Search: 5.1.8.3

Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields.

This update includes the following RPMs: prometheus3.5: * prometheus3.5-3.5.5-0.9.hum1 (aarch64, x86_64) * prometheus3.5-3.5.5-0.9.hum1.src (src) Security Fix(es): prometheus3.5: * CVE-2026-111943

CVE-2025-71438 is an out-of-bounds read vulnerability in the gpac software, specifically in the function gf_odf_ac4_cfg_dsi_v1 within the /odf/descriptors.c file. This flaw can cause an application crash or denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.5. It affects multiple specific versions of gpac as listed. There is no information about available patches or fixes in the provided data.

CVE-2026-111834 is a critical vulnerability in Mang Board WP by Kitae Park that allows unrestricted upload of files with dangerous types, enabling attackers to upload web shells to the web server. This vulnerability affects all versions prior to 2.4.5. It has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. A fix is available in version 2.4.5.

CVE-2026-111833 is a path traversal vulnerability in Bold Grid weForms affecting versions prior to 1.6.29. This flaw allows an attacker to improperly access files outside a restricted directory, potentially leading to denial of service. The vulnerability has a high severity rating with a CVSS score of 7.5. A fix is available in version 1.6.29.

CVE-2026-111837 is a stored cross-site scripting (XSS) vulnerability in the Contest Gallery product by Wasiliy Strecker. The flaw involves improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. This vulnerability affects versions from initial releases up to 34.0.1. A fix is available in version 34.0.2. The CVSS 3.1 base score is 6.5, indicating a medium severity level.

Two vulnerabilities in PHP versions 8.1, 8.3, and 8.5 allow remote attackers to execute arbitrary code. The first vulnerability (CVE-2026-109618) involves incorrect handling of out-of-memory conditions during request processing. The second (CVE-2026-109619) involves improper management of internal request state across worker reuse. These issues could cause PHP to crash or run malicious programs if exploited. Fixed versions are available for Ubuntu distributions.

CVE-2026-114437 is a medium severity vulnerability in the Go Chi web framework affecting versions before 5.4.0. The ClientIPFromXFF middleware incorrectly trusts the X-Forwarded-For header without verifying that the direct TCP peer address belongs to a configured trusted CIDR. This allows a client connecting directly to the server to spoof the client IP by appending a trusted proxy address, potentially misleading IP-based access controls or logging.

A high-severity vulnerability (CVE-2026-97313) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required, resulting in high impact on availability but no impact on confidentiality or integrity. A security update addressing this vulnerability is available for the affected Bind9 versions.

A high severity vulnerability (CVE-2026-96888) affecting multiple specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network exploitable issue with no required privileges or user interaction, causing a high impact on availability. This security update addresses the flaw in the affected Bind9 versions.

A high severity vulnerability (CVE-2026-19630) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to availability, with no confidentiality or integrity impact reported. Multiple specific Ubuntu package versions of Bind9 are affected.

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5.

SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wpsp_el_editor_form AJAX action. Attackers can reuse the wpsp-el-editor nonce from the Elementor modal to unpublish or reschedule administrator posts, or publish other users' pending or draft posts.

Red Hat OpenShift AI 3.5.2 was released as a security advisory addressing multiple vulnerabilities, including CVE-2024-14029. The advisory announces updated images and provides upgrade instructions but does not detail specific fixes for CVE-2024-14029 or other listed CVEs. No explicit affected versions are stated. The advisory is marked critical in severity but does not confirm known exploitation in the wild.

Multiple vulnerabilities in aiohttp versions from 5.14.0_13 up to but not including 5.14.0_18 can lead to excessive or unbounded memory and CPU usage triggered by attacker-controlled requests. This resource exhaustion can disrupt service availability. A fix is available in version 5.14.0_18.

A vulnerability in ScoutSuite versions >=5.14.0_13 and <5.14.0_18 allows a subdomain to remove the Host-Only flag from an existing cookie set for a parent domain. This could reduce cookie security protections for users accessing untrusted subdomains. The impact is limited because most use cases do not reflect these cookies back to browsers.