Search: 10.4-5

ArcadeDB versions from 26.2.1 up to but not including 26.10.1 have a missing authorization vulnerability in the Bolt protocol handler. This flaw allows authenticated users with access to any single database to enumerate all database names by issuing a SHOW DATABASES query over the Bolt port. This exposure can reveal unauthorized database names, potentially disclosing tenant or project identifiers. The vulnerability has a medium severity rating and is fixed in version 26.10.1.

ArcadeDB versions from 26.8.1 up to but not including 26.10.1 have an authorization bypass vulnerability. This flaw allows read-only users to modify edge type schema flags related to lightweight and unique settings without having UPDATE_SCHEMA permissions. Attackers can exploit this by sending an ALTER TYPE command via HTTP, gRPC, or Bolt APIs to persistently change edge storage declarations. The vulnerability is fixed in version 26.10.1.

CVE-2026-114038 is a vulnerability in the device-mapper-multipath component of Red Hat Enterprise Linux 10. A local user can trigger an out-of-bounds read by sending a specially crafted command with a format string ending in a trailing percent character to the multipath daemon. This can lead to limited information disclosure or cause the daemon to crash, resulting in a denial of service. The vulnerability does not allow code execution or privilege escalation and affects unprivileged users via accessible query commands. The impact is moderate with a CVSS score of 5.1.

The golang packages provide the Go programming language compiler. Security Fix(es): * net/http: golang: golang: Denial of Service via crafted HTTP Range headers (CVE-2026-78667) * crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references (CVE-2026-97031) * net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) * golang: crypto/x509: Go: crypto/x509: mitigation for security concerns with a specific Certificate Authority (CVE-2026-111943) Bug Fix(es) and Enhancement(s): * Update Go to version 1.26.10+1 [rhel-9.8.z] (JIRA:RHEL-287192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A high-severity vulnerability (CVE-2026-91484) exists in the Java plugin component of Oracle Java SE, specifically affecting OpenJDK 8 versions listed. The vulnerability has a CVSS 3.1 score of 7.5, indicating high impact on confidentiality and integrity with no impact on availability. It requires local attack vector, high attack complexity, and low privileges without user interaction. No public exploits or cloud service implications are reported.

CVE-2026-91464 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.10. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.3, indicating a network attack vector with high complexity, no privileges required, and user interaction needed. The vulnerability allows high confidentiality impact but does not affect integrity or availability.

CVE-2026-91463 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.3, indicating a network attack vector with high complexity and requiring user interaction, resulting in high confidentiality impact but no integrity or availability impact.

CVE-2026-91462 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed for Ubuntu 16.04 through 26.10. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The vulnerability results in integrity impact but no confidentiality or availability impact. No public exploits or known active exploitation have been reported.

CVE-2026-91453 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability has no impact on confidentiality or availability but allows for integrity compromise without requiring user interaction or privileges. It affects multiple Ubuntu-packaged versions of OpenJDK 8. No public exploits or known active exploitation have been reported.

CVE-2026-91452 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It does not allow confidentiality or availability impact but can lead to integrity loss without requiring privileges or user interaction.

CVE-2026-91451 is a medium severity vulnerability in the networking component of Oracle Java SE, specifically affecting OpenJDK 8 versions. It does not impact confidentiality or availability but allows for integrity compromise without requiring privileges or user interaction. The vulnerability is publicly known but has no known exploits in the wild. Multiple specific OpenJDK 8 update versions are affected.

CVE-2026-91415 is a high severity vulnerability affecting multiple specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04, 18.04, 20.04, 22.04, and 24.04 LTS. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 7.0, indicating a high risk with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability to varying degrees.

CVE-2026-91411 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The flaw impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No public exploits or known active exploitation have been reported.

CVE-2026-91409 is a low-severity vulnerability in the networking component of Oracle Java SE, specifically affecting OpenJDK version 27+35-1. The vulnerability does not impact confidentiality, integrity, but may cause a limited availability impact. No known exploits are reported in the wild.

CVE-2026-91396 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. It impacts Oracle Java SE, Oracle GraalVM for JDK, and related products. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw that requires no privileges or user interaction but results in integrity and availability impacts. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.

CVE-2026-91395 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including Oracle Java SE and Oracle GraalVM for JDK. The vulnerability does not impact confidentiality but allows for integrity and availability impacts without requiring privileges or user interaction. It has a CVSS 3.1 base score of 6.5.

CVE-2026-91394 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu distributions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK products. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the available data.

CVE-2026-91385 is a medium severity vulnerability affecting multiple versions of OpenJFX, including versions bundled with Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network exploitable flaw that requires no privileges but user interaction. The impact includes limited confidentiality and integrity loss without availability impact. No public exploits or patches are currently documented.

CVE-2026-91382 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions used in various Ubuntu releases. The flaw impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The vulnerability does not affect confidentiality but impacts integrity and availability.

CVE-2026-91375 is a medium severity vulnerability in Oracle Java SE libraries affecting multiple OpenJDK 8 versions. The vulnerability has an impact on integrity but does not affect confidentiality or availability. It requires local attack vector with high attack complexity and no privileges, and user interaction is required for exploitation.