CVE-2026-65637 is a critical improper input validation vulnerability in Apache Tomcat. It affects versions 11.0.20 through 11.0.24, 10.1.53 through 10.1.57, and 9.0.115 through 9.0.120. The issue arises from an incomplete fix for a previous vulnerability (CVE-2026-32990). Successful exploitation could lead to full confidentiality, integrity, and availability impact. Users are advised to upgrade to fixed versions 11.0.25, 10.1.58, or 9.0.121.
A heap-based buffer overflow vulnerability exists in the AcademySoftwareFoundation openexr project affecting the exrmultiview utility. This occurs when combining two attacker-supplied, individually valid scanline EXR files with a misaligned union dataWindow relative to one view's channel subsampling. The issue leads to a heap out-of-bounds write during normal processing. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are affected. The vulnerability is fixed in versions 3.2.11, 3.3.13, and 3.4.14.
Kiali 2.11.16, for Red Hat OpenShift Service Mesh 3.1, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.
Security Fix(es):
* CVE-2026-45623 openshift-service-mesh/kiali-rhel9: PostCSS: Information disclosure and denial of service via crafted CSS input (OSSM-15106)
* CVE-2026-45623 openshift-service-mesh/kiali-ossmc-rhel9: PostCSS: Information disclosure and denial of service via crafted CSS input (OSSM-15111)
* CVE-2026-54272 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (OSSM-15118)
* CVE-2026-54272 openshift-service-mesh/kiali-rhel9: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (OSSM-15119)
* CVE-2026-69153 openshift-service-mesh/kiali-rhel9: PostCSS: Information disclosure via crafted sourceMappingURL (OSSM-15156)
* CVE-2026-69153 openshift-service-mesh/kiali-ossmc-rhel9: PostCSS: Information disclosure via crafted sourceMappingURL (OSSM-15162)
* CVE-2026-69152 openshift-service-mesh/kiali-ossmc-rhel9: brace-expansion: Denial of Service via unbounded intermediate arrays (OSSM-15171)
* CVE-2026-69152 openshift-service-mesh/kiali-rhel9: brace-expansion: Denial of Service via unbounded intermediate arrays (OSSM-15172)
* CVE-2026-69192 openshift-service-mesh/kiali-ossmc-rhel9: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (OSSM-15182)
* CVE-2026-69192 openshift-service-mesh/kiali-rhel9: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (OSSM-15183)
* CVE-2026-14257 openshift-service-mesh/kiali-rhel9: Brace-expansion: Denial of Service via memory exhaustion in expand() function (OSSM-15193)
* CVE-2026-14257 openshift-service-mesh/kiali-ossmc-rhel9: Brace-expansion: Denial of Service via memory exhaustion in expand() function (OSSM-15223)
* CVE-2026-45149 openshift-service-mesh/kiali-rhel9: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges (OSSM-15261)
* CVE-2026-45149 openshift-service-mesh/kiali-ossmc-rhel9: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges (OSSM-15266)
* CVE-2026-73088 openshift-service-mesh/kiali-ossmc-rhel9: Browserslist: Prototype pollution leading to denial of service (OSSM-15288)
* CVE-2026-73088 openshift-service-mesh/kiali-rhel9: Browserslist: Prototype pollution leading to denial of service (OSSM-15289)
* CVE-2026-73089 openshift-service-mesh/kiali-ossmc-rhel9: Browserslist: Denial of Service via unbounded memory growth from distinct query results (OSSM-15307)
* CVE-2026-73089 openshift-service-mesh/kiali-rhel9: Browserslist: Denial of Service via unbounded memory growth from distinct query results (OSSM-15308)
* CVE-2026-67313 openshift-service-mesh/kiali-ossmc-rhel9: axios: Denial of Service via uncontrolled recursion in formDataToJSON (OSSM-15475)
* CVE-2026-67313 openshift-service-mesh/kiali-rhel9: axios: Denial of Service via uncontrolled recursion in formDataToJSON (OSSM-15477)
* CVE-2026-67320 openshift-service-mesh/kiali-ossmc-rhel9: axios: Information disclosure via Prototype Pollution in Node HTTP adapter (OSSM-15486)
