CVE-2026-125781 is a stored cross-site scripting (XSS) vulnerability in the Event post component of NOUS Ouvert Utile et Simple. It affects versions from initial releases up to 6.1.2. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. A fix is available in version 6.1.3. The CVSS 3.1 base score is 6.5, indicating a medium severity level.
CVE-2026-125444 is a missing authorization vulnerability in King Addons for Elementor that affects versions prior to 51.1.90. This flaw allows unauthorized access due to incorrectly configured access control security levels. The vulnerability has a medium severity score of 5.3 and impacts confidentiality but not integrity or availability. A fix is available in version 51.1.90.
CVE-2026-124271 is a missing authorization vulnerability in the DEV Institute Restrict User Access – Membership Plugin with Force. The flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized access. This affects versions from initial releases up to 2.8.3. The issue is addressed in version 2.8.4.
The Author Image plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'display_name' parameter. This affects all versions up to and including 4.9.3. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.
The Reset Database plugin for WordPress, versions up to and including 1.1.3, contains a privilege escalation vulnerability. The flaw arises from the process_reset() function being triggered without proper capability checks, combined with a nonce that is computed but unused, and a gating condition that allows the reset process if no administrator named 'admin' exists. Additionally, the identity verification checks the attacker's own password rather than an administrator's, enabling authenticated users with subscriber-level access or higher to reset the database, become the sole administrator, and delete the uploads directory.
The 6Storage Rentals WordPress plugin up to version 2.31.0 contains an authentication bypass vulnerability allowing users with Subscriber-level access or higher to authenticate as any existing WordPress user, including administrators. This occurs due to missing capability checks and nonce verification in AJAX handlers that allow attacker-controlled data to influence authentication state, leading to full site compromise. The issue is a partial fix of a prior vulnerability and remains exploitable.
Multiple security vulnerabilities have been identified in the cockpit-files component of Red Hat Enterprise Linux 10. These include arbitrary file ownership and permission modifications via symlink race conditions and privileged paste operations. The issues allow local attackers to hijack file ownership through symlink races. Red Hat has released updates to address these vulnerabilities.
Bay is a newly launched company that provides a control plane for enterprise AI agents to manage and restrict their actions. Founded by ex-IDF Unit 8200 officers, Bay offers a solution that inventories AI agents and evaluates their actions in real-time to prevent unintended or risky behaviors. The system uses AI-driven policies to enforce controls and ensure safe operation of AI agents within organizations.
Multiple security vulnerabilities have been identified in the libxml2 library used in Red Hat Enterprise Linux 10. These include arbitrary code execution via buffer overflows, data integrity issues from integer overflow, heap-based buffer overflow, information disclosure, SSRF, denial of service, and double-free/use-after-free in Python bindings. Red Hat has issued an important security update addressing these issues.
Multiple security vulnerabilities have been identified in the Expat XML parsing library used by Red Hat Enterprise Linux 10. These include denial of service via quadratic complexity in attribute processing, XML injection through malformed UTF-16 input, denial of service via integer overflow in memory reallocation, and information disclosure due to heap buffer over-read. Red Hat has issued an important security advisory with updates addressing these issues in Expat version 2.7.3-2.el10_3.4 for various architectures.
Multiple security vulnerabilities have been identified in OpenSSL, including several denial of service (DoS) issues via excessive memory allocation, QUIC protocol weaknesses, and out-of-bounds writes. Additionally, private key recovery is possible through timing side-channel attacks on elliptic curve operations and SM2 scalar multiplication. These vulnerabilities affect OpenSSL as implemented in Red Hat Enterprise Linux 10. The update also addresses bugs related to FIPS mode and thread initialization.
A security vulnerability in NetworkManager allows bypassing the private_user restriction for 802.1x ca-path and phase2-ca-path, which can lead to WPA-Enterprise server validation bypass. This issue is an incomplete fix for a previous vulnerability (CVE-2025-9615) and affects Red Hat Enterprise Linux 10 and related products. Red Hat has released an update to address this vulnerability.
A vulnerability in Apache XML Graphics FOP allows creation of temporary files with insecure permissions. This affects versions up to and including 2.11. Users should upgrade to version 2.12 to resolve the issue.
A denial of service vulnerability exists in the gcc-toolset-16-gcc package due to a use-after-free flaw in the binary heap erase_if function. This issue affects the GNU Compiler Collection version 16 as provided by Red Hat. The vulnerability is rated as moderate severity by Red Hat Product Security. An update is available for Red Hat Enterprise Linux 10 to address this issue.
CVE-2026-124743 is a vulnerability in BusyBox affecting the volume identification component when processing HFS+ filesystem metadata. Improper validation of header values can lead to a divide-by-zero error, causing an application crash and resulting in a local denial of service (DoS). Exploitation requires local access to attach a specially crafted storage device or filesystem image. The impact is limited to DoS without confidentiality or integrity loss. Red Hat notes that BusyBox is typically used only in rescue or initramfs environments, reducing exposure in standard enterprise workflows. No mitigation or patch currently meets Red Hat's criteria for widespread deployment.
A divide-by-zero vulnerability exists in the BusyBox volume identification component when analyzing specially crafted FAT filesystems. This flaw can cause partition scanning utilities to crash unexpectedly, leading to a denial of service that may disrupt device discovery and system boot operations. The vulnerability requires local access or the ability to present a crafted storage device. It primarily affects recovery environments or minimal container images using BusyBox rather than standard Red Hat Enterprise Linux installations. No effective mitigation or patch is currently available that meets Red Hat's criteria.
A use-after-free vulnerability exists in BusyBox's udhcpc6 DHCPv6 client used in Red Hat Hardened Images. A malicious local network DHCPv6 server can trigger this flaw by sending a crafted reply packet without usable address options, causing the client to read stale heap memory. This can lead to a denial of service due to application crash or disclosure of previously assigned network address data. The vulnerability is rated medium severity with a CVSS score of 4.3. It affects environments where BusyBox udhcpc6 is explicitly used, such as custom containers or minimal recovery images, but not standard Red Hat Enterprise Linux installations which use NetworkManager by default. No official fix or mitigation is currently available that meets Red Hat's criteria for deployment and stability.
CVE-2026-124738 is a vulnerability in BusyBox's HTTP daemon (httpd) when pre-compressed file support is enabled. The flaw causes authentication checks to be performed only against the requested URL path, not the actual pre-compressed file served. This allows a remote attacker to bypass password protections by requesting the uncompressed file path with gzip encoding, potentially exposing sensitive files. The issue mainly affects niche configurations and BusyBox httpd is typically used in recovery or initramfs environments, limiting exposure in default Red Hat installations. Mitigations include configuring directory-level authentication, protecting both uncompressed and compressed filenames, or restricting network access to the service.
A use-after-free vulnerability exists in the librsvg2 library when XML includes contain duplicated entities. This security flaw affects the Scalable Vector Graphics (SVG) library based on libart, used in Red Hat Enterprise Linux 10. The issue is identified as CVE-2026-96889 and has been rated with an Important security impact by Red Hat. A security update is available to address this vulnerability.
Dreeze is a startup that has launched a platform called Application Revival designed to recover entire cloud applications after cyberattacks or operational failures. Unlike traditional backup solutions that focus on data recovery, this platform reconstructs applications including configurations, secrets, infrastructure, and dependencies. The platform continuously scans cloud environments to map resources to applications and generates recovery plans stored in an immutable vault under customer control. It supports automated recovery and isolated recovery testing. The AWS version is generally available, with Microsoft Azure support expected in early 2027. This solution addresses the challenge that restoring data alone does not guarantee application availability after incidents.