{"ok":true,"generatedAt":"2026-09-16T09:36:57.541Z","meta":{"schema":"hlukh.security-warnings.export.v12-minimal","version":"sw-v1244-derived-artifact-refresh-epoch","updatedAt":"2026-09-16T08:02:34.298Z","total":7781,"count":7781,"source":"d1-authoritative-public-download-v1103","sort":"public_display_date-desc,severity-desc,source-asc,id-asc","rawCanonicalCount":7781,"canonicalUniqueCount":7781,"duplicatesRemoved":0,"excludedWithoutDate":0,"excludedWithoutDateIds":[],"publicationPolicy":"exclude-undated-from-json-and-csv","columns":["id","date","title","source_url"],"projection":"minimal-public-download-v1072","totalSource":"meta","quarantinedSourceCount":0,"buildId":"sw-v1244-derived-artifact-refresh-epoch"},"items":[{"id":"IBM:7287720","date":"2026-09-16","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7287720"},{"id":"BSI:WID-SEC-2026-3102","date":"2026-09-16","title":"Flowise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3102"},{"id":"RHSA-2026:66370","date":"2026-09-16","title":"OpenShift Container Platform 4.19.47 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66370"},{"id":"RHSA-2026:67723","date":"2026-09-16","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67723"},{"id":"RHSA-2026:67830","date":"2026-09-16","title":"tesseract security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67830"},{"id":"RHSA-2026:67831","date":"2026-09-16","title":"tesseract security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67831"},{"id":"RHSA-2026:67832","date":"2026-09-16","title":"tesseract security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67832"},{"id":"RHSA-2026:67844","date":"2026-09-16","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67844"},{"id":"RHSA-2026:67848","date":"2026-09-16","title":"postgresql:18 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67848"},{"id":"RHSA-2026:67861","date":"2026-09-16","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67861"},{"id":"IBM:7287721","date":"2026-09-16","title":"Security Bulletin: IBM Sterling Secure Proxy is vulnerable to insecure storage of sensitive information (CVE-2023-29261)","source_url":"https://www.ibm.com/support/pages/node/7287721"},{"id":"RHSA-2026:67843","date":"2026-09-16","title":"firewalld security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67843"},{"id":"GHSA-2H44-8472-FRJJ","date":"2026-09-15","title":"@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery","source_url":"https://github.com/advisories/GHSA-2h44-8472-frjj"},{"id":"GHSA-8H4C-X2WG-6XP8","date":"2026-09-15","title":"Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)","source_url":"https://github.com/advisories/GHSA-8h4c-x2wg-6xp8"},{"id":"GHSA-VMP7-252J-CWP7","date":"2026-09-15","title":"@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport","source_url":"https://github.com/advisories/GHSA-vmp7-252j-cwp7"},{"id":"IBM:7287456","date":"2026-09-15","title":"Security Bulletin: Multiple security vulnerabilities found and remediated in IBM webMethods Managed File Transfer","source_url":"https://www.ibm.com/support/pages/node/7287456"},{"id":"IBM:7287474","date":"2026-09-15","title":"Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty","source_url":"https://www.ibm.com/support/pages/node/7287474"},{"id":"IBM:7287478","date":"2026-09-15","title":"Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7287478"},{"id":"IBM:7287518","date":"2026-09-15","title":"Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287518"},{"id":"NCSC-2026-0370","date":"2026-09-15","title":"NCSC-2026-0370 Kwetsbaarheden verholpen in Apple iOS en iPadOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0370"},{"id":"NCSC-2026-0371","date":"2026-09-15","title":"NCSC-2026-0371 Kwetsbaarheden verholpen in Apple macOS en Samba door Apple en Samba","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0371"},{"id":"BSI:WID-SEC-2025-0283","date":"2026-09-15","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0283"},{"id":"BSI:WID-SEC-2025-1258","date":"2026-09-15","title":"KDE \"Konsole\": Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1258"},{"id":"BSI:WID-SEC-2025-1665","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1665"},{"id":"BSI:WID-SEC-2025-2868","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2868"},{"id":"BSI:WID-SEC-2025-2929","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2929"},{"id":"BSI:WID-SEC-2026-0086","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0086"},{"id":"BSI:WID-SEC-2026-0119","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0119"},{"id":"BSI:WID-SEC-2026-0421","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0421"},{"id":"BSI:WID-SEC-2026-0462","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0462"},{"id":"BSI:WID-SEC-2026-1279","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1279"},{"id":"BSI:WID-SEC-2026-1656","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1656"},{"id":"BSI:WID-SEC-2026-3238","date":"2026-09-15","title":"Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3238"},{"id":"BSI:WID-SEC-2026-3308","date":"2026-09-15","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3308"},{"id":"BSI:WID-SEC-2026-3370","date":"2026-09-15","title":"MISP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3370"},{"id":"GHSA-4595-RVPX-4Q34","date":"2026-09-15","title":"emp3r0r has an unauthenticated HTTP Polling DoS","source_url":"https://github.com/advisories/GHSA-4595-rvpx-4q34"},{"id":"GHSA-5648-RGJ9-V224","date":"2026-09-15","title":"@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS","source_url":"https://github.com/advisories/GHSA-5648-rgj9-v224"},{"id":"GHSA-5HQ8-QHWW-JM7Q","date":"2026-09-15","title":"libp2p-quic: Remote panic via certificate expiry race during QUIC handshake","source_url":"https://github.com/advisories/GHSA-5hq8-qhww-jm7q"},{"id":"GHSA-6M4X-PP6Q-5JMM","date":"2026-09-15","title":"Http4s Ember HTTP/2: unbounded inbound body buffering","source_url":"https://github.com/advisories/GHSA-6m4x-pp6q-5jmm"},{"id":"GHSA-8F3Q-3JMV-7PRW","date":"2026-09-15","title":"Http4s Ember HTTP/2 has an unbounded outbound frame queue","source_url":"https://github.com/advisories/GHSA-8f3q-3jmv-7prw"},{"id":"GHSA-9998-894R-FWVR","date":"2026-09-15","title":"Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)","source_url":"https://github.com/advisories/GHSA-9998-894r-fwvr"},{"id":"GHSA-9VWC-PC8P-253Q","date":"2026-09-15","title":"Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS","source_url":"https://github.com/advisories/GHSA-9vwc-pc8p-253q"},{"id":"GHSA-CP4Q-FQW9-4HF6","date":"2026-09-15","title":"Http4s Ember HTTP/2: unbounded continuation frame accumulation","source_url":"https://github.com/advisories/GHSA-cp4q-fqw9-4hf6"},{"id":"GHSA-FM4G-76C9-7W69","date":"2026-09-15","title":"Http4s: DigestAuth nonce map grows unbounded","source_url":"https://github.com/advisories/GHSA-fm4g-76c9-7w69"},{"id":"GHSA-GQ9P-F254-H286","date":"2026-09-15","title":"Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE","source_url":"https://github.com/advisories/GHSA-gq9p-f254-h286"},{"id":"IBM:7287454","date":"2026-09-15","title":"Security Bulletin: Multiple vulnerabilities in Python affect AIX","source_url":"https://www.ibm.com/support/pages/node/7287454"},{"id":"IBM:7287459","date":"2026-09-15","title":"Security Bulletin:Vulnerablity exposed in opentelemetry- prior to javaagent-2.28.0.jar","source_url":"https://www.ibm.com/support/pages/node/7287459"},{"id":"IBM:7287460","date":"2026-09-15","title":"Security Bulletin: Vulnerability found in parsson-1.0.5.jar - In IBM webMethods APIM","source_url":"https://www.ibm.com/support/pages/node/7287460"},{"id":"IBM:7287475","date":"2026-09-15","title":"Security Bulletin: Multiple Vulnerabilities in watsonx.data","source_url":"https://www.ibm.com/support/pages/node/7287475"},{"id":"IBM:7287494","date":"2026-09-15","title":"Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287494"},{"id":"IBM:7287498","date":"2026-09-15","title":"Security Bulletin: Multiple Security Vulnerabilities in IBM WebSpheere Application Server affect IBM Sterling B2B Integrator and IBM Sterling File Gateway","source_url":"https://www.ibm.com/support/pages/node/7287498"},{"id":"IBM:7287523","date":"2026-09-15","title":"Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem","source_url":"https://www.ibm.com/support/pages/node/7287523"},{"id":"IBM:7287525","date":"2026-09-15","title":"Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem","source_url":"https://www.ibm.com/support/pages/node/7287525"},{"id":"IBM:7287526","date":"2026-09-15","title":"Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem","source_url":"https://www.ibm.com/support/pages/node/7287526"},{"id":"IBM:7287550","date":"2026-09-15","title":"Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow attackers to exploit conditional configuration file processing","source_url":"https://www.ibm.com/support/pages/node/7287550"},{"id":"RHSA-2026:66350","date":"2026-09-15","title":"OpenShift Container Platform 4.21.33 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66350"},{"id":"RHSA-2026:66351","date":"2026-09-15","title":"OpenShift Container Platform 4.21.33 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66351"},{"id":"RHSA-2026:66356","date":"2026-09-15","title":"OpenShift Container Platform 4.22.14 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66356"},{"id":"RHSA-2026:66357","date":"2026-09-15","title":"OpenShift Container Platform 4.22.14 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66357"},{"id":"RHSA-2026:66375","date":"2026-09-15","title":"OpenShift Container Platform 4.20.38 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66375"},{"id":"RHSA-2026:66376","date":"2026-09-15","title":"OpenShift Container Platform 4.20.38 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66376"},{"id":"RHSA-2026:67468","date":"2026-09-15","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67468"},{"id":"RHSA-2026:67469","date":"2026-09-15","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67469"},{"id":"RHSA-2026:67470","date":"2026-09-15","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67470"},{"id":"RHSA-2026:67471","date":"2026-09-15","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67471"},{"id":"RHSA-2026:67491","date":"2026-09-15","title":"postgresql:16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67491"},{"id":"RHSA-2026:67517","date":"2026-09-15","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67517"},{"id":"RHSA-2026:67518","date":"2026-09-15","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67518"},{"id":"RHSA-2026:67530","date":"2026-09-15","title":".NET 10.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67530"},{"id":"RHSA-2026:67603","date":"2026-09-15","title":"Red Hat JBoss Enterprise Application Platform 7.4.25 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67603"},{"id":"RHSA-2026:67604","date":"2026-09-15","title":"Red Hat JBoss Enterprise Application Platform 7.4.25 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67604"},{"id":"RHSA-2026:67608","date":"2026-09-15","title":"leapp-repository security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67608"},{"id":"RHSA-2026:67609","date":"2026-09-15","title":"leapp-repository security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67609"},{"id":"RHSA-2026:67613","date":"2026-09-15","title":".NET 10.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67613"},{"id":"RHSA-2026:67614","date":"2026-09-15","title":".NET 9.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67614"},{"id":"BSI:WID-SEC-2024-2057","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service oder unspezifischer Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2057"},{"id":"BSI:WID-SEC-2025-0105","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0105"},{"id":"BSI:WID-SEC-2025-0931","date":"2026-09-15","title":"Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0931"},{"id":"BSI:WID-SEC-2025-2268","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2268"},{"id":"BSI:WID-SEC-2025-2407","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2407"},{"id":"BSI:WID-SEC-2026-0129","date":"2026-09-15","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0129"},{"id":"BSI:WID-SEC-2026-0985","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0985"},{"id":"BSI:WID-SEC-2026-1088","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1088"},{"id":"BSI:WID-SEC-2026-1326","date":"2026-09-15","title":"Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1326"},{"id":"BSI:WID-SEC-2026-2190","date":"2026-09-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2190"},{"id":"BSI:WID-SEC-2026-2977","date":"2026-09-15","title":"Red Hat Enterprise Linux (NetworkManager): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2977"},{"id":"BSI:WID-SEC-2026-3322","date":"2026-09-15","title":"Red Hat Enterprise Linux (libkcapi): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3322"},{"id":"BSI:WID-SEC-2026-3333","date":"2026-09-15","title":"Red Hat Enterprise Linux (libgit2): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3333"},{"id":"BSI:WID-SEC-2026-3336","date":"2026-09-15","title":"memcached: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3336"},{"id":"ICSA-26-258-01","date":"2026-09-15","title":"Digital Watchdog VMAX DVR and NVR Product Lineups","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01"},{"id":"ICSA-26-258-02","date":"2026-09-15","title":"Wärtsilä FOS-Onboard","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02"},{"id":"ICSA-26-258-03","date":"2026-09-15","title":"mySCADA myPRO Manager","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03"},{"id":"ICSA-26-258-04","date":"2026-09-15","title":"Schneider Electric SCADAPack x70 Products","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-04"},{"id":"ICSA-26-258-05","date":"2026-09-15","title":"Siemens Reyrolle 7SR5","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05"},{"id":"ICSA-26-258-06","date":"2026-09-15","title":"Siemens Mendix SAML","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-06"},{"id":"ICSA-26-258-07","date":"2026-09-15","title":"Siemens Teamcenter","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-07"},{"id":"ICSA-26-258-08","date":"2026-09-15","title":"CareCam CM2507","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08"},{"id":"GHSA-9XWW-74XV-GJFP","date":"2026-09-15","title":"Http4s: DigestAuth allows replay of captured requests","source_url":"https://github.com/advisories/GHSA-9xww-74xv-gjfp"},{"id":"GHSA-CRQ5-92J2-J7WV","date":"2026-09-15","title":"Http4s: ResourceService and Webjar Service path escape via percent-encoded