* CVE-2026-67320 openshift-service-mesh/kiali-rhel9: axios: Information disclosure via Prototype Pollution in Node HTTP adapter (OSSM-15487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-78329 is a critical improper input validation vulnerability in the Apache Camel Undertow component. The issue arises because the default headerFilterStrategy used by UndertowEndpoint overwrites the intended UndertowHeaderFilterStrategy, causing undertow-specific header filtering to be bypassed. This allows legacy websocket. Exchange-header prefixed headers to be mapped onto the Exchange without proper filtering, potentially enabling an undertow WebSocket producer to dispatch messages incorrectly. The vulnerability affects Apache Camel versions from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, and from 4.19.0 before 4.22.0. Upgrading to Apache Camel 4.22.0 or the respective LTS patch releases mitigates the issue. For deployments unable to upgrade immediately, explicit configuration of the headerFilterStrategy and manual header stripping are recommended as mitigations.
CVE-2026-78315 is a high-severity SQL Injection vulnerability in Delta DIAEnergie version 1.11.00.002. This flaw allows an attacker with low privileges to execute arbitrary code remotely by exploiting improper neutralization of special elements in SQL commands.
CVE-2026-74584 is a vulnerability in the Linux kernel's RDMA bnxt_re driver where a shared memory page is not zeroed before being exposed to userspace. This allows stale kernel memory data to be leaked to userspace processes with access to /dev/infiniband/uverbsX. The issue arises because the allocated page is not zero-initialized, exposing up to 4092 bytes of kernel memory. The vulnerability affects specific Linux kernel versions prior to fixed releases in the 5.15 series and some 4.11 and 4.13 versions. A patch is available that changes the allocation to use zeroed pages, preventing leakage.
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
A SQL injection vulnerability exists in PostgreSQL's EXTRACT() expression deparse functionality, allowing an object owner to execute arbitrary SQL commands with superuser privileges via a malicious object definition. This affects various tools that consume expression deparse output, including pg_dump and psql commands like \sf. The vulnerability impacts multiple PostgreSQL versions prior to 14.24, 15.19, 16.15, 17.11, and 18.6.
Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer. This might allow a table maintainer to infer limited memory values, via the lossy signal of index split choices. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
CVE-2026-71150 is a high-severity vulnerability in Oracle Hyperion Financial Management version 11.2.25.0.000. It allows a low privileged attacker with network access via HTTP to compromise the system, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 8.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across multiple products.
CVE-2026-71015 is a critical vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data within the affected product. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without availability impact.
A logic issue in Apple iOS and iPadOS could allow an app to leak sensitive user information. This vulnerability affects multiple Apple operating systems and has been addressed with improved checks. The issue is fixed in iOS 18.7.11, iOS 26.6.1, iPadOS 18.7.11, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27.
Mattermost versions 11.7.x up to 11.7.6 and 11.8.x up to 11.8.3 contain a vulnerability in the access control policy unassign endpoint. This endpoint does not properly re-validate that each target channel still belongs to the requesting admin's team, allowing an authenticated team administrator to remove attribute-based access control (ABAC) policy assignments from channels outside their team after those channels have been moved to another team. The vulnerability has a CVSS 3.1 score of 4.2, indicating medium severity.
Consul Community Edition and Consul Enterprise versions 1.2.0 through 2.0.2 contain an uncontrolled resource consumption vulnerability in the Connect CA roots endpoint. This flaw allows a remote caller to cause the agent's Connect CA roots cache to grow without limit, bypassing the operator's cache-disable configuration. The issue is resolved in Consul 2.0.3 and Consul Enterprise versions 1.21.17, 1.22.11, and 2.0.3.