The rmcp OAuth client versions from 2.0.0 up to but not including 3.7.0 have a server-side request forgery (SSRF) vulnerability. The client only inspected host strings to decide if it should fetch authorization server metadata, failing to resolve hostnames to their IP addresses. This allowed malicious servers to cause the client to send requests to internal IP addresses, potentially reaching unauthenticated internal HTTP services. The issue was fixed in version 3.7.0 by adding DNS resolution and address policy checks on all resolved addresses and redirects.
Multiple security vulnerabilities have been identified in BIND (Berkeley Internet Name Domain), an open-source DNS server implementation. These include denial of service (DoS) vulnerabilities caused by unbounded processing of crafted DNS messages, assertion failures during redirect and RPZ query processing, and an arbitrary code execution vulnerability via GSS-TSIG UDP message replay. Red Hat has released security updates addressing these issues in Red Hat Enterprise Linux 10.2 Extended Update Support and related products.
Multiple vulnerabilities have been identified in GitLab, a web application for software version control based on git. These issues affect versions prior to and including 19.5.1. A fix addressing these vulnerabilities is available in version 19.5.1.
Multiple vulnerabilities have been identified in Checkmk, an IT monitoring software. These issues affect versions prior to 2.4.0p38 and the version 2.4.0p38 itself. A fixed version, 2.4.0p38, is available to address these vulnerabilities.
Multiple security vulnerabilities have been identified in the Skia graphics library component used by Chromium-based browsers such as Google Chrome and Microsoft Edge. These include information leaks, use-after-free, cross-origin data disclosure, uninitialized resource usage, integer overflow, out-of-bounds reads, memory corruption, and improper input validation. The vulnerabilities affect the WebKitGTK port on the GTK platform and have been addressed in updated packages for Red Hat Enterprise Linux 8. The Red Hat advisory rates these issues as important and provides patches to remediate them.
Multiple security vulnerabilities affecting Mozilla products including Firefox, Firefox ESR, and Thunderbird have been addressed. Notably, a high-impact cryptographic issue involving compromised intermediate eMudhra certificates was mitigated by updating the OneCRL block list. Other vulnerabilities include an incorrect boundary condition in the SVG component (high impact), uninitialized memory in the Audio/Video cubeb component (moderate impact), and a denial-of-service in the PDF Viewer component (low impact). Fixes are available in Firefox 158.0.1 and Firefox ESR 153.5.1.
Multiple vulnerabilities have been identified in various Atlassian products including Bamboo, Bitbucket, Confluence, Crucible, Fisheye, and Jira. These products serve different roles such as continuous integration, source code version control, wiki software, code review, and software development web applications. The specific affected version noted is 12.1.12. No detailed technical descriptions or CVSS scores are provided, and no known exploits in the wild have been reported. Vendor advisories from Red Hat mention related security updates for Red Hat Developer Hub and OpenShift Virtualization but do not explicitly confirm patches or fixes for the Atlassian vulnerabilities.
The rmcp Streamable HTTP server transport versions 3.0.0 through 3.5.x have an unbounded cache of tool schema results keyed by tool name. This cache grows with each incoming tools/call request, including those rejected with HTTP 400, potentially leading to memory exhaustion. The vulnerability affects servers using protocol version 2026-07-28 or later and lacking authentication in front of the endpoint. The issue was fixed in version 3.6.0 by removing the cache and calling ServerHandler::get_tool on each request. Mitigation includes upgrading to 3.6.0 or implementing authentication or request filtering to block unknown tool names.
Multiple security vulnerabilities have been identified in the python-tornado component used in Red Hat Enterprise Linux (RHEL) High Availability packages. These include a denial of service vulnerability triggered by excessive URL-encoded body fields and an HTTP request smuggling vulnerability via Transfer-Encoding present in Tornado versions before 6.4.1. Red Hat has released security updates for RHEL 8.4 and 8.8 High Availability variants to address these issues.
A vulnerability in IBM App Connect Enterprise allows manipulation of files. The issue affects versions prior to 12.0.12.30 and is fixed in version 12.0.12.30. IBM App Connect Enterprise integrates IBM Integration Bus with cloud-native technologies. No CVSS score or detailed impact description is provided.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided.
Multiple vulnerabilities have been identified in MariaDB, a relational database system compatible with MySQL. These vulnerabilities affect versions prior to 13.0.2. A fixed version, 13.0.2, has been released to address these issues. Red Hat has issued a security advisory with updated RPM packages to mitigate these vulnerabilities in their hardened images. No active exploitation in the wild is currently known.
Multiple vulnerabilities have been identified in DBeaver, a SQL client and database management tool. Specific details about the nature, impact, and affected versions of these vulnerabilities have not been provided.
This advisory concerns multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. The Red Hat advisory specifically addresses a security update for the kernel used in Red Hat Enterprise Linux for ARM 64 (aarch64), including a fix for CVE-2026-99999 related to IPv4 checksum validation. The update is rated as Important and requires a system reboot to take effect. Red Hat emphasizes the critical security role of the kernel and recommends prompt application of updates to maintain system security.
CVE-2026-101307 is a heap-based buffer overflow vulnerability in the FreeBSD RACK TCP stack. The issue arises when the PCM sample array grows by doubling a 16-bit allocation counter, which can wrap to zero after repeated doublings. This leads to an undersized buffer allocation and a subsequent out-of-bounds write in kernel memory. A remote attacker can trigger this by sending many ACKs on an established TCP connection, potentially causing a kernel panic.
Databasus versions 3.7.0 through 3.61.0 have an authentication bypass vulnerability that permits unauthenticated attackers to brute-force six-digit password reset codes without rate limiting or lockout. This flaw allows attackers to take over user accounts, including administrators, by exploiting the POST /api/v1/users/reset-password endpoint.
FlexPrice versions up to 2.1.38 have an authentication bypass vulnerability in the HandleQuickBooksWebhook function. The flaw occurs because signature verification is skipped if the intuit-signature header is missing. This allows unauthenticated attackers who know a tenant and environment ID to replay forged payment notifications, potentially marking invoices as paid or overpaid.
CVE-2026-110661 is a stack out-of-bounds read vulnerability in CGNS up to version 4.5.2. It occurs in the ADFI_read_node_header function when processing crafted ADF node headers, allowing attackers to cause application crashes by supplying malformed .cgns or .adf files with non-NUL-terminated end tags. This leads to the ADFI_stridx_c function scanning beyond allocated memory, crashing tools such as cgnslist.
Rustls versions before 0.23.46 have a vulnerability where an unauthenticated ServerHello message can cause the client to downgrade future TLS connections to classical key exchange only, losing post-quantum confidentiality. This occurs because the client records the server-selected key exchange group before server authentication and uses it for future connections. A network attacker can exploit this by responding with a ServerHello selecting a classical group, causing subsequent connections to omit the post-quantum hybrid key exchange. There is no key compromise or authentication bypass. The issue is fixed in Rustls 0.23.46.