separators","source_url":"https://github.com/advisories/GHSA-crq5-92j2-j7wv"},{"id":"GHSA-GRH8-3P95-F9RR","date":"2026-09-15","title":"Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin","source_url":"https://github.com/advisories/GHSA-grh8-3p95-f9rr"},{"id":"GHSA-JRPM-956J-96JG","date":"2026-09-15","title":"Http4s: Ember chunk parser lenience (TE.TE request smuggling)","source_url":"https://github.com/advisories/GHSA-jrpm-956j-96jg"},{"id":"GHSA-R8CR-4F9W-7R75","date":"2026-09-15","title":"Netmaker has a boolean‑based SQL Injection","source_url":"https://github.com/advisories/GHSA-r8cr-4f9w-7r75"},{"id":"GHSA-WV64-J4FQ-5F9X","date":"2026-09-15","title":"Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain","source_url":"https://github.com/advisories/GHSA-wv64-j4fq-5f9x"},{"id":"IBM:7287451","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287451"},{"id":"IBM:7287452","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a privilege escalation","source_url":"https://www.ibm.com/support/pages/node/7287452"},{"id":"IBM:7287453","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an HTTP request smuggling vulnerability","source_url":"https://www.ibm.com/support/pages/node/7287453"},{"id":"IBM:7287461","date":"2026-09-15","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)","source_url":"https://www.ibm.com/support/pages/node/7287461"},{"id":"IBM:7287462","date":"2026-09-15","title":"Security Bulletin: Vilunarabilities found in reactor-netty-http-1.2.13.jar in APIM","source_url":"https://www.ibm.com/support/pages/node/7287462"},{"id":"IBM:7287463","date":"2026-09-15","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server is affected by a privilege escalation (CVE-2026-11545)","source_url":"https://www.ibm.com/support/pages/node/7287463"},{"id":"IBM:7287464","date":"2026-09-15","title":"Security Bulletin: Vulnerability found in qs-6.15.1.tgz is addressed in APIM 11.1","source_url":"https://www.ibm.com/support/pages/node/7287464"},{"id":"IBM:7287465","date":"2026-09-15","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287465"},{"id":"IBM:7287467","date":"2026-09-15","title":"Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications","source_url":"https://www.ibm.com/support/pages/node/7287467"},{"id":"IBM:7287495","date":"2026-09-15","title":"Security Bulletin: The Manager for YARA and SIGMA App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287495"},{"id":"IBM:7287527","date":"2026-09-15","title":"Security Bulletin: IBM watsonx Code Assistant On Prem product impacted by Vulnerability Found in runtime-7.26.10.tgz","source_url":"https://www.ibm.com/support/pages/node/7287527"},{"id":"IBM:7287530","date":"2026-09-15","title":"Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (Java CPU August 2026)","source_url":"https://www.ibm.com/support/pages/node/7287530"},{"id":"IBM:7287556","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)","source_url":"https://www.ibm.com/support/pages/node/7287556"},{"id":"IBM:7287561","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)","source_url":"https://www.ibm.com/support/pages/node/7287561"},{"id":"IBM:7287565","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a privilege escalation (CVE-2026-11545)","source_url":"https://www.ibm.com/support/pages/node/7287565"},{"id":"IBM:7287571","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.9, which is bundled with IBM Enterprise Application Runtimes, is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287571"},{"id":"IBM:7287572","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by a privilege escalation (CVE-2026-11545)","source_url":"https://www.ibm.com/support/pages/node/7287572"},{"id":"IBM:7287579","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.9, which is bundled with IBM Cloud Pak for Applications, is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287579"},{"id":"IBM:7287588","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31, which is bundled with IBM Cloud Pak for Applications, are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287588"},{"id":"IBM:7287605","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)","source_url":"https://www.ibm.com/support/pages/node/7287605"},{"id":"IBM:7287619","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an XML External Entity Injection vulnerability due to Apache CXF (CVE-2026-65432)","source_url":"https://www.ibm.com/support/pages/node/7287619"},{"id":"IBM:7287622","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an XML External Entity Injection vulnerability due to Apache CXF (CVE-2026-65432)","source_url":"https://www.ibm.com/support/pages/node/7287622"},{"id":"IBM:7287638","date":"2026-09-15","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)","source_url":"https://www.ibm.com/support/pages/node/7287638"},{"id":"NCSC-2026-0369","date":"2026-09-15","title":"NCSC-2026-0369 Kwetsbaarheid verholpen in Palo Alto Networks PAN-OS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0369"},{"id":"RHSA-2026:67524","date":"2026-09-15","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67524"},{"id":"RHSA-2026:67525","date":"2026-09-15","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67525"},{"id":"USN-8730-2","date":"2026-09-15","title":"USN-8730-2: Linux kernel (Azure) vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8730-2"},{"id":"USN-8760-1","date":"2026-09-15","title":"USN-8760-1: Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8760-1"},{"id":"USN-8761-1","date":"2026-09-15","title":"USN-8761-1: Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8761-1"},{"id":"USN-8762-1","date":"2026-09-15","title":"USN-8762-1: polkit vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8762-1"},{"id":"USN-8764-1","date":"2026-09-15","title":"USN-8764-1: SRT vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8764-1"},{"id":"USN-8765-1","date":"2026-09-15","title":"USN-8765-1: python-sql vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8765-1"},{"id":"USN-8766-1","date":"2026-09-15","title":"USN-8766-1: Suricata-Update vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8766-1"},{"id":"USN-8767-1","date":"2026-09-15","title":"USN-8767-1: Snapcast vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8767-1"},{"id":"USN-8768-1","date":"2026-09-15","title":"USN-8768-1: Shibboleth vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8768-1"},{"id":"USN-8769-1","date":"2026-09-15","title":"USN-8769-1: phpseclib vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8769-1"},{"id":"USN-8770-1","date":"2026-09-15","title":"USN-8770-1: SimpleSAMLphp vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8770-1"},{"id":"BSI:WID-SEC-2025-0263","date":"2026-09-15","title":"Golang Go: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0263"},{"id":"BSI:WID-SEC-2026-1755","date":"2026-09-15","title":"OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1755"},{"id":"GHSA-RF68-8GJR-36Q7","date":"2026-09-15","title":"Nezha: OAuth2 redirect_uri Host header injection regression when dashboard_host is empty","source_url":"https://github.com/advisories/GHSA-rf68-8gjr-36q7"},{"id":"BSI:WID-SEC-2026-0610","date":"2026-09-14","title":"Cisco Secure Firewall Management Center: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0610"},{"id":"BSI:WID-SEC-2026-1686","date":"2026-09-14","title":"Samba: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1686"},{"id":"BSI:WID-SEC-2026-3286","date":"2026-09-14","title":"Budibase: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3286"},{"id":"CISCO-SA-ESA-INJ-2BLVGMHX","date":"2026-09-14","title":"Cisco Secure Email Gateway SQL Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX"},{"id":"CISCO-SA-HARDENING-ESA-DFCRFXKM","date":"2026-09-14","title":"Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm"},{"id":"GHSA-RRXG-G2PF-6HH4","date":"2026-09-14","title":"ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade","source_url":"https://github.com/advisories/GHSA-rrxg-g2pf-6hh4"},{"id":"IBM:7284538","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7284538"},{"id":"IBM:7284545","date":"2026-09-14","title":"Security Bulletin: IBM MQ is vulnerable to remote code execution (CVE-2026-11381)","source_url":"https://www.ibm.com/support/pages/node/7284545"},{"id":"IBM:7287302","date":"2026-09-14","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7287302"},{"id":"IBM:7287303","date":"2026-09-14","title":"Security Bulletin: There is a vulnerability in IBM WebSphere Application Server Liberty used by IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7287303"},{"id":"IBM:7287328","date":"2026-09-14","title":"Security Bulletin: IBM Maximo Application Suite uses httpclient5-5.6.3.jar which is vulnerable to CVE-2026-71290","source_url":"https://www.ibm.com/support/pages/node/7287328"},{"id":"IBM:7287382","date":"2026-09-14","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7287382"},{"id":"IBM:7287412","date":"2026-09-14","title":"Security Bulletin: IBM DataPower Gateway affected by multiple vulnerabilities in GLib","source_url":"https://www.ibm.com/support/pages/node/7287412"},{"id":"NCSC-2026-0368","date":"2026-09-14","title":"NCSC-2026-0368 Kwetsbaarheid verholpen in Cisco Secure Email Gateway","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0368"},{"id":"BSI:WID-SEC-2025-1231","date":"2026-09-14","title":"Python: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1231"},{"id":"BSI:WID-SEC-2026-1258","date":"2026-09-14","title":"Apache ActiveMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1258"},{"id":"BSI:WID-SEC-2026-2632","date":"2026-09-14","title":"Angular: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2632"},{"id":"BSI:WID-SEC-2026-3085","date":"2026-09-14","title":"Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3085"},{"id":"BSI:WID-SEC-2026-3200","date":"2026-09-14","title":"Froxlor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3200"},{"id":"BSI:WID-SEC-2026-3222","date":"2026-09-14","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3222"},{"id":"BSI:WID-SEC-2026-3230","date":"2026-09-14","title":"strongSwan: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3230"},{"id":"BSI:WID-SEC-2026-3248","date":"2026-09-14","title":"Xen: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3248"},{"id":"BSI:WID-SEC-2026-3290","date":"2026-09-14","title":"PackageKit: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3290"},{"id":"BSI:WID-SEC-2026-3292","date":"2026-09-14","title":"Red Hat Enterprise Linux (lxml): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3292"},{"id":"BSI:WID-SEC-2026-3305","date":"2026-09-14","title":"Check Point Security Gateway, Spark Firewall und Security Management: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3305"},{"id":"BSI:WID-SEC-2026-3306","date":"2026-09-14","title":"Red Hat Enterprise Linux (postgis, virtuoso-opensource): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3306"},{"id":"BSI:WID-SEC-2026-3321","date":"2026-09-14","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3321"},{"id":"BSI:WID-SEC-2026-3334","date":"2026-09-14","title":"PCRE2 (Perl Compatible Regular Expressions): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3334"},{"id":"GHSA-VRH8-C9CM-WH8V","date":"2026-09-14","title":"ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange","source_url":"https://github.com/advisories/GHSA-vrh8-c9cm-wh8v"},{"id":"IBM:7284724","date":"2026-09-14","title":"Security Bulletin: IBM MQ REST API and Console is vulnerable to multiple security issues","source_url":"https://www.ibm.com/support/pages/node/7284724"},{"id":"IBM:7284750","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11806)","source_url":"https://www.ibm.com/support/pages/node/7284750"},{"id":"IBM:7284886","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11541)","source_url":"https://www.ibm.com/support/pages/node/7284886"},{"id":"IBM:7284887","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty (CVE-2026-9320,CVE-2026-8646)","source_url":"https://www.ibm.com/support/pages/node/7284887"},{"id":"IBM:7284888","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-9071)","source_url":"https://www.ibm.com/support/pages/node/7284888"},{"id":"IBM:7284889","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty (CVE-2026-50645,CVE-2026-9322,CVE-2026-9171)","source_url":"https://www.ibm.com/support/pages/node/7284889"},{"id":"IBM:7284891","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11546)","source_url":"https://www.ibm.com/support/pages/node/7284891"},{"id":"IBM:7284892","date":"2026-09-14","title":"Security Bulletin: IBM MQ is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11714)","source_url":"https://www.ibm.com/support/pages/node/7284892"},{"id":"IBM:7284908","date":"2026-09-14","title":"Security Bulletin: IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection (CVE-2026-12354)","source_url":"https://www.ibm.com/support/pages/node/7284908"},{"id":"IBM:7284911","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to denial of service (CVE-2026-12150)","source_url":"https://www.ibm.com/support/pages/node/7284911"},{"id":"IBM:7284912","date":"2026-09-14","title":"Security Bulletin: IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (CVE-2026-12355)","source_url":"https://www.ibm.com/support/pages/node/7284912"},{"id":"IBM:7284913","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11716)","source_url":"https://www.ibm.com/support/pages/node/7284913"},{"id":"IBM:7284933","date":"2026-09-14","title":"Security Bulletin: IBM MQ client is vulnerable to remote code execution (CVE-2026-11727)","source_url":"https://www.ibm.com/support/pages/node/7284933"},{"id":"IBM:7284936","date":"2026-09-14","title":"Security Bulletin: IBM MQ .NET client is vulnerable to XML external entity injection (CVE-2026-12667)","source_url":"https://www.ibm.com/support/pages/node/7284936"},{"id":"IBM:7284937","date":"2026-09-14","title":"Security Bulletin: IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVE-2026-13287)","source_url":"https://www.ibm.com/support/pages/node/7284937"},{"id":"IBM:7284939","date":"2026-09-14","title":"Security Bulletin: IBM MQ Java messaging is vulnerable to XML external entity injection (CVE-2026-12666)","source_url":"https://www.ibm.com/support/pages/node/7284939"},{"id":"IBM:7284940","date":"2026-09-14","title":"Security Bulletin: IBM MQ Managed File Transfer is vulnerable to XML external entity injection (CVE-2026-13285)","source_url":"https://www.ibm.com/support/pages/node/7284940"},{"id":"IBM:7284941","date":"2026-09-14","title":"Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-11729)","source_url":"https://www.ibm.com/support/pages/node/7284941"},{"id":"IBM:7284942","date":"2026-09-14","title":"Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-12728)","source_url":"https://www.ibm.com/support/pages/node/7284942"},{"id":"IBM:7284943","date":"2026-09-14","title":"Security