Threats Tagged 'cve-2026-81521'

A medium severity heap out-of-bounds read vulnerability (CVE-2026-2303) was found in the GSSAPI error handling of the go.mongodb.org mongo-driver dependency used by Apptainer. The vulnerability is addressed by removing this dependency in a security update for the alloy component. The update also adds support for building the SUID starter on SLES 15. A patch is available for affected versions.

Red Hat issued a security advisory for Red Hat Edge Manager version 1.2.1 addressing multiple vulnerabilities including CVE-2026-6377. Red Hat Edge Manager is a solution for managing edge devices and container workloads, supporting scalable and security-focused lifecycle management. The advisory does not provide specific details on fixes or patches. The vulnerabilities are rated as high severity. No known exploits in the wild are reported. The advisory emphasizes the product's role in managing large-scale edge deployments but does not specify remediation steps or affected versions beyond those listed.

CVE-2026-81521 is a high-severity vulnerability in the MongoDB Go Driver affecting the Client.BulkWrite API. It arises from improper control of resource identifiers, where a caller-supplied database name containing a reserved separator character is not escaped before use. This flaw allows an application passing untrusted input as a database name to have writes directed to unintended databases and collections.