CVE-2026-46350 is a critical vulnerability in dcmjs versions prior to 0.52.0 involving improper input validation in the DecimalString and IntegerString implementations. These components sanitize input permissively and convert it to JavaScript numbers without validating finiteness or adherence to DICOM value-representation rules. This can lead to parsing of invalid numeric values such as positive or negative Infinity or NaN, which may propagate into spatial geometry, display windowing, dose scaling, frame counts, rescaling, or volume reconstruction, causing incorrect calculations or disrupted processing. The issue is fixed in dcmjs version 0.52.0.
OpenEMR versions prior to 8.4.0 contain an authorization bypass vulnerability in the document management controller. Low-privilege authenticated users can reassign documents to patients or categories they have access to without proper verification, allowing unauthorized access to sensitive medical records. This flaw is fixed in version 8.4.0.
Red Hat has released a critical security advisory for Red Hat Satellite 6.16 EUS addressing multiple vulnerabilities across various components including Django, urllib3, GitPython, Pillow, puppetserver, and others. The vulnerabilities include remote code execution, arbitrary file read, denial of service, information disclosure, and authorization bypass issues. The advisory provides updates that fix these security flaws. Users of Red Hat Satellite 6.16 EUS are advised to apply the security updates to mitigate these risks.
A critical security vulnerability (CVE-2026-115731) affecting the Red Hat Satellite Client's openvox-agent component allows authenticated remote code execution via report event deserialization. Red Hat has issued a security advisory with updates to fix this flaw across multiple Red Hat Enterprise Linux versions and architectures.
Red Hat Satellite 6.19 includes multiple critical security vulnerabilities affecting the openvox-agent and openvox-server components. These include integer overflows and double free issues in regular expression parsing, authenticated remote code execution via deserialization, certificate name authorization bypass, and denial of service via unbounded memory allocation. Red Hat has released security updates addressing these issues.
CVE-2026-116790 is an authentication bypass vulnerability in FreeSWITCH prior to version 1.11.2. The flaw involves the inbound ICE handling accepting all connectivity checks without verifying the STUN MESSAGE-INTEGRITY attribute cryptographically. This allows an attacker on the network to spoof ICE connectivity checks, nominate their own address, redirect RTP and DTLS traffic, and terminate the legitimate media path. Unencrypted media legs are vulnerable to eavesdropping and media injection. The issue affects all WebRTC and SIP legs that negotiate ICE. The vulnerability is fixed in FreeSWITCH version 1.11.2 by enabling ice_verify_message_integrity=true.
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.3, sofia_presence_handle_sip_i_message() split the To user of an inbound SIP MESSAGE on a plus sign and treated the left side as a chat protocol selector. Selecting the api chat proto reached switch_api_execute(), allowing a peer whose MESSAGE was accepted to run FreeSWITCH API commands, including operating-system command sinks, with the daemon's privileges. Inbound chat is enabled on the stock internal and external profiles, and any authenticated profile account is sufficient; stock directory users without password material can also remove that barrier in affected configurations. The flaw permits configuration and credential disclosure, arbitrary call control, and command execution, and exploitation has been observed in the wild. This issue is fixed in version 1.11.3.
CVE-2026-116785 is a heap-based buffer overflow vulnerability in FreeSWITCH prior to version 1.11.2. The flaw arises from improper handling of a WebSocket frame's extended payload length in the ws_read_frame() function, which leads to memory overwrite beyond the allocated receive buffer. This vulnerability can cause FreeSWITCH to crash, terminating all concurrent sessions. The vulnerable code path is reachable before HTTP authentication on the mod_xml_rpc WebSocket endpoint, which is disabled by default. Remote code execution has not been demonstrated. The issue is fixed in FreeSWITCH version 1.11.2.
CVE-2026-100358 is a critical code injection vulnerability in SuiteCRM prior to versions 7.15.2 and 8.10.2. The Studio Dropdown Editor improperly processes input by passing $dropdown_name through html_entity_decode() and writing it directly into a PHP language file under custom/. This allows an administrator to inject persistent PHP code that executes with the web-server account, compromising the confidentiality, integrity, and availability of the application and host. The vulnerability is fixed in SuiteCRM versions 7.15.2 and 8.10.2.
CVE-2026-71550 is a critical remote file inclusion vulnerability in SuiteCRM prior to versions 7.15.2 and 8.10.2. It arises from the workflow controller using an attacker-controllable parameter in a require_once() call without proper validation, allowing authenticated users with the WorkFlow role to execute arbitrary PHP code on the server. This can lead to full server compromise, unauthorized access to CRM data and configuration secrets, and persistent unauthorized access. The issue is fixed in SuiteCRM versions 7.15.2 and 8.10.2.
LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query-string values or 'content' data to /knowledge/render/<ID> to reach Python builtins and execute operating system commands as the web application account.
Red Hat has released a critical security update for OpenJDK 11.0.33 Extended Lifecycle Support (ELS) portable Linux builds. This update replaces version 11.0.32.1 and includes numerous security fixes addressing multiple vulnerabilities across various components such as TLS, HTTP client/server, Kerberos, image processing, and certificate handling. The update also distrusts certain intermediate CA certificates due to security concerns. The advisory references multiple CVEs fixed in this release, reflecting a broad effort to enhance security and stability.
kaniko versions before 1.25.20 contain a vulnerability in the Azure Container Registry (ACR) credential helper that can cause it to send Microsoft Entra ID (Azure AD) access tokens to attacker-controlled lookalike registry hosts. This occurs when a Dockerfile references images from a hostname containing '.azurecr.io' or similar domains, allowing an attacker to receive live Azure Resource Manager tokens. The vulnerability is fixed in kaniko v1.25.20 by tightening hostname validation in the credential helper.
Multiple critical security vulnerabilities have been identified in the ANGLE component used by the chromium-browser within WebKitGTK, a web rendering engine ported to the GTK platform. These vulnerabilities include arbitrary code execution, information disclosure, use-after-free, buffer overflow, improper input validation, and uninitialized resource issues. Red Hat has issued an update for webkit2gtk3 on Red Hat Enterprise Linux 8.8 to address these issues. The update also fixes a regression affecting Eclipse IDE WebKit-based views on CentOS Stream 8.
CVE-2026-54143 is a critical OS command injection vulnerability in the open-source OpenHuman agent by tinyhumansai. Versions prior to 0.57.13 allow an attacker who can send messages to a configured external channel to create persistent shell cron jobs without user approval. These jobs execute with the privileges of the OpenHuman runtime user. The vulnerability also permits leading environment assignments that can redirect allowed commands to executable helpers already present on the host. This can lead to unauthorized persistent command execution and compromise of data and resources accessible to OpenHuman. The issue is fixed in version 0.57.13.
OpenHuman versions prior to 0.57.13 contain a code injection vulnerability via remote direct messages sent through a configured Yuanbao channel. This flaw allows an external sender to execute JavaScript and operating system commands as the OpenHuman user without an approval prompt under certain policy and configuration conditions. The vulnerability is fixed in version 0.57.13.