Bulletin: IBM MQ .NET client is vulnerable to remote code execution (CVE-2026-11728)","source_url":"https://www.ibm.com/support/pages/node/7284943"},{"id":"IBM:7284944","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to privilege escalation (CVE-2026-11725)","source_url":"https://www.ibm.com/support/pages/node/7284944"},{"id":"IBM:7284945","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11378)","source_url":"https://www.ibm.com/support/pages/node/7284945"},{"id":"IBM:7284946","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to information disclosure and denial of service (CVE-2026-11726)","source_url":"https://www.ibm.com/support/pages/node/7284946"},{"id":"IBM:7284948","date":"2026-09-14","title":"Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11375)","source_url":"https://www.ibm.com/support/pages/node/7284948"},{"id":"IBM:7287301","date":"2026-09-14","title":"Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime","source_url":"https://www.ibm.com/support/pages/node/7287301"},{"id":"IBM:7287318","date":"2026-09-14","title":"Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates","source_url":"https://www.ibm.com/support/pages/node/7287318"},{"id":"IBM:7287341","date":"2026-09-14","title":"Security Bulletin: IBM DataPower Gateway affected by authentication bypass due to follow-redirects (CVE-2026-40895)","source_url":"https://www.ibm.com/support/pages/node/7287341"},{"id":"IBM:7287348","date":"2026-09-14","title":"Security Bulletin: IBM DataPower Gateway affected by use after free in Grub (CVE-2025-61662)","source_url":"https://www.ibm.com/support/pages/node/7287348"},{"id":"IBM:7287362","date":"2026-09-14","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7287362"},{"id":"IBM:7287421","date":"2026-09-14","title":"Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub","source_url":"https://www.ibm.com/support/pages/node/7287421"},{"id":"RHSA-2026:62409","date":"2026-09-14","title":"OpenShift Container Platform 4.14.73 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62409"},{"id":"RHSA-2026:67114","date":"2026-09-14","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67114"},{"id":"RHSA-2026:67128","date":"2026-09-14","title":"delve security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67128"},{"id":"RHSA-2026:67129","date":"2026-09-14","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67129"},{"id":"RHSA-2026:67132","date":"2026-09-14","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67132"},{"id":"RHSA-2026:67133","date":"2026-09-14","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67133"},{"id":"RHSA-2026:67134","date":"2026-09-14","title":"yggdrasil security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67134"},{"id":"RHSA-2026:67138","date":"2026-09-14","title":"image-builder security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67138"},{"id":"RHSA-2026:67139","date":"2026-09-14","title":"image-builder security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67139"},{"id":"RHSA-2026:67146","date":"2026-09-14","title":"python-tornado security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67146"},{"id":"RHSA-2026:67149","date":"2026-09-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67149"},{"id":"RHSA-2026:67164","date":"2026-09-14","title":"tomcat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67164"},{"id":"RHSA-2026:67269","date":"2026-09-14","title":"perl-YAML-Syck security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67269"},{"id":"RHSA-2026:67276","date":"2026-09-14","title":"RHEL AI 3.3 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:67276"},{"id":"RHSA-2026:67277","date":"2026-09-14","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67277"},{"id":"RHSA-2026:67280","date":"2026-09-14","title":"postgresql18 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67280"},{"id":"RHSA-2026:67286","date":"2026-09-14","title":"rust security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67286"},{"id":"RHSA-2026:67287","date":"2026-09-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67287"},{"id":"RHSA-2026:67303","date":"2026-09-14","title":"RHEL AI 3.5 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:67303"},{"id":"RHSA-2026:67309","date":"2026-09-14","title":"RHEL AI 3.4 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:67309"},{"id":"RHSA-2026:67313","date":"2026-09-14","title":"delve security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67313"},{"id":"RHSA-2026:67319","date":"2026-09-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67319"},{"id":"RHSA-2026:67324","date":"2026-09-14","title":"python-lxml security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67324"},{"id":"RHSA-2026:67325","date":"2026-09-14","title":"python-lxml security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67325"},{"id":"RHSA-2026:67326","date":"2026-09-14","title":"python-lxml security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67326"},{"id":"RHSA-2026:67461","date":"2026-09-14","title":"redis security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67461"},{"id":"RHSA-2026:67463","date":"2026-09-14","title":"rsync security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67463"},{"id":"RHSA-2026:67464","date":"2026-09-14","title":"rhc-worker-playbook security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67464"},{"id":"RHSA-2026:67465","date":"2026-09-14","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67465"},{"id":"RHSA-2026:67466","date":"2026-09-14","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67466"},{"id":"RHSA-2026:67467","date":"2026-09-14","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67467"},{"id":"BSI:WID-SEC-2026-2443","date":"2026-09-14","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2443"},{"id":"BSI:WID-SEC-2026-2591","date":"2026-09-14","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2591"},{"id":"BSI:WID-SEC-2026-2626","date":"2026-09-14","title":"Red Hat Enterprise Linux (p11-kit): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2626"},{"id":"BSI:WID-SEC-2026-2710","date":"2026-09-14","title":"libarchive: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2710"},{"id":"BSI:WID-SEC-2026-2866","date":"2026-09-14","title":"Red Hat Enterprise Linux (glib2): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2866"},{"id":"BSI:WID-SEC-2026-3083","date":"2026-09-14","title":"vllm: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3083"},{"id":"BSI:WID-SEC-2026-3086","date":"2026-09-14","title":"Flowise: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3086"},{"id":"BSI:WID-SEC-2026-3335","date":"2026-09-14","title":"CPython: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3335"},{"id":"BSI:WID-SEC-2026-3337","date":"2026-09-14","title":"Red Hat Certificate System for RHEL (Dogtag PKI): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3337"},{"id":"BSI:WID-SEC-2026-3338","date":"2026-09-14","title":"libTIFF: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3338"},{"id":"BSI:WID-SEC-2026-3339","date":"2026-09-14","title":"FRRouting Project FRRouting: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3339"},{"id":"BSI:WID-SEC-2026-3341","date":"2026-09-14","title":"Net-SNMP: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3341"},{"id":"BSI:WID-SEC-2026-3342","date":"2026-09-14","title":"Puppet Enterprise: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3342"},{"id":"BSI:WID-SEC-2026-3343","date":"2026-09-14","title":"wpa_supplicant: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3343"},{"id":"BSI:WID-SEC-2026-3344","date":"2026-09-14","title":"WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3344"},{"id":"BSI:WID-SEC-2026-3345","date":"2026-09-14","title":"Microsoft Edge: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3345"},{"id":"BSI:WID-SEC-2026-3346","date":"2026-09-14","title":"Citrix Systems Workspace App Windows: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3346"},{"id":"GHSA-V859-C572-QH5P","date":"2026-09-14","title":"ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions","source_url":"https://github.com/advisories/GHSA-v859-c572-qh5p"},{"id":"IBM:7287314","date":"2026-09-14","title":"Security Bulletin:Vulnerability in httpclient5-5.5.jar may affect IBM Infosphere Change Data Capture (CVE-2026-64607)","source_url":"https://www.ibm.com/support/pages/node/7287314"},{"id":"IBM:7287346","date":"2026-09-14","title":"Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (including Java)","source_url":"https://www.ibm.com/support/pages/node/7287346"},{"id":"IBM:7287408","date":"2026-09-14","title":"Security Bulletin: IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine [CVE-2026-18069]","source_url":"https://www.ibm.com/support/pages/node/7287408"},{"id":"IBM:7287409","date":"2026-09-14","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in PASE [CVE-2026-19086, CVE-2026-19280]","source_url":"https://www.ibm.com/support/pages/node/7287409"},{"id":"RHSA-2026:67110","date":"2026-09-14","title":"Red Hat Certificate System 10.4.4 security and bug fix update for RHEL 8","source_url":"https://access.redhat.com/errata/RHSA-2026:67110"},{"id":"RHSA-2026:67266","date":"2026-09-14","title":"libkcapi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67266"},{"id":"RHSA-2026:67267","date":"2026-09-14","title":"libkcapi security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:67267"},{"id":"RHSA-2026:67278","date":"2026-09-14","title":"perl:5.32 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67278"},{"id":"RHSA-2026:67283","date":"2026-09-14","title":"nginx:1.26 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67283"},{"id":"RHSA-2026:67308","date":"2026-09-14","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67308"},{"id":"RHSA-2026:67315","date":"2026-09-14","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:67315"},{"id":"USN-8563-5","date":"2026-09-14","title":"USN-8563-5: nginx vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8563-5"},{"id":"USN-8739-2","date":"2026-09-14","title":"USN-8739-2: ImageMagick vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8739-2"},{"id":"USN-8749-1","date":"2026-09-14","title":"USN-8749-1: CivetWeb vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8749-1"},{"id":"USN-8750-1","date":"2026-09-14","title":"USN-8750-1: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8750-1"},{"id":"USN-8751-1","date":"2026-09-14","title":"USN-8751-1: Urwid vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8751-1"},{"id":"USN-8752-1","date":"2026-09-14","title":"USN-8752-1: Konsole vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8752-1"},{"id":"USN-8753-1","date":"2026-09-14","title":"USN-8753-1: libinput vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8753-1"},{"id":"USN-8754-1","date":"2026-09-14","title":"USN-8754-1: Freeciv vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8754-1"},{"id":"USN-8755-1","date":"2026-09-14","title":"USN-8755-1: libvips vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8755-1"},{"id":"USN-8756-1","date":"2026-09-14","title":"USN-8756-1: Yelp vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8756-1"},{"id":"USN-8757-1","date":"2026-09-14","title":"USN-8757-1: cgit vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8757-1"},{"id":"USN-8758-1","date":"2026-09-14","title":"USN-8758-1: dracut vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8758-1"},{"id":"BSI:WID-SEC-2026-2114","date":"2026-09-14","title":"7-Zip: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2114"},{"id":"BSI:WID-SEC-2026-3282","date":"2026-09-14","title":"CUPS: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3282"},{"id":"BSI:WID-SEC-2026-3340","date":"2026-09-14","title":"libarchive: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3340"},{"id":"GHSA-2FF2-MX52-Q8WP","date":"2026-09-14","title":"October CMS: PHP Object Injection via Backend Widget Session Storage","source_url":"https://github.com/advisories/GHSA-2ff2-mx52-q8wp"},{"id":"GHSA-2XMM-M4WV-3FJH","date":"2026-09-14","title":"October CMS: Incomplete Scheme Validation in Image Resizer","source_url":"https://github.com/advisories/GHSA-2xmm-m4wv-3fjh"},{"id":"GHSA-XV9M-FM3W-8W5X","date":"2026-09-14","title":"October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls","source_url":"https://github.com/advisories/GHSA-xv9m-fm3w-8w5x"},{"id":"IBM:7287290","date":"2026-09-13","title":"Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to jackson-databind","source_url":"https://www.ibm.com/support/pages/node/7287290"},{"id":"IBM:7287271","date":"2026-09-12","title":"Security Bulletin: IBM ApplinX is vulnerable to issues like Memory allocation, verification and validation issues due to the use of Bouncy Castle for Java (CVE-2026-12185, CVE-2026-12803, CVE-2026-12816, CVE-2026-12860 are some of the example CVEs).","source_url":"https://www.ibm.com/support/pages/node/7287271"},{"id":"IBM:7287274","date":"2026-09-12","title":"Security Bulletin: Multiple vulnerabilities that affects Cirata Symphony for IBM Big Replicate","source_url":"https://www.ibm.com/support/pages/node/7287274"},{"id":"NCSC-2026-0367","date":"2026-09-12","title":"NCSC-2026-0367 Kwetsbaarheid verholpen in GitLab Community en Enterprise Editions","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0367"},{"id":"IBM:7287286","date":"2026-09-12","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in protobuf-5.29.5-cp38-abi3-manylinux2014_x86_64.whl","source_url":"https://www.ibm.com/support/pages/node/7287286"},{"id":"BSI:WID-SEC-2026-2640","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2640"},{"id":"GHSA-2J95-GQXF-V3VG","date":"2026-09-11","title":"Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover","source_url":"https://github.com/advisories/GHSA-2j95-gqxf-v3vg"},{"id":"GHSA-325J-MG25-8Q58","date":"2026-09-11","title":"yayson: Prototype pollution in Store/LegacyStore deserialization","source_url":"https://github.com/advisories/GHSA-325j-mg25-8q58"},{"id":"GHSA-H8M9-JGF8-VWVP","date":"2026-09-11","title":"Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover","source_url":"https://github.com/advisories/GHSA-h8m9-jgf8-vwvp"},{"id":"GHSA-RQFV-2MW9-78G2","date":"2026-09-11","title":"MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)","source_url":"https://github.com/advisories/GHSA-rqfv-2mw9-78g2"},{"id":"IBM:7287170","date":"2026-09-11","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Netty","source_url":"https://www.ibm.com/support/pages/node/7287170"},{"id":"IBM:7287172","date":"2026-09-11","title":"Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring","source_url":"https://www.ibm.com/support/pages/node/7287172"},{"id":"IBM:7287175","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to cryptography ( CVE-2026-39892 )","source_url":"https://www.ibm.com/support/pages/node/7287175"},{"id":"IBM:7287178","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to server-side request forgery due to axios ( CVE-2025-62718 )","source_url":"https://www.ibm.com/support/pages/node/7287178"},{"id":"IBM:7287179","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to prototype pollution due to flatted ( CVE-2026-33228 )","source_url":"https://www.ibm.com/support/pages/node/7287179"},{"id":"IBM:7287209","date":"2026-09-11","title":"Security Bulletin: IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287209"},{"id":"NCSC-2026-0076","date":"2026-09-11","title":"NCSC-2026-0076 Kwetsbaarheden verholpen in Cisco Secure Firewall Management Center","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076"},{"id":"BSI:WID-SEC-2026-1700","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1700"},{"id":"BSI:WID-SEC-2026-1802","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1802"},{"id":"BSI:WID-SEC-2026-1827","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1827"},{"id":"BSI:WID-SEC-2026-1852","date":"2026-09-11","title":"OpenSSL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1852"},{"id":"BSI:WID-SEC-2026-1870","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1870"},{"id":"BSI:WID-SEC-2026-1993","date":"2026-09-11","title":"Android Patchday Juni 2026: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1993"},{"id":"BSI:WID-SEC-2026-2077","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2077"},{"id":"BSI:WID-SEC-2026-2808","date":"2026-09-11","title":"JFrog Artifactory: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2808"},{"id":"BSI:WID-SEC-2026-2852","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2852"},{"id":"BSI:WID-SEC-2026-3133","date":"2026-09-11","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3133"},{"id":"BSI:WID-SEC-2026-3221","date":"2026-09-11","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3221"},{"id":"BSI:WID-SEC-2026-3239","date":"2026-09-11","title":"Langflow OSS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3239"},{"id":"BSI:WID-SEC-2026-3245","date":"2026-09-11","title":"Adobe Photoshop: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3245"},{"id":"BSI:WID-SEC-2026-3249","date":"2026-09-11","title":"Adobe Acrobat und Acrobat Reader: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3249"},{"id":"BSI:WID-SEC-2026-3291","date":"2026-09-11","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3291"},{"id":"BSI:WID-SEC-2026-3295","date":"2026-09-11","title":"Palo Alto Networks PAN-OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3295"},{"id":"GHSA-243P-F3CV-C5WH","date":"2026-09-11","title":"Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers","source_url":"https://github.com/advisories/GHSA-243p-f3cv-c5wh"},{"id":"GHSA-2CG9-97GQ-9MQP","date":"2026-09-11","title":"Shopper: Missing authorization on product removal actions in CollectionProducts component","source_url":"https://github.com/advisories/GHSA-2cg9-97gq-9mqp"},{"id":"GHSA-65H7-9WRW-629C","date":"2026-09-11","title":"FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix","source_url":"https://github.com/advisories/GHSA-65h7-9wrw-629c"},{"id":"GHSA-G3F9-G5VJ-P62F","date":"2026-09-11","title":"Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component","source_url":"https://github.com/advisories/GHSA-g3f9-g5vj-p62f"},{"id":"GHSA-J328-XMGP-J4Q3","date":"2026-09-11","title":"Shopper: privilege escalation via improper Livewire admin component authorization","source_url":"https://github.com/advisories/GHSA-j328-xmgp-j4q3"},{"id":"GHSA-RQX4-3F6Q-3X2V","date":"2026-09-11","title":"@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft","source_url":"https://github.com/advisories/GHSA-rqx4-3f6q-3x2v"},{"id":"GHSA-VJFW-CPMH-XWV3","date":"2026-09-11","title":"Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)","source_url":"https://github.com/advisories/GHSA-vjfw-cpmh-xwv3"},{"id":"IBM:7287112","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service and open redirect due to urllib3 (CVE-2025-50181, CVE-2025-66418, CVE-2025-66471)","source_url":"https://www.ibm.com/support/pages/node/7287112"},{"id":"IBM:7287123","date":"2026-09-11","title":"Security Bulletin: Security Vulnerability identified in neethi-3.2.2.jar used by IBM Maximo Application Suite - MREF ( CVE-2026-66142, CVE-2026-66143, CVE-2026-66144 )","source_url":"https://www.ibm.com/support/pages/node/7287123"},{"id":"IBM:7287136","date":"2026-09-11","title":"Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40972)","source_url":"https://www.ibm.com/support/pages/node/7287136"},{"id":"IBM:7287141","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to path traversal (CVE-2025-14753)","source_url":"https://www.ibm.com/support/pages/node/7287141"},{"id":"IBM:7287142","date":"2026-09-11","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to OS command injection (CVE-2025-14754)","source_url":"https://www.ibm.com/support/pages/node/7287142"},{"id":"IBM:7287148","date":"2026-09-11","title":"Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to a vulnerability in ws","source_url":"https://www.ibm.com/support/pages/node/7287148"},{"id":"IBM:7287150","date":"2026-09-11","title":"Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in browserslist","source_url":"https://www.ibm.com/support/pages/node/7287150"},{"id":"IBM:7287157","date":"2026-09-11","title":"Security Bulletin: IBM webMethods Integration is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287157"},{"id":"IBM:7287158","date":"2026-09-11","title":"Security Bulletin: IBM webMethods Integration is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287158"},{"id":"IBM:7287180","date":"2026-09-11","title":"Security Bulletin: IBM Sterling File Gateway is Vulnerable to Improper Access Control (CVE-2026-19290)","source_url":"https://www.ibm.com/support/pages/node/7287180"},{"id":"IBM:7287189","date":"2026-09-11","title":"Security Bulletin: Security Vulnerability identified in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF ( CVE-2026-43871, CVE-2026-45112, CVE-2026-48586 )","source_url":"https://www.ibm.com/support/pages/node/7287189"},{"id":"IBM:7287211","date":"2026-09-11","title":"Security Bulletin: IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287211"},{"id":"BSI:WID-SEC-2024-1469","date":"2026-09-11","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1469"},{"id":"BSI:WID-SEC-2026-1405","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1405"},{"id":"BSI:WID-SEC-2026-1454","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1454"},{"id":"BSI:WID-SEC-2026-2208","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2208"},{"id":"BSI:WID-SEC-2026-2382","date":"2026-09-11","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2382"},{"id":"BSI:WID-SEC-2026-2403","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2403"},{"id":"BSI:WID-SEC-2026-2680","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2680"},{"id":"BSI:WID-SEC-2026-3229","date":"2026-09-11","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3229"},{"id":"BSI:WID-SEC-2026-3255","date":"2026-09-11","title":"IBM WebSphere Application Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3255"},{"id":"GHSA-5VF4-452P-JJHF","date":"2026-09-11","title":"Shopper: Negative discount values accepted and propagated through order calculation pipeline","source_url":"https://github.com/advisories/GHSA-5vf4-452p-jjhf"},{"id":"GHSA-8WQC-V2Q8-VFF2","date":"2026-09-11","title":"@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)","source_url":"https://github.com/advisories/GHSA-8wqc-v2q8-vff2"},{"id":"GHSA-98Q5-5QH2-7W75","date":"2026-09-11","title":"Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion","source_url":"https://github.com/advisories/GHSA-98q5-5qh2-7w75"},{"id":"GHSA-992Q-9GWP-7R79","date":"2026-09-11","title":"ZITADEL: Auto-linking by email: IdP-side email verification is not checked","source_url":"https://github.com/advisories/GHSA-992q-9gwp-7r79"},{"id":"GHSA-99H5-JHH7-V3R3","date":"2026-09-11","title":"Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)","source_url":"https://github.com/advisories/GHSA-99h5-jhh7-v3r3"},{"id":"GHSA-F7H9-QV4X-9X57","date":"2026-09-11","title":"Shopping privilege escalation through missing authorization in Settings components","source_url":"https://github.com/advisories/GHSA-f7h9-qv4x-9x57"},{"id":"GHSA-V77H-2W3M-94HX","date":"2026-09-11","title":"ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider","source_url":"https://github.com/advisories/GHSA-v77h-2w3m-94hx"},{"id":"IBM:7287147","date":"2026-09-11","title":"Security Bulletin: Multiple vulnerabilities in OpenSSH affect AIX","source_url":"https://www.ibm.com/support/pages/node/7287147"},{"id":"IBM:7287152","date":"2026-09-11","title":"Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager","source_url":"https://www.ibm.com/support/pages/node/7287152"},{"id":"IBM:7287166","date":"2026-09-11","title":"Security Bulletin: IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7287166"},{"id":"IBM:7287186","date":"2026-09-11","title":"Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)","source_url":"https://www.ibm.com/support/pages/node/7287186"},{"id":"IBM:7287188","date":"2026-09-11","title":"Security Bulletin: Denial of Service Security Vulnerability in Spring Framework Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22740)","source_url":"https://www.ibm.com/support/pages/node/7287188"},{"id":"IBM:7287190","date":"2026-09-11","title":"Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control (CVE-2026-19273)","source_url":"https://www.ibm.com/support/pages/node/7287190"},{"id":"NCSC-2026-0366","date":"2026-09-11","title":"NCSC-2026-0366 Kwetsbaarheden verholpen in Arista EOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0366"},{"id":"BSI:WID-SEC-2026-1587","date":"2026-09-11","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1587"},{"id":"IBM:7287134","date":"2026-09-11","title":"Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22741)","source_url":"https://www.ibm.com/support/pages/node/7287134"},{"id":"RHSA-2026:66605","date":"2026-09-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:66605"},{"id":"CERT-EU-SA2026-012","date":"2026-09-10","title":"2026-012 Critical Vulnerabilities in Check Point Products","source_url":"https://cert.europa.eu/publications/security-advisories/2026-012/"},{"id":"GHSA-HF57-CQMX-P4GR","date":"2026-09-10","title":"OmniRoute ACP Custom-Agent Remote Code Execution (RCE)","source_url":"https://github.com/advisories/GHSA-hf57-cqmx-p4gr"},{"id":"GHSA-P569-5GJG-9CMJ","date":"2026-09-10","title":"rclone: RC per-server auth-proxy bypass","source_url":"https://github.com/advisories/GHSA-p569-5gjg-9cmj"},{"id":"GHSA-QQJF-53CJ-PWVV","date":"2026-09-10","title":"Traefik HTTP/3 Backend NTLM Connection Reuse","source_url":"https://github.com/advisories/GHSA-qqjf-53cj-pwvv"},{"id":"GHSA-XWWR-4H3P-R22C","date":"2026-09-10","title":"rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass","source_url":"https://github.com/advisories/GHSA-xwwr-4h3p-r22c"},{"id":"IBM:7284690","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing (CVE-2026-10747)","source_url":"https://www.ibm.com/support/pages/node/7284690"},{"id":"IBM:7284706","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by a heap buffer overflow vulnerability (CVE-2026-11381)","source_url":"https://www.ibm.com/support/pages/node/7284706"},{"id":"IBM:7284714","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by a heap buffer underflow vulnerability (CVE-2026-10858)","source_url":"https://www.ibm.com/support/pages/node/7284714"},{"id":"IBM:7286939","date":"2026-09-10","title":"Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.19 shipped with IBM Business Automation Workflow containers August 2026","source_url":"https://www.ibm.com/support/pages/node/7286939"},{"id":"IBM:7286940","date":"2026-09-10","title":"Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.19.0 shipped with IBM Cloud Pak for Business Automation iFixes for August 2026","source_url":"https://www.ibm.com/support/pages/node/7286940"},{"id":"IBM:7286941","date":"2026-09-10","title":"Security Bulletin: SQL injection vulnerability in IBM Cloud Pak for Business Automation Operational Decision Manager component - CVE-2026-18658","source_url":"https://www.ibm.com/support/pages/node/7286941"},{"id":"IBM:7286946","date":"2026-09-10","title":"Security Bulletin: Multiple vulnerabilities affects IBM Db2 Big SQL on IBM Software Hub","source_url":"https://www.ibm.com/support/pages/node/7286946"},{"id":"IBM:7286973","date":"2026-09-10","title":"Security Bulletin: IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime","source_url":"https://www.ibm.com/support/pages/node/7286973"},{"id":"IBM:7286976","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in fabric-sdk-java (CVE-2026-41586)","source_url":"https://www.ibm.com/support/pages/node/7286976"},{"id":"IBM:7286986","date":"2026-09-10","title":"Security Bulletin: The Hub App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7286986"},{"id":"NCSC-2026-0365","date":"2026-09-10","title":"NCSC-2026-0365 Kwetsbaarheden verholpen in Check Point VPN producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365"},{"id":"BSI:WID-SEC-2026-0085","date":"2026-09-10","title":"Fortinet FortiOS: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0085"},{"id":"BSI:WID-SEC-2026-2383","date":"2026-09-10","title":"NGINX NGINX Plus: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2383"},{"id":"BSI:WID-SEC-2026-2384","date":"2026-09-10","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2384"},{"id":"BSI:WID-SEC-2026-2419","date":"2026-09-10","title":"Red Hat Enterprise Linux (sssd, glib, c-ares): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2419"},{"id":"BSI:WID-SEC-2026-2458","date":"2026-09-10","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2458"},{"id":"BSI:WID-SEC-2026-2484","date":"2026-09-10","title":"Internet Systems Consortium BIND: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2484"},{"id":"BSI:WID-SEC-2026-2491","date":"2026-09-10","title":"ffmpeg: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2491"},{"id":"BSI:WID-SEC-2026-3075","date":"2026-09-10","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3075"},{"id":"BSI:WID-SEC-2026-3076","date":"2026-09-10","title":"Dovecot: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3076"},{"id":"BSI:WID-SEC-2026-3169","date":"2026-09-10","title":"VMware Fusion und Workstation: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3169"},{"id":"BSI:WID-SEC-2026-3184","date":"2026-09-10","title":"Dell Secure Connect Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3184"},{"id":"BSI:WID-SEC-2026-3215","date":"2026-09-10","title":"Red