BlueprintUE Self-Hosted Edition versions 1.0.0 through before 4.3.5 contain a resource exhaustion vulnerability. Unauthenticated attackers can repeatedly create anonymous blueprints with a 'never' expiration, bypassing automatic purges. This allows attackers to fill server storage, leading to denial of service. The vulnerability is fixed in version 4.3.5.
ByteStash versions 1.5.10 through before 1.6.2 have a vulnerability where API keys remain valid even after the associated user account is deactivated. This occurs because the validateApiKey function does not verify the account status, allowing continued access to API endpoints for snippet management and MCP tools.
Finite State, a product security firm, raised $27 million in a Series C funding round to expand its international presence and enhance its autonomous device security platform. The platform inspects compiled firmware and binaries to identify known and zero-day vulnerabilities in connected devices, helping manufacturers in sectors like automotive, medical, industrial, consumer electronics, and utilities. It also supports compliance with regulations such as the EU Cyber Resilience Act, FDA premarket cybersecurity requirements, UNECE vehicle regulations, and IEC 62443. The investment is driven by increased discovery of critical vulnerabilities and growing regulatory mandates. AI agents automate analysis, triage, testing, and regulatory reporting within the platform.
Red Hat has released a security update for python3.9 addressing multiple vulnerabilities including arbitrary file deletion via a race condition during temporary directory cleanup, certificate verification bypass due to missing server_hostname validation in SSLContext.wrap_bio(), use-after-free in server-side SSLContext when sni_callback switches contexts, and arbitrary file write via tarfile extraction filter bypass. These issues affect Red Hat Enterprise Linux 9 and related products. The update is rated as having a moderate security impact.
Multiple security vulnerabilities have been identified and fixed in Grafana and related Golang components as part of a Red Hat security advisory. These include privilege escalation, unauthorized access, denial of service, cross-site scripting, code execution via plugin archive extraction, and man-in-the-middle attacks. The advisory covers a range of CVEs affecting Grafana and Golang libraries used within the product. Red Hat Enterprise Linux 9 packages have been updated to address these issues.
Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.
Security Fix(es):
* raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.
Security Fix(es):
* qtbase: qt5-qtbase: qt6-qtbase: qtbase: Denial of Service via uncontrolled recursion in XML serialization (CVE-2026-11573)
* qt5-qtbase: qt6-qtbase: Qt: Denial of Service vulnerability in XML parsing (CVE-2026-19248)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.
Security Fix(es):
* gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED) (CVE-2026-109832)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* freerdp: FreeRDP: Denial of Service via uninitialized progressive tile handling (CVE-2026-109242)
* freerdp: freerdp: Denial of Service via heap-based buffer overflow during MP3 audio decoding (CVE-2026-110837)
* freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication (CVE-2026-111880)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The libsoup packages provide an HTTP client and server library for GNOME.
Security Fix(es):
* SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service (CVE-2026-15709)
* libsoup: SoupWebsocketConnection: libsoup: WebSocket remote denial of service via oversized control frame protocol violation (CVE-2026-15711)
* libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion (CVE-2026-102556)
* libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly (CVE-2026-102557)
* libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth (CVE-2026-102558)
* libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking (CVE-2026-102559)
* libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth (CVE-2026-102560)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management.
Security Fix(es):
* net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667)
* crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031)
* net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.
Security Fix(es):
* dpdk: dpdk: Missing memory size validation before mmap in vhost memory region setup (CVE-2026-86561)
* dpdk: dpdk: Control-queue descriptor double-fetch overflows host heap in DPDK vhost (VDUSE) (CVE-2026-86562)
* dpdk: dpdk: Double offset bug in vhost log mapping calculation (CVE-2026-86563)
* dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write (CVE-2026-86565)
* dpdk: dpdk: Guest with runt RX descriptors underflows copy length in vhost enqueue (split and packed rings) (CVE-2026-86566)
* dpdk: dpdk: VDUSE handler fails to invalidate vring pointers when IOTLB is invalidated, leading to use-after-unmap (CVE-2026-86567)
* dpdk: dpdk: Guest-triggered use-after-free and type confusion in vhost-crypto session cleanup (CVE-2026-86845)
* dpdk: dpdk: Guest can trigger out-of-bounds write by controlling avail ring index in vhost-crypto (CVE-2026-86846)
* dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup (CVE-2026-86847)
* dpdk: dpdk: Time-of-check/time-of-use vulnerability allowing guest-triggered out-of-bounds write in vhost-crypto (CVE-2026-86848)
* dpdk: dpdk: Integer overflow combined with missing validation leads to host buffer overflow in vhost-crypto (CVE-2026-86849)
* dpdk: dpdk: Stack and heap buffer overflow in nfp vDPA driver (CVE-2026-86856)
* dpdk: dpdk: Guest-triggered out-of-bounds walk via vhost indirect descriptor length TOCTOU (CVE-2026-93683)
* dpdk: dpdk: heap out-of-bounds read/write in GSO header copy (CVE-2026-100236)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.
Security Fix(es):
* xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVE-2026-16118)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Uncontrolled Resource Consumption vulnerability in the sketch deserialization of Apache DataSketches Java.
Several deserializers trusted sizes and counts declared in the serialized input. A small crafted input could make an application allocate an excessive amount of memory, leading to an OutOfMemoryError. A crafted string passed to FrequentLongsSketch.getInstance(String) could also make deserialization, or a later update, loop indefinitely. Only applications that deserialize sketches from untrusted sources are affected.
This issue affects Apache DataSketches Java: through 9.0.0.
Users are recommended to upgrade to version 9.1.0, which fixes the issue.
A concurrency flaw in Keycloak's login-failure storage component affects multi-node deployments using MySQL or MariaDB. Simultaneous failed login attempts for the same user can cause a synchronization error that locks the user's database record, blocking legitimate login attempts and causing failures. Additionally, some failed attempts may not be recorded properly, potentially bypassing brute-force protection.
X.Org X11 libXi runtime library
Security Fix(es):
* libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser (CVE-2026-93543)
* libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply (CVE-2026-109090)
* libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow (CVE-2026-109089)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance (CVE-2026-102266)
* pyjwt: PyJWT: Authentication bypass via improper public key validation (CVE-2026-102268)
* pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets (CVE-2026-102271)
* pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects (CVE-2026-102267)
* pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling (CVE-2026-102272)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security update for gvisor-tap-vsock, a Go-based replacement for libslirp and VPNKit. The update addresses multiple denial of service vulnerabilities and a man-in-the-middle vulnerability in various Go libraries used by gvisor-tap-vsock. These include excessive recursion in ASN.1 unmarshalling, unencrypted HTTP/2 connection issues, indefinite TLS KeyUpdate messages, crafted HTTP Range headers, multiple ECH outer extension references, memory limit bypass in multipart form parsing, and untrusted intermediate certificates allowing man-in-the-middle attacks. The update is rated as Important by Red Hat and affects Red Hat Enterprise Linux 9 on multiple architectures.
CVE-2026-125446 is a Cross-Site Request Forgery (CSRF) vulnerability in WisdmLabs Edwiser Bridge affecting versions prior to 4.3.5. This flaw allows an attacker to trick authenticated users into performing unwanted actions on the affected application. The vulnerability is rated high severity with a CVSS score of 8.8. A fix is available in version 4.3.5.
jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.
Security Fix(es):
* jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
* jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.