SecObserve versions prior to 1.59.1 have an information disclosure vulnerability in the ApiConfigurationSerializer component. This flaw causes the basic_auth_password field to be included in API configuration responses without being stripped. As a result, users with view-only access can retrieve decrypted basic-auth passwords of configured scanner or integration service accounts via standard REST endpoints.
A reflected cross-site scripting (XSS) vulnerability exists in the web-based management interface of Cisco Identity Services Engine (ISE). This flaw allows an unauthenticated, remote attacker to execute arbitrary script code in the context of the interface by tricking a user into clicking a crafted link. The vulnerability arises from improper validation of user-supplied input. Exploitation could lead to access to sensitive browser-based information. The vulnerability has a CVSS score of 6.1, indicating medium severity.
GoAdmin go-admin versions up to 1.2.26 contain an authorization bypass vulnerability due to improper anchoring of the logout pattern in permission checks. Authenticated users can append a crafted query parameter to bypass permission checks and access administrative endpoints, potentially reading sensitive data and modifying application state.
Feast through 0.66.0 fails to verify JWT token signatures before establishing user identity, allowing attackers to bypass all role-based access control by presenting an unverified token with a hardcoded claim value. Attackers can obtain trusted internal identity and gain unchecked read and write access to all entities, feature views, data sources, and permission policies on the server.
PatrowlManager versions up to 1.8.4 have an access control vulnerability in the user listing API endpoint. The authorization check is disabled, allowing authenticated low-privilege users to enumerate all users and view their privilege flags, including superuser and staff status. This vulnerability has a medium severity rating with a CVSS score of 5.3.
A vulnerability in the Linux kernel's drm/sysfb component caused an integer overflow in the framebuffer size calculation due to multiplication of two int values without overflow checking. This could lead to undefined behavior. The issue has been fixed by adding overflow detection using check_mul_overflow().
A NULL pointer dereference vulnerability in the Linux kernel's qla2xxx SCSI driver was resolved. The function qla_chk_edif_rx_sa_delete_pending() dereferences a potentially NULL command pointer, which can cause a kernel crash in interrupt context. This occurs because the check for a NULL command pointer happens only after the dereference. The fix involves returning early if the command pointer is NULL to prevent the crash.
CVE-2026-86466 is a high-severity vulnerability in the Apache Airflow FAB provider affecting versions prior to 3.9.0. The issue arises because the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the id_token it accepts. This allows an attacker with a valid token for another application from the same Authentik identity provider to authenticate as any user in Airflow without proper authorization. The vulnerability is fixed in version 3.9.0.
MultiVendorX WordPress plugin versions from 5.0.0 up to but not including 5.0.16 contain a missing authorization vulnerability in one of its REST API routes. This flaw allows any authenticated user, including low-privileged roles such as subscribers, to overwrite store details, payout settings, and ownership records of any store. The vulnerability is identified as CWE-862 (Missing Authorization).
EspoCRM versions through 10.0.8 use PHP's non-cryptographically secure rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs. This weak token generation allows remote unauthenticated attackers to guess tokens, potentially confirming opt-ins, accepting or declining event invitations on behalf of other contacts, and accessing event details. The vulnerability has a medium severity with a CVSS score of 4.8.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)
* kernel: rxrpc: Fix potential UAF after skb_unshare() failure (CVE-2026-45998)
* kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)
* kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CVE-2026-46056)
* kernel: crypto: ccp - copy IV using skcipher ivsize (CVE-2026-53016)
* kernel: ipv6: fix possible UAF in icmpv6_rcv() (CVE-2026-53006)
* kernel: Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CVE-2026-53071)
* kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
* kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode (CVE-2026-63886)
* kernel: crypto: qat - validate RSA CRT component lengths (CVE-2026-64304)
* kernel: packet: use consistent hard_header_len in non-ring send paths ()
Bug Fix(es) and Enhancement(s):
* RT scheduler livelock caused by missing backport of 94894c9c477e (JIRA:RHEL-244407)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 7.6 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L).
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
A vulnerability exists in Oracle Hyperion Financial Management version 11.2.26.0.000 that allows a low privileged attacker with network access via HTTP to potentially take over the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly.
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. While the vulnerability is in Oracle Product Hub, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Depot Repair. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L).
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Coherence accessible data as well as unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).
Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Net Services. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).