Hat Directory Server und Enterprise Linux (389-ds-base): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3215"},{"id":"BSI:WID-SEC-2026-3242","date":"2026-09-10","title":"Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3242"},{"id":"BSI:WID-SEC-2026-3254","date":"2026-09-10","title":"Lenovo BIOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3254"},{"id":"BSI:WID-SEC-2026-3256","date":"2026-09-10","title":"ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3256"},{"id":"BSI:WID-SEC-2026-3257","date":"2026-09-10","title":"Fortinet FortiSandbox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3257"},{"id":"BSI:WID-SEC-2026-3266","date":"2026-09-10","title":"Apache Camel K: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3266"},{"id":"BSI:WID-SEC-2026-3277","date":"2026-09-10","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3277"},{"id":"GHSA-23RH-XW42-FQ82","date":"2026-09-10","title":"Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration","source_url":"https://github.com/advisories/GHSA-23rh-xw42-fq82"},{"id":"GHSA-2724-6CPJ-GF3V","date":"2026-09-10","title":"Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion","source_url":"https://github.com/advisories/GHSA-2724-6cpj-gf3v"},{"id":"GHSA-2P48-J3QC-RX9F","date":"2026-09-10","title":"rclone: S3 multipart declared-length memory exhaustion","source_url":"https://github.com/advisories/GHSA-2p48-j3qc-rx9f"},{"id":"GHSA-34FF-336R-5Q23","date":"2026-09-10","title":"n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node","source_url":"https://github.com/advisories/GHSA-34ff-336r-5q23"},{"id":"GHSA-34R3-9M95-VQ73","date":"2026-09-10","title":"Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch","source_url":"https://github.com/advisories/GHSA-34r3-9m95-vq73"},{"id":"GHSA-3G9Q-V48F-HH9W","date":"2026-09-10","title":"Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout","source_url":"https://github.com/advisories/GHSA-3g9q-v48f-hh9w"},{"id":"GHSA-4QPV-39HG-F7FX","date":"2026-09-10","title":"@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission","source_url":"https://github.com/advisories/GHSA-4qpv-39hg-f7fx"},{"id":"GHSA-4V28-J6Q3-5M4R","date":"2026-09-10","title":"Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader","source_url":"https://github.com/advisories/GHSA-4v28-j6q3-5m4r"},{"id":"GHSA-4X45-GXVP-6283","date":"2026-09-10","title":"@argos-ci/core: CI Branch Name OS Command Injection","source_url":"https://github.com/advisories/GHSA-4x45-gxvp-6283"},{"id":"GHSA-6XCW-7XM6-48C6","date":"2026-09-10","title":"n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Execution","source_url":"https://github.com/advisories/GHSA-6xcw-7xm6-48c6"},{"id":"GHSA-C476-6W5Q-JW77","date":"2026-09-10","title":"rclone: FTP cross-session auth-proxy backend confusion","source_url":"https://github.com/advisories/GHSA-c476-6w5q-jw77"},{"id":"GHSA-F52W-8J3H-J724","date":"2026-09-10","title":"Traefik: Rootless HTTP/1 request-target routes as \"/\" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging","source_url":"https://github.com/advisories/GHSA-f52w-8j3h-j724"},{"id":"GHSA-F6MR-PJWC-34M4","date":"2026-09-10","title":"Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSR","source_url":"https://github.com/advisories/GHSA-f6mr-pjwc-34m4"},{"id":"GHSA-HH89-3R9W-QJ3J","date":"2026-09-10","title":"n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint","source_url":"https://github.com/advisories/GHSA-hh89-3r9w-qj3j"},{"id":"GHSA-HW8V-XXG5-VVVX","date":"2026-09-10","title":"n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution","source_url":"https://github.com/advisories/GHSA-hw8v-xxg5-vvvx"},{"id":"GHSA-J535-V25Q-VX3Q","date":"2026-09-10","title":"n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path","source_url":"https://github.com/advisories/GHSA-j535-v25q-vx3q"},{"id":"GHSA-JMC6-2WR8-H3WJ","date":"2026-09-10","title":"Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin","source_url":"https://github.com/advisories/GHSA-jmc6-2wr8-h3wj"},{"id":"GHSA-M3WP-48JR-VR4G","date":"2026-09-10","title":"mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS","source_url":"https://github.com/advisories/GHSA-m3wp-48jr-vr4g"},{"id":"GHSA-Q5J5-6P94-4GWC","date":"2026-09-10","title":"Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocation","source_url":"https://github.com/advisories/GHSA-q5j5-6p94-4gwc"},{"id":"GHSA-V3P8-WHQ6-R5JG","date":"2026-09-10","title":"Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements","source_url":"https://github.com/advisories/GHSA-v3p8-whq6-r5jg"},{"id":"GHSA-V67P-PHPQ-FC8X","date":"2026-09-10","title":"Traefik entrypoint header-name sanitization bypassed via request trailers","source_url":"https://github.com/advisories/GHSA-v67p-phpq-fc8x"},{"id":"GHSA-W4V4-9RW7-5326","date":"2026-09-10","title":"Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization","source_url":"https://github.com/advisories/GHSA-w4v4-9rw7-5326"},{"id":"GHSA-WFGQ-W7CQ-QJ7J","date":"2026-09-10","title":"mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url","source_url":"https://github.com/advisories/GHSA-wfgq-w7cq-qj7j"},{"id":"GHSA-WPMR-8H3Q-FWJ7","date":"2026-09-10","title":"Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite","source_url":"https://github.com/advisories/GHSA-wpmr-8h3q-fwj7"},{"id":"GHSA-X7M8-JRM8-HPVX","date":"2026-09-10","title":"@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name","source_url":"https://github.com/advisories/GHSA-x7m8-jrm8-hpvx"},{"id":"IBM:7284693","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by multiple JavaScript Node.js vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284693"},{"id":"IBM:7284709","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability in cluster migration data processing (CVE-2026-11716)","source_url":"https://www.ibm.com/support/pages/node/7284709"},{"id":"IBM:7284711","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by an integer overflow vulnerability (CVE-2026-11725)","source_url":"https://www.ibm.com/support/pages/node/7284711"},{"id":"IBM:7284713","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by an improper authorization vulnerability (CVE-2026-10030)","source_url":"https://www.ibm.com/support/pages/node/7284713"},{"id":"IBM:7284717","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-10853)","source_url":"https://www.ibm.com/support/pages/node/7284717"},{"id":"IBM:7284723","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by vulnerabilities in IBM WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7284723"},{"id":"IBM:7284726","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by a deserialization filter bypass vulnerability (CVE-2026-10751)","source_url":"https://www.ibm.com/support/pages/node/7284726"},{"id":"IBM:7284727","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by an XML external entity injection vulnerability (CVE-2026-12666)","source_url":"https://www.ibm.com/support/pages/node/7284727"},{"id":"IBM:7286948","date":"2026-09-10","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager(CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7286948"},{"id":"IBM:7286982","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® is affected by a vulnerability in Pacemaker (CVE-2026-10649)","source_url":"https://www.ibm.com/support/pages/node/7286982"},{"id":"IBM:7286987","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions (CVE-2026-87958)","source_url":"https://www.ibm.com/support/pages/node/7286987"},{"id":"IBM:7286990","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.","source_url":"https://www.ibm.com/support/pages/node/7286990"},{"id":"IBM:7286993","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions (CVE-2026-86093)","source_url":"https://www.ibm.com/support/pages/node/7286993"},{"id":"IBM:7286998","date":"2026-09-10","title":"Security Bulletin: IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths (CVE-2026-15955)","source_url":"https://www.ibm.com/support/pages/node/7286998"},{"id":"IBM:7287027","date":"2026-09-10","title":"Security Bulletin: Consul vulnerable to an authorization bypass in the catalog node-write path","source_url":"https://www.ibm.com/support/pages/node/7287027"},{"id":"IBM:7287037","date":"2026-09-10","title":"Security Bulletin: Consul vulnerable to an authorization bypass in the Connect service mesh","source_url":"https://www.ibm.com/support/pages/node/7287037"},{"id":"NCSC-2026-0015","date":"2026-09-10","title":"NCSC-2026-0015 Kwetsbaarheid verholpen in Fortinet FortiOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0015"},{"id":"RHSA-2026:62549","date":"2026-09-10","title":"OpenShift Container Platform 4.16.70 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62549"},{"id":"RHSA-2026:66281","date":"2026-09-10","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66281"},{"id":"RHSA-2026:66282","date":"2026-09-10","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66282"},{"id":"RHSA-2026:66323","date":"2026-09-10","title":"httpd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66323"},{"id":"RHSA-2026:66324","date":"2026-09-10","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:66324"},{"id":"RHSA-2026:66325","date":"2026-09-10","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:66325"},{"id":"RHSA-2026:66327","date":"2026-09-10","title":"osbuild-composer security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:66327"},{"id":"RHSA-2026:66336","date":"2026-09-10","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66336"},{"id":"RHSA-2026:66348","date":"2026-09-10","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66348"},{"id":"RHSA-2026:66349","date":"2026-09-10","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66349"},{"id":"RHSA-2026:66401","date":"2026-09-10","title":"Red Hat OpenStack Platform 17.1 security and bug fix advisory","source_url":"https://access.redhat.com/errata/RHSA-2026:66401"},{"id":"RHSA-2026:66405","date":"2026-09-10","title":"rsyslog security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66405"},{"id":"RHSA-2026:66406","date":"2026-09-10","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66406"},{"id":"RHSA-2026:66407","date":"2026-09-10","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66407"},{"id":"RHSA-2026:66410","date":"2026-09-10","title":"openssh security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66410"},{"id":"RHSA-2026:66432","date":"2026-09-10","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66432"},{"id":"RHSA-2026:66459","date":"2026-09-10","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66459"},{"id":"RHSA-2026:66488","date":"2026-09-10","title":"Red Hat AMQ Broker 7.14.1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66488"},{"id":"RHSA-2026:66521","date":"2026-09-10","title":"Logging for Red Hat OpenShift - 6.6.1","source_url":"https://access.redhat.com/errata/RHSA-2026:66521"},{"id":"RHSA-2026:66523","date":"2026-09-10","title":"Red Hat Quay 3.12.22","source_url":"https://access.redhat.com/errata/RHSA-2026:66523"},{"id":"RHSA-2026:66542","date":"2026-09-10","title":"nginx security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66542"},{"id":"RHSA-2026:66545","date":"2026-09-10","title":"Red Hat AMQ Broker 7.13.6 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66545"},{"id":"BSI:WID-SEC-2026-2352","date":"2026-09-10","title":"ImageMagick: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2352"},{"id":"BSI:WID-SEC-2026-2369","date":"2026-09-10","title":"7-Zip: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2369"},{"id":"BSI:WID-SEC-2026-2386","date":"2026-09-10","title":"BusyBox: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2386"},{"id":"BSI:WID-SEC-2026-2423","date":"2026-09-10","title":"CUPS (libcupsfilters, cups-filters): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2423"},{"id":"BSI:WID-SEC-2026-2447","date":"2026-09-10","title":"Oracle Virtualization: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2447"},{"id":"BSI:WID-SEC-2026-2480","date":"2026-09-10","title":"ImageMagick: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2480"},{"id":"BSI:WID-SEC-2026-2481","date":"2026-09-10","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2481"},{"id":"BSI:WID-SEC-2026-2492","date":"2026-09-10","title":"Unbound: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2492"},{"id":"BSI:WID-SEC-2026-2510","date":"2026-09-10","title":"ffmpeg: Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2510"},{"id":"BSI:WID-SEC-2026-2513","date":"2026-09-10","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2513"},{"id":"BSI:WID-SEC-2026-3039","date":"2026-09-10","title":"Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3039"},{"id":"BSI:WID-SEC-2026-3078","date":"2026-09-10","title":"Red Hat Enterprise Linux (xmlrpc-c): Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3078"},{"id":"BSI:WID-SEC-2026-3183","date":"2026-09-10","title":"Dell integrated Dell Remote Access Controller: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3183"},{"id":"BSI:WID-SEC-2026-3190","date":"2026-09-10","title":"Grafana Enterprise: Mehrere Schwachstellen ermöglichen Erlangen von Benutzer- oder Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3190"},{"id":"BSI:WID-SEC-2026-3214","date":"2026-09-10","title":"Red Hat Enterprise Linux (python-cryptography): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3214"},{"id":"BSI:WID-SEC-2026-3240","date":"2026-09-10","title":"Insyde UEFI Firmware und Cisco UCS (UEFI Shell Secure Boot): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3240"},{"id":"BSI:WID-SEC-2026-3262","date":"2026-09-10","title":"Apache ActiveMQ: Schwachstelle ermöglicht DoS und Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3262"},{"id":"ICSA-26-253-01","date":"2026-09-10","title":"AVEVA Pipeline Integrity Monitor","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01"},{"id":"GHSA-35JJ-42HP-8GMQ","date":"2026-09-10","title":"n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket","source_url":"https://github.com/advisories/GHSA-35jj-42hp-8gmq"},{"id":"GHSA-38XV-HF3P-H7MQ","date":"2026-09-10","title":"rclone: source object names can escape the configured root on