CVE-2026-124855 is a sandbox escape vulnerability in the DOM Navigation component of Mozilla Firefox. This flaw allows code running in a restricted environment to break out of the sandbox, potentially leading to elevated privileges or unauthorized actions. The issue was fixed in Firefox 160 and Firefox ESR 153.7.
CVE-2026-124854 is a privilege escalation vulnerability in the DOM Navigation component of Mozilla Firefox. It was fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability allows an attacker to escalate privileges within the browser context, potentially leading to unauthorized actions. The issue was assigned a high impact rating by Mozilla.
Sandbox escape due to incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.
A threat actor exploited compromised IAM credentials associated with Qubole's AWS account to access and steal data from over a dozen organizations. The attackers assumed cross-account IAM roles that were still active despite some companies no longer using Qubole, allowing them to enumerate resources, collect secrets, and exfiltrate data from AWS S3 buckets. The campaign occurred between October 14 and October 26, 2026, and involved opportunistic data theft rather than targeted espionage. No evidence was found of deployment of a discovered ISO file designed for remote data harvesting. A separate related campaign tested customer-owned AWS keys for compromise between October 8 and 11, 2026. The attack originated from rented servers and VPNs, not Qubole's network.
CVE-2026-82509 is a critical vulnerability in the V programming language standard library net.http up to version 0.5.2. It involves improper TLS certificate validation due to default configuration settings that disable certificate verification in both mbedtls and OpenSSL backends. This allows on-path attackers to intercept or modify HTTPS traffic by presenting invalid certificates such as expired, self-signed, or wrong-hostname certificates. The vulnerability affects functions like http.get, http.post, and http.fetch unless the validate option is explicitly set to true.
Summary
Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. For every previously unseen flow identifier (quarter stream ID) received in a DATAGRAM frame, tokio-quiche creates and retains new, per-flow state. A remote peer can send DATAGRAMs with many distinct identifiers, causing the per-connection flow map and associated channel state to grow without bound.
Impact
Exploitation can exhaust process memory and cause a denial of service. The vulnerable code is used in both client and server configurations, so either role can be affected by a malicious peer. QUIC DATAGRAM support in tokio-quiche is enabled by default through QuicSettings::enable_dgram; applications can disable it by setting this field to false. The vulnerable HTTP/3 path is reachable only when DATAGRAM support is negotiated with the peer. Core quiche and HTTP/3 deployments without DATAGRAM support are not affected.
Mitigation
Disable DATAGRAMs in tokio-quiche’s QuicSettings::enable_dgram.
Remediation
Upgrade to tokio-quiche version 0.23.0 or later. The fixed code creates flow state only for valid DATAGRAM-capable request streams, which are bounded by QUIC’s stream limits. To tolerate packet reordering, servers retain early DATAGRAMs in a bounded, expiring buffer, while clients discard DATAGRAMs for unknown flows.
The @erlanzz/baileys npm package version 1.0.0 is a malicious fork of the Baileys WhatsApp Web library that covertly uses the installer's authenticated WhatsApp session to subscribe the account to specific WhatsApp Channels without user consent. This behavior inflates the publisher's channel subscribers by sending WhatsApp FOLLOW queries to predefined channel JIDs. The malicious code runs when an application creates a WhatsApp socket with the library and does not send credentials off-host or persist beyond runtime.
Red Hat has issued a security advisory for subscription-manager-cockpit addressing two vulnerabilities in the lodash library: CVE-2026-4800, which allows arbitrary code execution via untrusted input in template imports, and CVE-2026-2950, which permits prototype pollution enabling deletion of built-in prototype properties via an array path bypass. These vulnerabilities affect Red Hat Enterprise Linux 10 across multiple architectures. The update is rated as Important by Red Hat Product Security.
CVE-2026-124747 is a heap-based buffer overflow vulnerability in BusyBox's wget utility when resuming FTP downloads. The flaw occurs because wget does not verify that the resume offset exceeds the file size reported by the FTP server, leading to an integer calculation error. Exploitation requires interaction with a malicious or compromised FTP server or an on-path attacker manipulating file size metadata. Successful exploitation may allow arbitrary code execution or cause application crashes (DoS). In Red Hat Enterprise Linux 6, BusyBox is not a standard core utility and is mainly used in specialized container and boot images, limiting exposure. No official fix or mitigation meeting Red Hat's criteria is currently available.
CVE-2026-125744 is a vulnerability in the pretix ticket layout API where permission checks were missing. This flaw allowed attackers with read-only access to an event to change the event's ticket layout. The issue affects multiple versions prior to 2026.7.4, between 2026.8.0 and 2026.8.2, and between 2026.9.0 and 2026.9.1. The vulnerability has been fixed in versions 2026.7.4, 2026.8.2, and 2026.9.1.
NVIDIA NeMo Export-Deploy versions up to 0.7.0 contain a server-side request forgery (SSRF) vulnerability in their multimodal deployment feature. This flaw could allow an attacker to make unauthorized requests from the server, potentially leading to information disclosure. The vulnerability has a medium severity rating with a CVSS score of 5.3. No official patch or fix has been indicated in the available data.
The sourcecache expansion module in MISP Modules (misp-modules) contains a Server-Side Request Forgery (SSRF) vulnerability. When a user with permission to create or modify attributes of type 'link' or 'url' submits an attribute value, the module passes the URL directly to its internal archiving function without any validation of the target address. An attacker can therefore craft a URL pointing to loopback addresses (e.g., 127.0.0.1), private network ranges, link-local addresses, or cloud metadata endpoints (e.g., 169.254.169.254). The MISP server will issue an HTTP request to that target and store the response body in the event, effectively exfiltrating data from internal services to the attacker through the MISP interface. Non-HTTP schemes such as file:// are also accepted, potentially allowing local file disclosure. The vulnerability requires an authenticated MISP user with the ability to create or edit attributes of the affected types. The security impact is information disclosure from internal services reachable by the MISP server, including sensitive data such as cloud credentials, internal application data, or local files.
This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 10. The update includes fixes for several denial of service vulnerabilities caused by race conditions and unsafe operations in kernel subsystems such as rxrpc, espintcp, TLS, and others. Additional fixes address use-after-free, memory leaks, out-of-bounds access, and race conditions in various kernel components. The advisory also includes numerous bug fixes and enhancements from upstream kernel versions. The update is rated as important by Red Hat Product Security.
Red Hat issued a security advisory for the System Security Services Daemon (SSSD) addressing two vulnerabilities: an out-of-bounds read (CVE-2026-6245) and a use-after-free crash in the sssd_pam process (CVE-2026-12610). These issues could potentially affect authentication and directory service operations. The update also includes multiple bug fixes and enhancements improving performance, compatibility, and stability. The advisory rates the security impact as moderate. Detailed CVSS scores and impact specifics are referenced on the CVE pages. The update is available for Red Hat Enterprise Linux 10 and related products.
CVE-2026-16478 is a vulnerability in the pardus-nvidia-installer software from TÜBİTAK BİLGEM Software Technologies Research Institute. It involves a permissive list of allowed inputs that can lead to privilege escalation. This issue affects versions prior to 2.0.1 and has been assigned a high severity rating with a CVSS score of 7. A fix is available in version 2.0.1.
A vulnerability in SIMATIC WinCC versions 7.5, 8.0, and 8.1 allows affected devices to implicitly execute active content when opening files. This behavior could enable an attacker to execute arbitrary code on the device. The vulnerability has a high severity rating with a CVSS score of 7.8. No specific affected versions or patches are detailed in the available data.