CVE-2026-118632 is a high-severity SQL Injection vulnerability in the Philips Hue Bridge Pro device. It allows network-adjacent attackers to execute arbitrary code with root privileges by exploiting improper validation of user input in the device's HTTP service on TCP port 443. Although authentication is required, the authentication mechanism can be bypassed, enabling exploitation. This vulnerability can lead to full compromise of affected devices.
CVE-2026-118631 is an argument injection vulnerability in the Philips Hue Bridge Pro's factory data service. This flaw allows local attackers with low-privileged code execution within a container to modify files by exploiting improper validation of user-supplied input used in system calls. The service listens on TCP port 5001 by default. The vulnerability impacts the integrity of files accessible by the service account but does not affect confidentiality or availability.
CVE-2026-121753 is a use-after-free vulnerability in Ashlar-Vellum Cobalt XE file parsing that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from operations on an object without verifying its existence, leading to potential code execution in the context of the current process. The affected version is 1204.207. The vulnerability has a high severity with a CVSS score of 7.8.
CVE-2026-121752 is a heap-based buffer overflow vulnerability in Ashlar-Vellum Cobalt version 1204.207. It occurs during the parsing of LI files due to improper validation of user-supplied data length before copying to a heap buffer. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, and can lead to remote code execution with high impact on confidentiality, integrity, and availability.
CVE-2026-121744 is a stack-based buffer overflow vulnerability in Ashlar-Vellum Cobalt XE file parsing. It allows remote attackers to execute arbitrary code if a user opens a malicious XE file or visits a malicious page. The flaw arises from improper validation of user-supplied data length before copying to a stack buffer, enabling code execution in the context of the current process. The vulnerability requires user interaction for exploitation.
CVE-2026-121743 is a heap-based buffer overflow vulnerability in Ashlar-Vellum Cobalt version 1204.209. It occurs during the parsing of AR files due to improper validation of user-supplied data length before copying it to a heap buffer. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, and can lead to remote code execution with high impact on confidentiality, integrity, and availability.
CVE-2026-121742 is a use-after-free vulnerability in Ashlar-Vellum Cobalt XE file parsing that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from operations on objects without validating their existence, leading to potential code execution in the context of the current process.
CVE-2026-13269 is a denial-of-service vulnerability in Quest NetVault Backup version 14.0.2.4. It arises from a numeric truncation error in the StnzCreateKey function due to improper validation of user-supplied data. This flaw allows unauthenticated remote attackers to cause a denial-of-service condition by triggering the error before buffer allocation.
CVE-2026-13270 is an integer underflow vulnerability in the Quest NetVault Backup nvpmgr service that listens on UDP port 20031. It allows remote attackers to cause a denial-of-service (DoS) condition without authentication by exploiting improper validation of user-supplied data leading to an integer underflow before buffer allocation.
Multiple security vulnerabilities affecting the curl packages in Red Hat Enterprise Linux 9.8 Extended Update Support have been addressed. These include proxy credential disclosure via redirects to unauthenticated proxies, authentication bypass due to incorrect HTTP Negotiate connection reuse, credential leaks via reused proxy connections during HTTP redirects, and information disclosure via incorrect Proxy-Authorization header reuse. The update fixes these issues to prevent unauthorized access and credential leakage.
CVE-2026-121741 is a use-after-free vulnerability in Trimble SketchUp version 26.1.252 affecting SKP file parsing. It allows remote attackers to execute arbitrary code if a user opens a malicious SKP file or visits a malicious page. The flaw arises from the software not validating the existence of an object before operating on it, leading to memory corruption.
CVE-2025-10935 is a heap-based buffer overflow vulnerability in libilbm version 3.0.4 affecting the parsing of ILBM files. This flaw allows remote attackers to execute arbitrary code by supplying malicious ILBM files, requiring user interaction such as opening a crafted file or visiting a malicious page. The vulnerability arises from improper validation of the length of user-supplied data before copying it to a heap buffer.
A security update for the xorg-x11-server component in Red Hat Enterprise Linux 9.8 addresses a vulnerability (CVE-2026-93520) involving an out-of-bounds write in XKB keycode handling that could lead to arbitrary code execution. This vulnerability is rated as having moderate security impact by Red Hat. The update is available for multiple architectures and variants of Red Hat Enterprise Linux 9.8 Extended Update Support and related products.
A stack buffer overflow vulnerability exists in the PSD image resource header loader of GIMP (GNU Image Manipulation Program). This issue is identified as CVE-2026-119528 and affects Red Hat Enterprise Linux 9.8 Extended Update Support versions. The vulnerability could potentially allow an attacker to cause a denial of service or execute arbitrary code via a crafted PSD image file. Red Hat has released an important security update to address this flaw in GIMP version 3.0.4-4.el9_8.16.
Multiple security vulnerabilities affecting the WebKitGTK port of the WebKit rendering engine on the GTK platform have been addressed in an update for Red Hat Enterprise Linux 9.8 Extended Update Support. The issues include out-of-bounds reads, buffer overflows, use-after-free, uninitialized resource usage, and race conditions in components such as Skia and ANGLE used by chromium-browser. These vulnerabilities have been rated with a high security impact by Red Hat Product Security. The update also fixes a crash issue affecting WebKitWebProcess related to Cisco Secure Client login window. Users of affected Red Hat Enterprise Linux 9.8 Extended Update Support versions should apply the update to mitigate these issues.
A security vulnerability (CVE-2025-12385) exists in the Qt5 QtDeclarative component affecting Red Hat Enterprise Linux 9.8 Extended Update Support. The flaw involves improper validation of the <img> tag size in the Text component parser. Red Hat has released an important security update addressing this issue for multiple architectures and product variants. The vulnerability is rated as having a high severity impact by the source data. No CVSS score is provided in the input data. The update is available and should be applied to affected systems.
A security vulnerability (CVE-2026-116591) affecting the Grafana plugin for Performance Co-Pilot in Red Hat Enterprise Linux 9.8 Extended Update Support has been addressed. The issue involves a denial of service (DoS) caused by crafted zstd compressed input in the klauspost/compress library. Red Hat has issued an important security update to fix this vulnerability in the grafana-pcp package for multiple architectures. The update is available and should be applied to affected systems.
The SCKit worm exploited cloud-hosted ScreenConnect panels to deploy rogue clients and a toolkit across hundreds of endpoints in multiple organizations. It spreads by stealing session cookies to move from infected endpoints to technician workstations and then laterally to other endpoints. The toolkit uses encrypted payloads keyed by system UUIDs to install persistence mechanisms and attempt console takeover. Although endpoint infections were successful, technician workstation compromises failed in observed cases. ConnectWise disabled some third-party extensions as a precaution but has not identified the initial access vector.
Red Hat issued a security advisory for the oci-seccomp-bpf-hook package addressing two denial of service vulnerabilities in Go libraries used by the package. The vulnerabilities include unencrypted HTTP/2 connections susceptible to denial of service (CVE-2026-56853) and a memory limit bypass in multipart form parsing also leading to denial of service (CVE-2026-94440). The update is rated as Important and affects Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. A security update is available to remediate these issues.
A filename validation bypass vulnerability (CVE-2026-115207) in the patch program's reversal fallback allows an attacker to create files outside the intended working directory. This issue affects the patch utility used in Red Hat Enterprise Linux 9.8 Extended Update Support and related variants. The vulnerability has been rated with moderate security impact by Red Hat Product Security. A security update addressing this flaw is available.