upload","source_url":"https://github.com/advisories/GHSA-38xv-hf3p-h7mq"},{"id":"GHSA-3PF7-Q2G3-WJ28","date":"2026-09-10","title":"Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions","source_url":"https://github.com/advisories/GHSA-3pf7-q2g3-wj28"},{"id":"GHSA-4QG5-CXX4-G927","date":"2026-09-10","title":"Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange","source_url":"https://github.com/advisories/GHSA-4qg5-cxx4-g927"},{"id":"GHSA-5M98-CGCR-XX3Q","date":"2026-09-10","title":"n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open","source_url":"https://github.com/advisories/GHSA-5m98-cgcr-xx3q"},{"id":"GHSA-65XW-2V52-JHXC","date":"2026-09-10","title":"n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter","source_url":"https://github.com/advisories/GHSA-65xw-2v52-jhxc"},{"id":"GHSA-66HP-WGXQ-6F5Q","date":"2026-09-10","title":"rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace","source_url":"https://github.com/advisories/GHSA-66hp-wgxq-6f5q"},{"id":"GHSA-679F-58PQ-4V2C","date":"2026-09-10","title":"n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service","source_url":"https://github.com/advisories/GHSA-679f-58pq-4v2c"},{"id":"GHSA-7GHQ-V6JF-G56C","date":"2026-09-10","title":"Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded","source_url":"https://github.com/advisories/GHSA-7ghq-v6jf-g56c"},{"id":"GHSA-8R35-5X5R-HV74","date":"2026-09-10","title":"Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle","source_url":"https://github.com/advisories/GHSA-8r35-5x5r-hv74"},{"id":"GHSA-CQR2-H44G-V75V","date":"2026-09-10","title":"n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints","source_url":"https://github.com/advisories/GHSA-cqr2-h44g-v75v"},{"id":"GHSA-CW9W-VV67-HF73","date":"2026-09-10","title":"n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution","source_url":"https://github.com/advisories/GHSA-cw9w-vv67-hf73"},{"id":"GHSA-F2CP-M7MV-8JPV","date":"2026-09-10","title":"n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers","source_url":"https://github.com/advisories/GHSA-f2cp-m7mv-8jpv"},{"id":"GHSA-F8G7-2XJC-7MFH","date":"2026-09-10","title":"rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination","source_url":"https://github.com/advisories/GHSA-f8g7-2xjc-7mfh"},{"id":"GHSA-FMQH-XP37-5HR8","date":"2026-09-10","title":"Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint","source_url":"https://github.com/advisories/GHSA-fmqh-xp37-5hr8"},{"id":"GHSA-FX5J-QCQG-GRPF","date":"2026-09-10","title":"Excelize: Negative shared-string index causes panic in GetCellValue and GetRows","source_url":"https://github.com/advisories/GHSA-fx5j-qcqg-grpf"},{"id":"GHSA-HH8M-FM6V-7CVG","date":"2026-09-10","title":"Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler","source_url":"https://github.com/advisories/GHSA-hh8m-fm6v-7cvg"},{"id":"GHSA-P297-FM68-3Q8C","date":"2026-09-10","title":"Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`","source_url":"https://github.com/advisories/GHSA-p297-fm68-3q8c"},{"id":"GHSA-P6M2-R3W9-MPXW","date":"2026-09-10","title":"rclone local: crafted Range request against a translated symlink panics (DoS)","source_url":"https://github.com/advisories/GHSA-p6m2-r3w9-mpxw"},{"id":"GHSA-P78M-89R6-PGF7","date":"2026-09-10","title":"Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication","source_url":"https://github.com/advisories/GHSA-p78m-89r6-pgf7"},{"id":"GHSA-PCVC-8VRV-8Q6W","date":"2026-09-10","title":"Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends","source_url":"https://github.com/advisories/GHSA-pcvc-8vrv-8q6w"},{"id":"GHSA-PF83-W3F9-8M37","date":"2026-09-10","title":"n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions","source_url":"https://github.com/advisories/GHSA-pf83-w3f9-8m37"},{"id":"GHSA-PQ6C-VH67-XPM3","date":"2026-09-10","title":"n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check","source_url":"https://github.com/advisories/GHSA-pq6c-vh67-xpm3"},{"id":"GHSA-Q5WM-MGQX-FV2F","date":"2026-09-10","title":"n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content","source_url":"https://github.com/advisories/GHSA-q5wm-mgqx-fv2f"},{"id":"GHSA-QGPW-8G46-W95V","date":"2026-09-10","title":"n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read","source_url":"https://github.com/advisories/GHSA-qgpw-8g46-w95v"},{"id":"GHSA-RF44-J88R-HH8C","date":"2026-09-10","title":"Traefik: ForwardAuth identity spoofing via dot-form header alias","source_url":"https://github.com/advisories/GHSA-rf44-j88r-hh8c"},{"id":"GHSA-V39V-59XW-J98G","date":"2026-09-10","title":"Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value","source_url":"https://github.com/advisories/GHSA-v39v-59xw-j98g"},{"id":"GHSA-WJWR-XFP9-R66P","date":"2026-09-10","title":"Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes","source_url":"https://github.com/advisories/GHSA-wjwr-xfp9-r66p"},{"id":"GHSA-WVM9-9G5J-623F","date":"2026-09-10","title":"Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange","source_url":"https://github.com/advisories/GHSA-wvm9-9g5j-623f"},{"id":"IBM:7284688","date":"2026-09-10","title":"Security Bulletin: IBM MQ Appliance is affected by a security bypass (CVE-2026-5516)","source_url":"https://www.ibm.com/support/pages/node/7284688"},{"id":"IBM:7286961","date":"2026-09-10","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service, improper input validation, and race condition due to Kubernetes (CVE-2025-0426, CVE-2025-1767, CVE-2024-7598)","source_url":"https://www.ibm.com/support/pages/node/7286961"},{"id":"IBM:7286962","date":"2026-09-10","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to weak randomness due to undici (CVE-2025-22150)","source_url":"https://www.ibm.com/support/pages/node/7286962"},{"id":"IBM:7286963","date":"2026-09-10","title":"Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )","source_url":"https://www.ibm.com/support/pages/node/7286963"},{"id":"IBM:7286970","date":"2026-09-10","title":"Security Bulletin: IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery [CVE-2026-17047]","source_url":"https://www.ibm.com/support/pages/node/7286970"},{"id":"IBM:7286972","date":"2026-09-10","title":"Security Bulletin: IBM Db2 Mirror for i is vulnerable to Authentication Bypass by Spoofing [CVE-2026-18065]","source_url":"https://www.ibm.com/support/pages/node/7286972"},{"id":"IBM:7286974","date":"2026-09-10","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.","source_url":"https://www.ibm.com/support/pages/node/7286974"},{"id":"IBM:7286981","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference (CVE-2026-16702)","source_url":"https://www.ibm.com/support/pages/node/7286981"},{"id":"IBM:7286983","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption (CVE-2026-17463)","source_url":"https://www.ibm.com/support/pages/node/7286983"},{"id":"IBM:7286985","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system (CVE-2026-86087)","source_url":"https://www.ibm.com/support/pages/node/7286985"},{"id":"IBM:7286991","date":"2026-09-10","title":"Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in bcprov-jdk18on-1.82 (CVE-2026-0636)","source_url":"https://www.ibm.com/support/pages/node/7286991"},{"id":"IBM:7287028","date":"2026-09-10","title":"Security Bulletin: Consul vulnerable to a denial of service in the native RPC listener","source_url":"https://www.ibm.com/support/pages/node/7287028"},{"id":"IBM:7287035","date":"2026-09-10","title":"Security Bulletin: Consul vulnerable to an authorization bypass in the catalog deregistration path","source_url":"https://www.ibm.com/support/pages/node/7287035"},{"id":"RHSA-2026:66341","date":"2026-09-10","title":"apr-util security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66341"},{"id":"RHSA-2026:66392","date":"2026-09-10","title":"apr-util security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66392"},{"id":"RHSA-2026:66403","date":"2026-09-10","title":"coreutils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66403"},{"id":"USN-8571-2","date":"2026-09-10","title":"USN-8571-2: Apache HTTP Server regression","source_url":"https://ubuntu.com/security/notices/USN-8571-2"},{"id":"USN-8737-2","date":"2026-09-10","title":"USN-8737-2: GNU C Library vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8737-2"},{"id":"USN-8740-1","date":"2026-09-10","title":"USN-8740-1: .NET vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8740-1"},{"id":"USN-8741-1","date":"2026-09-10","title":"USN-8741-1: Flatpak vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8741-1"},{"id":"USN-8742-1","date":"2026-09-10","title":"USN-8742-1: Netty vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8742-1"},{"id":"USN-8743-1","date":"2026-09-10","title":"USN-8743-1: PHP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8743-1"},{"id":"USN-8744-1","date":"2026-09-10","title":"USN-8744-1: Python vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8744-1"},{"id":"USN-8745-1","date":"2026-09-10","title":"USN-8745-1: KissFFT vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8745-1"},{"id":"USN-8746-1","date":"2026-09-10","title":"USN-8746-1: libEBML vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8746-1"},{"id":"USN-8747-1","date":"2026-09-10","title":"USN-8747-1: Beets vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8747-1"},{"id":"USN-8748-1","date":"2026-09-10","title":"USN-8748-1: Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8748-1"},{"id":"BSI:WID-SEC-2026-2412","date":"2026-09-10","title":"helm: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2412"},{"id":"GHSA-486V-Q2WF-FP2R","date":"2026-09-10","title":"rclone: http backend forwards custom/auth headers to a different host on redirect","source_url":"https://github.com/advisories/GHSA-486v-q2wf-fp2r"},{"id":"BSI:WID-SEC-2026-3205","date":"2026-09-09","title":"N-able N-Central: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3205"},{"id":"CERT-EU-SA2026-011","date":"2026-09-09","title":"2026-011 Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server","source_url":"https://cert.europa.eu/publications/security-advisories/2026-011/"},{"id":"IBM:7286752","date":"2026-09-09","title":"Security Bulletin: Vulnerabilities in Spring, Tomcat, Netty, PostCSS might affect IBM Storage Protect Plus","source_url":"https://www.ibm.com/support/pages/node/7286752"},{"id":"IBM:7286775","date":"2026-09-09","title":"Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.","source_url":"https://www.ibm.com/support/pages/node/7286775"},{"id":"IBM:7286776","date":"2026-09-09","title":"Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.","source_url":"https://www.ibm.com/support/pages/node/7286776"},{"id":"IBM:7286777","date":"2026-09-09","title":"Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.","source_url":"https://www.ibm.com/support/pages/node/7286777"},{"id":"IBM:7286790","date":"2026-09-09","title":"Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.","source_url":"https://www.ibm.com/support/pages/node/7286790"},{"id":"IBM:7286834","date":"2026-09-09","title":"Security Bulletin: IBM ContextForge MCP Gateway is affected by use of default credentials","source_url":"https://www.ibm.com/support/pages/node/7286834"},{"id":"IBM:7286862","date":"2026-09-09","title":"Security Bulletin: Vulnerabilities found in Watson Data Intelligence","source_url":"https://www.ibm.com/support/pages/node/7286862"},{"id":"NCSC-2026-0355","date":"2026-09-09","title":"NCSC-2026-0355 Kwetsbaarheden verholpen in Fortinet Forti-producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0355"},{"id":"NCSC-2026-0356","date":"2026-09-09","title":"NCSC-2026-0356 Kwetsbaarheden verholpen in diverse SAP-producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0356"},{"id":"NCSC-2026-0358","date":"2026-09-09","title":"NCSC-2026-0358 Kwetsbaarheden verholpen in Ivanti Neurons for ITSM","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0358"},{"id":"NCSC-2026-0361","date":"2026-09-09","title":"NCSC-2026-0361 Kwetsbaarheden verholpen in Adobe Commerce","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0361"},{"id":"NCSC-2026-0362","date":"2026-09-09","title":"NCSC-2026-0362 Kwetsbaarheden verholpen in Adobe ColdFusion","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0362"},{"id":"NCSC-2026-0363","date":"2026-09-09","title":"NCSC-2026-0363 Kwetsbaarheden verholpen in Adobe Experience Manager","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0363"},{"id":"RHSA-2026:66120","date":"2026-09-09","title":"Updated Container Images: HawtIO 4.4.1 for Red Hat build of Apache Camel 4 Release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66120"},{"id":"BSI:WID-SEC-2026-1006","date":"2026-09-09","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1006"},{"id":"BSI:WID-SEC-2026-1776","date":"2026-09-09","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1776"},{"id":"BSI:WID-SEC-2026-1933","date":"2026-09-09","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1933"},{"id":"BSI:WID-SEC-2026-2056","date":"2026-09-09","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2056"},{"id":"BSI:WID-SEC-2026-2630","date":"2026-09-09","title":"Red Hat Enterprise Linux (DBI, perl-GD): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2630"},{"id":"BSI:WID-SEC-2026-2850","date":"2026-09-09","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2850"},{"id":"BSI:WID-SEC-2026-2961","date":"2026-09-09","title":"Red Hat Enterprise Linux (mrtg, kbd, urwid): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2961"},{"id":"BSI:WID-SEC-2026-3175","date":"2026-09-09","title":"Google Chrome / Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3175"},{"id":"BSI:WID-SEC-2026-3219","date":"2026-09-09","title":"Samsung Android: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3219"},{"id":"BSI:WID-SEC-2026-3246","date":"2026-09-09","title":"Adobe Magento: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3246"},{"id":"BSI:WID-SEC-2026-3247","date":"2026-09-09","title":"Adobe Creative Cloud (Illustrator und Animate): Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3247"},{"id":"BSI:WID-SEC-2026-3250","date":"2026-09-09","title":"Adobe ColdFusion: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3250"},{"id":"BSI:WID-SEC-2026-3268","date":"2026-09-09","title":"Microsoft Exchange Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3268"},{"id":"BSI:WID-SEC-2026-3269","date":"2026-09-09","title":"Ivanti Sentry: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3269"},{"id":"BSI:WID-SEC-2026-3270","date":"2026-09-09","title":"Ivanti Endpoint Manager Mobile: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3270"},{"id":"BSI:WID-SEC-2026-3271","date":"2026-09-09","title":"Microsoft SQL Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3271"},{"id":"GHSA-2J8R-3C22-8565","date":"2026-09-09","title":"Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability","source_url":"https://github.com/advisories/GHSA-2j8r-3c22-8565"},{"id":"GHSA-2R5Q-H53F-9RP3","date":"2026-09-09","title":"@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run","source_url":"https://github.com/advisories/GHSA-2r5q-h53f-9rp3"},{"id":"GHSA-527H-Q9F6-P7QX","date":"2026-09-09","title":"Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability","source_url":"https://github.com/advisories/GHSA-527h-q9f6-p7qx"},{"id":"GHSA-5HX7-J24V-RFFJ","date":"2026-09-09","title":"GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool","source_url":"https://github.com/advisories/GHSA-5hx7-j24v-rffj"},{"id":"GHSA-63GH-G2X5-X69V","date":"2026-09-09","title":"Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability","source_url":"https://github.com/advisories/GHSA-63gh-g2x5-x69v"},{"id":"GHSA-7W5X-HRQM-74C2","date":"2026-09-09","title":"smol-toml: Denial of Service via malformed TOML documents","source_url":"https://github.com/advisories/GHSA-7w5x-hrqm-74c2"},{"id":"GHSA-CP3J-M783-3PH5","date":"2026-09-09","title":"Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification","source_url":"https://github.com/advisories/GHSA-cp3j-m783-3ph5"},{"id":"GHSA-FXG7-897C-57MP","date":"2026-09-09","title":"Nuxt Ollama: Public Runtime Config Exposes Ollama API Key to Browser Clients","source_url":"https://github.com/advisories/GHSA-fxg7-897c-57mp"},{"id":"GHSA-G72F-JW3W-MGH7","date":"2026-09-09","title":"@openhop/server: Path Traversal in Flow ID File Operations","source_url":"https://github.com/advisories/GHSA-g72f-jw3w-mgh7"},{"id":"GHSA-HXJG-93WC-H8P8","date":"2026-09-09","title":"Komari: Management Interface CSRF","source_url":"https://github.com/advisories/GHSA-hxjg-93wc-h8p8"},{"id":"GHSA-M835-3CM9-RGGG","date":"2026-09-09","title":"Joker linter executed project-local .jokerd/linter.