPUs. The vulnerability allows for privilege escalation. No specific affected versions or CVSS score are provided, and no known exploits are reported in the wild.

A vulnerability has been identified in Microsoft Entra Device Registration, a component of Microsoft Entra ID (formerly Azure Active Directory), which could allow privilege escalation. Microsoft Entra ID is a cloud-based identity and access management service. No specific affected versions or technical details about the vulnerability or its exploitation are provided.

Multiple vulnerabilities have been identified in the JetBrains Toolbox App, a tool used for managing, updating, and launching JetBrains development environments and tools. These vulnerabilities affect versions prior to and including 3.6.1. A fix for these issues is available in version 3.6.1.

A vulnerability in WP Royal Elementor Addons, a WordPress page builder extension, allows information disclosure. The issue affects versions prior to 1.7.1069 and is fixed in version 1.7.1069.

Multiple vulnerabilities have been identified in SonicWall's SonicOS, the operating system for SonicWall firewall products. Specific details about the nature, impact, or affected versions of these vulnerabilities have not been provided.

A cross-site scripting (XSS) vulnerability has been identified in Webmin, a modular web application used for Unix-based system administration and service configuration. The vulnerability affects Webmin versions up to and including 2.670. No CVSS score or detailed impact information is provided.

Multiple vulnerabilities have been identified in IBM Storage Scale, a solution for managing large unstructured data sets. These issues affect versions prior to and including 6.0.1.1. A fix is available in version 6.0.1.1.

A cross-site scripting (XSS) vulnerability has been identified in IBM Tivoli Netcool/OMNIbus, a software product for operations management by IBM. The vulnerability allows injection of malicious scripts via web interfaces, potentially leading to unauthorized actions in the context of a user's session.

A vulnerability in the Expat XML parser, written in C, allows for a denial of service (DoS) condition. The affected versions are up to and including 2.10.0. No CVSS score or detailed impact information is provided.

A vulnerability in Keycloak, an open-source identity and access management solution, has been published that allows code execution. The vulnerability enables unauthorized execution of code within the affected system.

The PyPI package 'extrahtml' versions 0.1.0, 0.1.1, and 0.1.2 include a malicious dependency that masquerades as a YAML loader but executes remote code from a provided file. This campaign, identified as 2026-11-parseyaml, involves intentionally embedded malicious code that downloads and runs a remote malicious script. The analyzed code was a stub, indicating potential for further malicious payloads.

The parseyaml package on PyPI version 1.2.0 contains malicious code embedded in a dependency that masquerades as a YAML loader. This malicious loader executes remote code by downloading and running a remote malicious script. The campaign associated with this threat is identified as 2026-11-parseyaml and is categorized as malware with clear malicious intent.