A security vulnerability (CVE-2026-116591) affecting the Grafana plugin for Performance Co-Pilot in Red Hat Enterprise Linux 9.8 Extended Update Support has been addressed. The issue involves a denial of service (DoS) caused by crafted zstd compressed input in the klauspost/compress library. Red Hat has issued an important security update to fix this vulnerability in the grafana-pcp package for multiple architectures. The update is available and should be applied to affected systems.
The SCKit worm exploited cloud-hosted ScreenConnect panels to deploy rogue clients and a toolkit across hundreds of endpoints in multiple organizations. It spreads by stealing session cookies to move from infected endpoints to technician workstations and then laterally to other endpoints. The toolkit uses encrypted payloads keyed by system UUIDs to install persistence mechanisms and attempt console takeover. Although endpoint infections were successful, technician workstation compromises failed in observed cases. ConnectWise disabled some third-party extensions as a precaution but has not identified the initial access vector.
Red Hat issued a security advisory for the oci-seccomp-bpf-hook package addressing two denial of service vulnerabilities in Go libraries used by the package. The vulnerabilities include unencrypted HTTP/2 connections susceptible to denial of service (CVE-2026-56853) and a memory limit bypass in multipart form parsing also leading to denial of service (CVE-2026-94440). The update is rated as Important and affects Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. A security update is available to remediate these issues.
A filename validation bypass vulnerability (CVE-2026-115207) in the patch program's reversal fallback allows an attacker to create files outside the intended working directory. This issue affects the patch utility used in Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. The vulnerability has been rated with moderate security impact by Red Hat Product Security. A security update addressing this flaw is available.
A security vulnerability identified as CVE-2026-61642 affects the Squid proxy caching server, specifically involving HTTP request smuggling via the Transfer-Encoding header. Red Hat has issued an important security update for Squid in Red Hat Enterprise Linux 9.8 Extended Update Support to address this issue. The vulnerability is rated with a high severity impact by Red Hat Product Security. The update is available through official Red Hat advisories and packages.
CVE-2026-126957 is an integer underflow vulnerability in Zephyr's IPv4 option handling that allows a remote unauthenticated attacker to read up to 213 bytes of stack memory. The flaw occurs when processing ICMP Echo Requests with IPv4 Record Route or Timestamp options, leading to out-of-bounds reads and information leakage. Devices built with CONFIG_NET_IPV4_HDR_OPTIONS (selected by CONFIG_NET_IPV4_IGMP) and running Zephyr versions up to 4.4.0 are affected. The vulnerability does not cause crashes and can be repeatedly exploited to leak memory contents.
.NET 8.0 on Red Hat Enterprise Linux has multiple security vulnerabilities including denial of service, information disclosure, and elevation of privilege issues affecting ASP.NET Core and .NET runtimes. These vulnerabilities are addressed in an update to SDK version 8.0.134 and runtime version 8.0.34. The update is rated as important by Red Hat Product Security and fixes several CVEs related to denial of service, information disclosure, and privilege escalation.
CVE-2026-126795 is a vulnerability in ToolJet versions 3.20.256-lts and 3.21.93-beta affecting the Onboarding Signup Endpoint. The flaw exists in the activateUserWithPassword function, where manipulation of the email argument can bypass authentication. This vulnerability can be exploited remotely without privileges or user interaction. A public exploit disclosure exists. Upgrading to version 3.21.94-beta resolves the issue.
Red Hat has issued a security advisory for Grafana addressing two vulnerabilities. The first (CVE-2026-88967) involves the Azure Monitor data source potentially leaking its Azure access token. The second (CVE-2026-116591) is a denial of service vulnerability in the klauspost/compress zstd compression library via crafted input. These issues affect Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. Updates are available to remediate these vulnerabilities.
A security vulnerability in the perl-DBI package for Red Hat Enterprise Linux 9.8 Extended Update Support allows loading of arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. This issue is identified as CVE-2026-78030 and has been rated with an Important security impact by Red Hat. The vulnerability affects multiple architectures including x86_64, s390x, ppc64le, and aarch64. Red Hat has released updated packages to address this issue.
Two security vulnerabilities were identified in GNOME Remote Desktop, a remote desktop and screen sharing service for the GNOME desktop environment. The first vulnerability (CVE-2026-96541) involves unauthenticated RDP sockets lacking a handshake deadline. The second vulnerability (CVE-2026-109832) is a busy-wait denial-of-service (DoS) condition in VNC TLS I/O handlers due to GNUTLS error handling. Red Hat has issued an important security update for these issues affecting Red Hat Enterprise Linux 9.8 Extended Update Support and related variants.
.NET 11.0 for Red Hat Enterprise Linux has a low severity elevation of privilege vulnerability identified as CVE-2026-62909. This update includes security fixes, bug fixes, and enhancements for the .NET platform, which supports cross-platform application development. The advisory covers updates to SDK and runtime versions 11.0.100~rc.2.26504.105 and 11.0.0~rc.2.26504.105 respectively. The vulnerability allows elevation of privilege but is rated low impact by Red Hat. Updated packages are available for multiple Red Hat Enterprise Linux 9 architectures.
A heap-based buffer overflow vulnerability exists in the raptor2 RDF Parser Toolkit used in Red Hat Enterprise Linux 9.8 Extended Update Support. This flaw occurs in the handling of language tags and could allow arbitrary code execution. Red Hat has issued a security update to address this issue.
A security update for python-oauthlib addresses a privilege escalation vulnerability caused by client identity confusion in token grant handlers (CVE-2026-118669). This issue affects Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. The vulnerability allows an attacker to escalate privileges by exploiting the confusion in client identity during OAuth token grants. Red Hat has released updated packages to fix this issue.
.NET 11.0 for Red Hat Enterprise Linux contains an elevation of privilege vulnerability in ASP.NET Core identified as CVE-2026-114148. This security issue has been addressed in an update to .NET 11.0 RC 3. The update also includes bug fixes and enhancements. The vulnerability affects multiple .NET versions including 8.0, 9.0, 10.0, and 11.0. Red Hat has released a security advisory with an important severity rating and recommends applying the update to remediate the issue.
Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr.
A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@{[ ... ]}" and "${\ ... }" in the pattern run as code when the dump is evaluated. An already escaped delimiter gets a second backslash, which leaves the delimiter bare and ends the qr literal early.
An attacker who supplies a pattern that an application compiles, dumps and later restores with eval or do can run arbitrary Perl code.
A use-after-free vulnerability exists in the Accessibility component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.
Zipline versions from 4.3.2 up to but not including 4.8.0 have a rate limit bypass vulnerability. This flaw allows unauthenticated attackers to evade throttling mechanisms by spoofing the X-Forwarded-For header when the core.trustProxy setting is enabled. By sending different X-Forwarded-For values per request, attackers can bypass rate limits and perform unlimited guessing attacks against login passwords, TOTP codes, and file or URL passwords.
An information leak vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to obtain cross-origin data by crafting a malicious HTML page. The Chromium project has assigned this issue a high security severity rating.