* files during linting","source_url":"https://github.com/advisories/GHSA-m835-3cm9-rggg"},{"id":"GHSA-VV4J-M4VR-F3G6","date":"2026-09-09","title":"ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces","source_url":"https://github.com/advisories/GHSA-vv4j-m4vr-f3g6"},{"id":"GHSA-WCJJ-9M6G-2FR2","date":"2026-09-09","title":"functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import","source_url":"https://github.com/advisories/GHSA-wcjj-9m6g-2fr2"},{"id":"IBM:7286190","date":"2026-09-09","title":"Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty affect IBM Virtualization Engine TS7700","source_url":"https://www.ibm.com/support/pages/node/7286190"},{"id":"IBM:7286779","date":"2026-09-09","title":"Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud is using crypto packages which is vulnerable to CVE-2026-32283 and CVE-2026-32281","source_url":"https://www.ibm.com/support/pages/node/7286779"},{"id":"IBM:7286782","date":"2026-09-09","title":"Security Bulletin: IBM Db2 Bridge is vulnerable due to baseline-browser-mapping, sqlparse, cryptography, Browserslist (CVE-2026-45819,CVE-2026-84305,CVE-2026-69247,CVE-2026-73088,CVE-2026-73089,CVE-2026-54284,CVE-2026-59893,CVE-2026-59894,CVE-2026-71491)","source_url":"https://www.ibm.com/support/pages/node/7286782"},{"id":"IBM:7286788","date":"2026-09-09","title":"Security Bulletin: Due to use of log4j-core, IBM webMethods BPM is vulnerable to ImproperImproper Encoding or Escaping of Output","source_url":"https://www.ibm.com/support/pages/node/7286788"},{"id":"IBM:7286789","date":"2026-09-09","title":"Security Bulletin: Due to use of log4j-core, IBM webMethods BPM is vulnerable to Improper Encoding or Escaping of Output","source_url":"https://www.ibm.com/support/pages/node/7286789"},{"id":"IBM:7286847","date":"2026-09-09","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex","source_url":"https://www.ibm.com/support/pages/node/7286847"},{"id":"IBM:7286863","date":"2026-09-09","title":"Security Bulletin: Vulnerability in jackson-core affects IBM Virtualization Engine TS7700","source_url":"https://www.ibm.com/support/pages/node/7286863"},{"id":"IBM:7286871","date":"2026-09-09","title":"Security Bulletin: IBM Watsonx BI Assistant for CP4D affected by multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7286871"},{"id":"NCSC-2026-0357","date":"2026-09-09","title":"NCSC-2026-0357 Kwetsbaarheid verholpen in Ivanti Sentry","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0357"},{"id":"NCSC-2026-0359","date":"2026-09-09","title":"NCSC-2026-0359 Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0359"},{"id":"NCSC-2026-0360","date":"2026-09-09","title":"NCSC-2026-0360 Kwetsbaarheden verholpen in Adobe Photoshop Desktop","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0360"},{"id":"NCSC-2026-0364","date":"2026-09-09","title":"NCSC-2026-0364 Kwetsbaarheden verholpen in Adobe Illustrator","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0364"},{"id":"RHSA-2026:63044","date":"2026-09-09","title":"OpenShift Container Platform 4.19.46 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63044"},{"id":"RHSA-2026:63636","date":"2026-09-09","title":"Red Hat build of MicroShift 4.19.46 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63636"},{"id":"RHSA-2026:65708","date":"2026-09-09","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65708"},{"id":"RHSA-2026:65709","date":"2026-09-09","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65709"},{"id":"RHSA-2026:65710","date":"2026-09-09","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65710"},{"id":"RHSA-2026:65711","date":"2026-09-09","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65711"},{"id":"RHSA-2026:65712","date":"2026-09-09","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65712"},{"id":"RHSA-2026:65757","date":"2026-09-09","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65757"},{"id":"RHSA-2026:65764","date":"2026-09-09","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65764"},{"id":"RHSA-2026:65765","date":"2026-09-09","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65765"},{"id":"RHSA-2026:65766","date":"2026-09-09","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65766"},{"id":"RHSA-2026:65803","date":"2026-09-09","title":"libvirt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65803"},{"id":"RHSA-2026:65816","date":"2026-09-09","title":"qt6-qt5compat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65816"},{"id":"RHSA-2026:65832","date":"2026-09-09","title":"mrtg security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65832"},{"id":"RHSA-2026:65855","date":"2026-09-09","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65855"},{"id":"RHSA-2026:65880","date":"2026-09-09","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65880"},{"id":"RHSA-2026:65886","date":"2026-09-09","title":"image-builder security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65886"},{"id":"RHSA-2026:65887","date":"2026-09-09","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65887"},{"id":"RHSA-2026:65897","date":"2026-09-09","title":"qt5-qtbase security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65897"},{"id":"RHSA-2026:65900","date":"2026-09-09","title":"openssh security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65900"},{"id":"RHSA-2026:65918","date":"2026-09-09","title":"delve security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65918"},{"id":"RHSA-2026:65993","date":"2026-09-09","title":"qt5-qtbase security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65993"},{"id":"RHSA-2026:66000","date":"2026-09-09","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66000"},{"id":"RHSA-2026:66016","date":"2026-09-09","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66016"},{"id":"RHSA-2026:66022","date":"2026-09-09","title":"Red Hat OpenShift API for Data Protection","source_url":"https://access.redhat.com/errata/RHSA-2026:66022"},{"id":"RHSA-2026:66026","date":"2026-09-09","title":"virtuoso-opensource security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66026"},{"id":"RHSA-2026:66179","date":"2026-09-09","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66179"},{"id":"RHSA-2026:66203","date":"2026-09-09","title":"python3.12-lxml security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66203"},{"id":"RHSA-2026:66204","date":"2026-09-09","title":"python-lxml security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66204"},{"id":"RHSA-2026:66248","date":"2026-09-09","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:66248"},{"id":"BSI:WID-SEC-2026-1437","date":"2026-09-09","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1437"},{"id":"BSI:WID-SEC-2026-1653","date":"2026-09-09","title":"Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1653"},{"id":"BSI:WID-SEC-2026-1977","date":"2026-09-09","title":"Red Hat Enterprise Linux (dracut): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1977"},{"id":"BSI:WID-SEC-2026-2052","date":"2026-09-09","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2052"},{"id":"BSI:WID-SEC-2026-2065","date":"2026-09-09","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2065"},{"id":"BSI:WID-SEC-2026-2427","date":"2026-09-09","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2427"},{"id":"BSI:WID-SEC-2026-2459","date":"2026-09-09","title":"QT: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2459"},{"id":"BSI:WID-SEC-2026-2518","date":"2026-09-09","title":"Red Hat Enterprise Linux (libreswan): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2518"},{"id":"BSI:WID-SEC-2026-2645","date":"2026-09-09","title":"Red Hat Enterprise Linux (sg3_utils): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2645"},{"id":"BSI:WID-SEC-2026-2835","date":"2026-09-09","title":"Red Hat Enterprise Linux (yelp, dracut): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2835"},{"id":"BSI:WID-SEC-2026-2930","date":"2026-09-09","title":"expat: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2930"},{"id":"BSI:WID-SEC-2026-2944","date":"2026-09-09","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2944"},{"id":"BSI:WID-SEC-2026-2960","date":"2026-09-09","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2960"},{"id":"BSI:WID-SEC-2026-3016","date":"2026-09-09","title":"CPython: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3016"},{"id":"BSI:WID-SEC-2026-3092","date":"2026-09-09","title":"sudo: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3092"},{"id":"BSI:WID-SEC-2026-3197","date":"2026-09-09","title":"Bruno: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3197"},{"id":"BSI:WID-SEC-2026-3224","date":"2026-09-09","title":"TYPO3 Core: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3224"},{"id":"BSI:WID-SEC-2026-3227","date":"2026-09-09","title":"QT: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3227"},{"id":"BSI:WID-SEC-2026-3258","date":"2026-09-09","title":"Fortinet FortiClient: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3258"},{"id":"BSI:WID-SEC-2026-3259","date":"2026-09-09","title":"Fortinet FortiAnalyzer: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3259"},{"id":"BSI:WID-SEC-2026-3260","date":"2026-09-09","title":"Fortinet FortiManager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3260"},{"id":"BSI:WID-SEC-2026-3263","date":"2026-09-09","title":"Fortinet FortiProxy und FortiOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3263"},{"id":"BSI:WID-SEC-2026-3281","date":"2026-09-09","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3281"},{"id":"GHSA-3CGP-3CQX-J8W2","date":"2026-09-09","title":"Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree","source_url":"https://github.com/advisories/GHSA-3cgp-3cqx-j8w2"},{"id":"GHSA-5X7X-4C3C-QF5W","date":"2026-09-09","title":"Open WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targets","source_url":"https://github.com/advisories/GHSA-5x7x-4c3c-qf5w"},{"id":"GHSA-7JXH-36Q5-GCQV","date":"2026-09-09","title":"containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service","source_url":"https://github.com/advisories/GHSA-7jxh-36q5-gcqv"},{"id":"GHSA-7RHF-42QF-VRVC","date":"2026-09-09","title":"gix-sec safe.directory protections absent for elevated administrators","source_url":"https://github.com/advisories/GHSA-7rhf-42qf-vrvc"},{"id":"GHSA-8CP2-47HG-MFGH","date":"2026-09-09","title":"Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability","source_url":"https://github.com/advisories/GHSA-8cp2-47hg-mfgh"},{"id":"GHSA-9MVP-W4RR-5C6X","date":"2026-09-09","title":"decidim-elections: Election question titles allow stored script execution","source_url":"https://github.com/advisories/GHSA-9mvp-w4rr-5c6x"},{"id":"GHSA-C23Q-FW86-9H5X","date":"2026-09-09","title":"LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint","source_url":"https://github.com/advisories/GHSA-c23q-fw86-9h5x"},{"id":"GHSA-CCG5-9C8W-XH6V","date":"2026-09-09","title":"SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`","source_url":"https://github.com/advisories/GHSA-ccg5-9c8w-xh6v"},{"id":"GHSA-HR3M-4QWQ-3MGC","date":"2026-09-09","title":"GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server","source_url":"https://github.com/advisories/GHSA-hr3m-4qwq-3mgc"},{"id":"GHSA-JF6Q-CHMF-3H3V","date":"2026-09-09","title":"weasyprint Has Server-Side Request Forgery (SSRF)","source_url":"https://github.com/advisories/GHSA-jf6q-chmf-3h3v"},{"id":"GHSA-JQHH-CJMQ-VMV6","date":"2026-09-09","title":"Open WebUI: Any authenticated user can hang the server via a cyclic chat message history","source_url":"https://github.com/advisories/GHSA-jqhh-cjmq-vmv6"},{"id":"GHSA-PQQC-8V73-9GG2","date":"2026-09-09","title":"LF Edge eKuiper: SSRF in External Service","source_url":"https://github.com/advisories/GHSA-pqqc-8v73-9gg2"},{"id":"GHSA-V25G-MVWR-F5FP","date":"2026-09-09","title":"webhookd: Unrestricted HTTP Header to Shell Variable Injection","source_url":"https://github.com/advisories/GHSA-v25g-mvwr-f5fp"},{"id":"IBM:7286038","date":"2026-09-09","title":"Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition CSPU - Aug 2026 affects IBM OpenPages","source_url":"https://www.ibm.com/support/pages/node/7286038"},{"id":"IBM:7286191","date":"2026-09-09","title":"Security Bulletin: Vulnerability in js-yaml affects IBM Virtualization Engine TS7700","source_url":"https://www.ibm.com/support/pages/node/7286191"},{"id":"IBM:7286499","date":"2026-09-09","title":"Security Bulletin: IBM Java JVM Crash (SEGV) Vulnerability Affecting IBM OpenPages","source_url":"https://www.ibm.com/support/pages/node/7286499"},{"id":"IBM:7286769","date":"2026-09-09","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by an information disclosure vulnerability due to urllib3","source_url":"https://www.ibm.com/support/pages/node/7286769"},{"id":"IBM:7286780","date":"2026-09-09","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)","source_url":"https://www.ibm.com/support/pages/node/7286780"},{"id":"IBM:7286831","date":"2026-09-09","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager and IBM Tivoli Netcool Impact","source_url":"https://www.ibm.com/support/pages/node/7286831"},{"id":"IBM:7286881","date":"2026-09-09","title":"Security Bulletin: undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher","source_url":"https://www.ibm.com/support/pages/node/7286881"},{"id":"IBM:7286897","date":"2026-09-09","title":"Security Bulletin: middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags.","source_url":"https://www.ibm.com/support/pages/node/7286897"},{"id":"NCSC-2026-0354","date":"2026-09-09","title":"NCSC-2026-0354 