Critical severity threats

This security update for warewulf4 addresses two critical vulnerabilities in the google.golang.org/grpc library. The first vulnerability (CVE-2026-84445) involves a denial-of-service (DoS) condition caused by a crash when ':authority' and 'Host' headers are missing in gRPC-Go xDS servers. The second vulnerability (CVE-2026-84303) is an authorization bypass in the xDS RBAC HTTP filter due to case-insensitive header matching issues.

In April 2026, a security incident occurred on Taiwan High Speed Rail's (THSR) TETRA mission-critical radio network when a student maliciously transmitted an unauthorized emergency alarm message. This caused several trains to halt temporarily. The attack exploited fundamental authentication flaws in the TETRA network, including lack of message-level authenticity and integrity guarantees and absence of re-authentication during roaming. The attacker cloned a legitimate radio identity using parameters obtained via software-defined radio captures and insider assistance. The incident demonstrated the feasibility of disrupting critical infrastructure operations through relatively simple radio network attacks.

In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIX_BACKEND_API_KEY for all configured Infrastructures.

This Red Hat security advisory addresses multiple critical vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 9.6 Extended Update Support. The update includes fixes for several security issues such as improper packet handling, out-of-bounds reads, and validation errors in networking and device drivers. The advisory also includes bug fixes and enhancements to improve kernel stability and security. Systems must be rebooted after applying the update to ensure the fixes take effect.

Red Hat AI Base Images 3.0.8 (CUDA) have been identified with multiple security vulnerabilities, including CVE-2025-8869 and others. These vulnerabilities affect components within Red Hat OpenShift AI and Red Hat AI Inference Server. One notable vulnerability (CVE-2025-13327) allows arbitrary code execution via specially crafted ZIP archives during package installation, requiring user interaction. Red Hat has not yet provided fixes for these issues. The advisory rates the overall severity as critical.

A vulnerability exists in OpenSSL's low-level CRYPTO_ocb128_encrypt() and CRYPTO_ocb128_decrypt() functions when called with non-block-aligned lengths on hardware-accelerated builds. This flaw can expose the last 1-15 bytes of a message in cleartext, bypassing authentication protections. However, typical OpenSSL usage via higher-level EVP APIs and TLS protocols are not affected. Red Hat AI Base Images 3.5.6 (CUDA 12.9) include this OpenSSL flaw, but no fix is currently available. The impact is rated low for Red Hat products due to limited exposure and usage scenarios.

In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model references by extracting the third and fourth colon-separated components of any urn:samm:… namespace declared in a parsed Turtle file to build a directory to scan. A model file containing @prefix x: <urn:samm:../../../foo:bar#> or @prefix x: <urn:samm:/abs/path:bar#> causes the loader to glob and parse *.ttl files from arbitrary directories outside the intended models root, merging their contents into the returned graph.

This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.

Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could allow an adversary to gain unauthorized access to the product.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple java-21-openjdk packages. The advisory addresses a critical severity vulnerability identified as CVE-2026-83374 among others. The update provides bug fixes and enhancements to these RPMs. No specific affected versions are detailed in the advisory. The advisory references a vendor update available from Red Hat's image repository.

The Advanced Custom Fields: Extended PRO plugin for WordPress up to version 0.9.2.6 is vulnerable to a limited code injection vulnerability via the render_field function. This flaw arises from insufficient validation of form configuration parameters, allowing unauthenticated attackers to invoke arbitrary WordPress functions with controlled arguments. Exploitation requires either enabling the non-default 'shortcode_preview' setting or a server environment lacking OpenSSL functions, which causes fallback to unverified base64 decoding.

The BuddyPress XProfile Image Field plugin for WordPress up to version 3.1.0 contains a critical vulnerability allowing unauthenticated attackers to delete arbitrary files on the server. This occurs due to improper handling of file paths in the user activation process, enabling deletion of sensitive files like wp-config.php. Exploitation requires open registration and an image-type profile field on the signup form.

A critical remote code execution vulnerability exists in Quest Foglight for Databases via the baseRmiServiceExporter component. This flaw allows unauthenticated remote attackers to execute arbitrary code on affected systems. The vulnerability is tracked as CVE-2026-92190 and has a CVSS rating of 9.8 assigned by the Zero Day Initiative.

A critical remote code execution vulnerability exists in Quest Foglight for Databases due to missing authentication in the ForgeMBeanServerSupport component. This flaw allows remote attackers to execute arbitrary code without requiring authentication.

A critical remote code execution vulnerability exists in Quest Foglight for Databases that allows unauthenticated remote attackers to execute arbitrary code by controlling file paths. This vulnerability is identified as CVE-2026-92189 and has a CVSS rating of 9.8.