Kwetsbaarheid verholpen in Google Chrome","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0354"},{"id":"RHSA-2026:65762","date":"2026-09-09","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65762"},{"id":"RHSA-2026:65769","date":"2026-09-09","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65769"},{"id":"RHSA-2026:65771","date":"2026-09-09","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65771"},{"id":"RHSA-2026:65773","date":"2026-09-09","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65773"},{"id":"RHSA-2026:65959","date":"2026-09-09","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65959"},{"id":"RHSA-2026:65998","date":"2026-09-09","title":"gzip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65998"},{"id":"RHSA-2026:65999","date":"2026-09-09","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65999"},{"id":"USN-8675-2","date":"2026-09-09","title":"USN-8675-2: Perl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8675-2"},{"id":"USN-8716-2","date":"2026-09-09","title":"USN-8716-2: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8716-2"},{"id":"BSI:WID-SEC-2026-3261","date":"2026-09-09","title":"Fortinet FortiSIEM: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3261"},{"id":"CISCO-SA-NOTICE-JFXK98ZP","date":"2026-09-09","title":"Cisco Advance Notification for Publication of September 16, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"},{"id":"GHSA-G8RH-FJM6-H2H9","date":"2026-09-09","title":"LF Edge eKuiper: Self-XSS in External Service Creation","source_url":"https://github.com/advisories/GHSA-g8rh-fjm6-h2h9"},{"id":"RHSA-2026:64463","date":"2026-09-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64463"},{"id":"BSI:WID-SEC-2026-3223","date":"2026-09-08","title":"Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3223"},{"id":"GHSA-26W7-CXV4-GFX2","date":"2026-09-08","title":"Astro: Remote code execution through AVIF image optimization","source_url":"https://github.com/advisories/GHSA-26w7-cxv4-gfx2"},{"id":"GHSA-284H-M62Q-GF8W","date":"2026-09-08","title":"GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE","source_url":"https://github.com/advisories/GHSA-284h-m62q-gf8w"},{"id":"GHSA-2XP9-VWFH-VXW4","date":"2026-09-08","title":"Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used","source_url":"https://github.com/advisories/GHSA-2xp9-vwfh-vxw4"},{"id":"GHSA-C4C3-7FPV-J4Q5","date":"2026-09-08","title":"Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext","source_url":"https://github.com/advisories/GHSA-c4c3-7fpv-j4q5"},{"id":"GHSA-FXF7-VHH8-7VPQ","date":"2026-09-08","title":"CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver","source_url":"https://github.com/advisories/GHSA-fxf7-vhh8-7vpq"},{"id":"GHSA-JRC7-96C5-Q579","date":"2026-09-08","title":"MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip","source_url":"https://github.com/advisories/GHSA-jrc7-96c5-q579"},{"id":"GHSA-P293-QW3H-JR36","date":"2026-09-08","title":"Next.js: Unauthenticated Remote Code Execution on windows-hosted servers","source_url":"https://github.com/advisories/GHSA-p293-qw3h-jr36"},{"id":"GHSA-RCR6-4JQH-J84M","date":"2026-09-08","title":"Gitea: Remote Code Execution via diffpatch Git Hook Installation","source_url":"https://github.com/advisories/GHSA-rcr6-4jqh-j84m"},{"id":"GHSA-RHP5-R9X4-F5G2","date":"2026-09-08","title":"NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution","source_url":"https://github.com/advisories/GHSA-rhp5-r9x4-f5g2"},{"id":"GHSA-W6F5-V2H6-G786","date":"2026-09-08","title":"Predis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections","source_url":"https://github.com/advisories/GHSA-w6f5-v2h6-g786"},{"id":"GHSA-X99W-6FGC-PMFW","date":"2026-09-08","title":"NLTK: Allowlisted pickle loaders still permit code execution in current source","source_url":"https://github.com/advisories/GHSA-x99w-6fgc-pmfw"},{"id":"GHSA-XP7J-H7JC-4W8P","date":"2026-09-08","title":"Semaphore U: OS Command Injection","source_url":"https://github.com/advisories/GHSA-xp7j-h7jc-4w8p"},{"id":"IBM:7286576","date":"2026-09-08","title":"Security Bulletin: Vulnerability in IBM Seumeru affectecting Rational Business Developer","source_url":"https://www.ibm.com/support/pages/node/7286576"},{"id":"IBM:7286578","date":"2026-09-08","title":"Security Bulletin: Vulnerability in IBM SDK affectecting Rational Business Developer","source_url":"https://www.ibm.com/support/pages/node/7286578"},{"id":"IBM:7286629","date":"2026-09-08","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)","source_url":"https://www.ibm.com/support/pages/node/7286629"},{"id":"IBM:7286632","date":"2026-09-08","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by multiple vulnerabilities in various components","source_url":"https://www.ibm.com/support/pages/node/7286632"},{"id":"IBM:7286638","date":"2026-09-08","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)","source_url":"https://www.ibm.com/support/pages/node/7286638"},{"id":"IBM:7286647","date":"2026-09-08","title":"Security Bulletin: Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7286647"},{"id":"IBM:7286670","date":"2026-09-08","title":"Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7286670"},{"id":"IBM:7286680","date":"2026-09-08","title":"Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026","source_url":"https://www.ibm.com/support/pages/node/7286680"},{"id":"IBM:7286681","date":"2026-09-08","title":"Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.","source_url":"https://www.ibm.com/support/pages/node/7286681"},{"id":"IBM:7286738","date":"2026-09-08","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps","source_url":"https://www.ibm.com/support/pages/node/7286738"},{"id":"NCSC-2026-0344","date":"2026-09-08","title":"NCSC-2026-0344 Kwetsbaarheid verholpen in Adobe Commerce en Magento","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0344"},{"id":"NCSC-2026-0346","date":"2026-09-08","title":"NCSC-2026-0346 Kwetsbaarheden verholpen in Siemens producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0346"},{"id":"NCSC-2026-0347","date":"2026-09-08","title":"NCSC-2026-0347 Kwetsbaarheden verholpen in Microsoft Azure","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0347"},{"id":"NCSC-2026-0353","date":"2026-09-08","title":"NCSC-2026-0353 Kwetsbaarheden verholpen in Microsoft Windows","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353"},{"id":"RHSA-2026:64771","date":"2026-09-08","title":"389-ds-base security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64771"},{"id":"RHSA-2026:64776","date":"2026-09-08","title":"389-ds:1.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64776"},{"id":"RHSA-2026:64778","date":"2026-09-08","title":"389-ds-base security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64778"},{"id":"RHSA-2026:64779","date":"2026-09-08","title":"redhat-ds:12 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64779"},{"id":"RHSA-2026:64780","date":"2026-09-08","title":"redhat-ds:12 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64780"},{"id":"RHSA-2026:64781","date":"2026-09-08","title":"389-ds-base security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64781"},{"id":"RHSA-2026:64789","date":"2026-09-08","title":"389-ds:1.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64789"},{"id":"RHSA-2026:64792","date":"2026-09-08","title":"redhat-ds:11 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64792"},{"id":"RHSA-2026:64793","date":"2026-09-08","title":"redhat-ds:11 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64793"},{"id":"BSI:WID-SEC-2026-0942","date":"2026-09-08","title":"xz: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0942"},{"id":"BSI:WID-SEC-2026-1232","date":"2026-09-08","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1232"},{"id":"BSI:WID-SEC-2026-2915","date":"2026-09-08","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2915"},{"id":"BSI:WID-SEC-2026-3043","date":"2026-09-08","title":"IBM QRadar SIEM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3043"},{"id":"BSI:WID-SEC-2026-3077","date":"2026-09-08","title":"Redis: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3077"},{"id":"BSI:WID-SEC-2026-3225","date":"2026-09-08","title":"JetBrains IntelliJ IDEA: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3225"},{"id":"BSI:WID-SEC-2026-3226","date":"2026-09-08","title":"JetBrains You Track: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3226"},{"id":"BSI:WID-SEC-2026-3231","date":"2026-09-08","title":"Roundcube: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3231"},{"id":"CISCO-SA-UCS-UEFI-SB-BYPASS-EB6XC5GW","date":"2026-09-08","title":"Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW"},{"id":"GHSA-27P8-2357-5QQV","date":"2026-09-08","title":"xmldom: DocType `name` Injection Bypasses requireWellFormed","source_url":"https://github.com/advisories/GHSA-27p8-2357-5qqv"},{"id":"GHSA-2883-XCG3-V3HH","date":"2026-09-08","title":"js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources","source_url":"https://github.com/advisories/GHSA-2883-xcg3-v3hh"},{"id":"GHSA-2Q42-4Q24-7RGV","date":"2026-09-08","title":"OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree","source_url":"https://github.com/advisories/GHSA-2q42-4q24-7rgv"},{"id":"GHSA-2QH5-382H-3JPC","date":"2026-09-08","title":"CakePHP: SmtpTransport vulnerable to CRLF header injection","source_url":"https://github.com/advisories/GHSA-2qh5-382h-3jpc"},{"id":"GHSA-2V4P-QF9Q-27WJ","date":"2026-09-08","title":"gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers","source_url":"https://github.com/advisories/GHSA-2v4p-qf9q-27wj"},{"id":"GHSA-2X7J-588G-CCC2","date":"2026-09-08","title":"Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list","source_url":"https://github.com/advisories/GHSA-2x7j-588g-ccc2"},{"id":"GHSA-3GQ4-3J92-5W49","date":"2026-09-08","title":"NLTK: Corpus Reader Sandbox Bypass","source_url":"https://github.com/advisories/GHSA-3gq4-3j92-5w49"},{"id":"GHSA-3PX3-54CX-RMW9","date":"2026-09-08","title":"xmldom: Creation-time XML Name/QName validation is bypassable via an embedded line terminator, allowing injection on the default serialization path","source_url":"https://github.com/advisories/GHSA-3px3-54cx-rmw9"},{"id":"GHSA-4R6H-5V86-94P3","date":"2026-09-08","title":"LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process","source_url":"https://github.com/advisories/GHSA-4r6h-5v86-94p3"},{"id":"GHSA-535W-7CP7-47Q4","date":"2026-09-08","title":"multer vulnerable to Denial of Service via oversized array index in field names","source_url":"https://github.com/advisories/GHSA-535w-7cp7-47q4"},{"id":"GHSA-568F-PV23-39P4","date":"2026-09-08","title":"NLTK: Stable FrameNet and NKJP readers parse outside-root XML","source_url":"https://github.com/advisories/GHSA-568f-pv23-39p4"},{"id":"GHSA-65FR-J4P9-VC33","date":"2026-09-08","title":"mongodb: Reject \".\" and NUL bytes in database and collection names","source_url":"https://github.com/advisories/GHSA-65fr-j4p9-vc33"},{"id":"GHSA-6MJ3-QW4J-HGRW","date":"2026-09-08","title":"xmldom: HTML raw-text closing-tag case mismatch causes output amplification","source_url":"https://github.com/advisories/GHSA-6mj3-qw4j-hgrw"},{"id":"GHSA-6WW7-3FRV-CQXH","date":"2026-09-08","title":"NLTK: pathsec SSRF protection can be bypassed when a proxy is configured","source_url":"https://github.com/advisories/GHSA-6ww7-3frv-cqxh"},{"id":"GHSA-7833-FR7J-V32Q","date":"2026-09-08","title":"GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)","source_url":"https://github.com/advisories/GHSA-7833-fr7j-v32q"},{"id":"GHSA-8344-3JMQ-59R6","date":"2026-09-08","title":"xmldom: Quadratic-time attribute deduplication","source_url":"https://github.com/advisories/GHSA-8344-3jmq-59r6"},{"id":"GHSA-8MCC-HRX5-HVXC","date":"2026-09-08","title":"GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination","source_url":"https://github.com/advisories/GHSA-8mcc-hrx5-hvxc"},{"id":"GHSA-8XX6-HGC6-GC2M","date":"2026-09-08","title":"HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)","source_url":"https://github.com/advisories/GHSA-8xx6-hgc6-gc2m"},{"id":"GHSA-93R5-FHX6-VMG9","date":"2026-09-08","title":"xmldom: Quadratic-time parsing via the malformed-input recovery path — `parseElementStartPart` re-scan and `normalize()` adjacent-text merge","source_url":"https://github.com/advisories/GHSA-93r5-fhx6-vmg9"},{"id":"GHSA-965W-775F-MR7G","date":"2026-09-08","title":"xmldom: Quadratic-memory consumption","source_url":"https://github.com/advisories/GHSA-965w-775f-mr7g"},{"id":"GHSA-96P9-RH4F-92CF","date":"2026-09-08","title":"Windows ML CLI: CORS misconfig enables localhost RCE","source_url":"https://github.com/advisories/GHSA-96p9-rh4f-92cf"},{"id":"GHSA-97QJ-X29F-37W7","date":"2026-09-08","title":"NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses","source_url":"https://github.com/advisories/GHSA-97qj-x29f-37w7"},{"id":"GHSA-C7Q8-3CH8-VQPV","date":"2026-09-08","title":"xmldom: Processing Instruction Target Injection Bypasses requireWellFormed","source_url":"https://github.com/advisories/GHSA-c7q8-3ch8-vqpv"},{"id":"GHSA-F833-7JW8-XWRV","date":"2026-09-08","title":"NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)","source_url":"https://github.com/advisories/GHSA-f833-7jw8-xwrv"},{"id":"GHSA-J95F-988M-3J2F","date":"2026-09-08","title":"Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing","source_url":"https://github.com/advisories/GHSA-j95f-988m-3j2f"},{"id":"GHSA-JXJR-3G7G-3944","date":"2026-09-08","title":"xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator","source_url":"https://github.com/advisories/GHSA-jxjr-3g7g-3944"},{"id":"GHSA-P4RW-RVV2-7XWR","date":"2026-09-08","title":"NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement","source_url":"https://github.com/advisories/GHSA-p4rw-rvv2-7xwr"},{"id":"GHSA-QFVM-CV95-JQJF","date":"2026-09-08","title":"multer vulnerable to Denial of Service via file descriptor leak on aborted uploads","source_url":"https://github.com/advisories/GHSA-qfvm-cv95-jqjf"},{"id":"GHSA-R6GQ-WHWQ-MVG9","date":"2026-09-08","title":"NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root","source_url":"https://github.com/advisories/GHSA-r6gq-whwq-mvg9"},{"id":"GHSA-RGJ7-G3M4-5G8C","date":"2026-09-08","title":"sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545","source_url":"https://github.com/advisories/GHSA-rgj7-g3m4-5g8c"},{"id":"GHSA-RVX4-FFVW-M9Q3","date":"2026-09-08","title":"Composer arbitrary command execution via a malicious package's Perforce source URL","source_url":"https://github.com/advisories/GHSA-rvx4-ffvw-m9q3"},{"id":"GHSA-V684-Q882-JGMQ","date":"2026-09-08","title":"SiYuan: The publish-access gate treats encrypted notebooks as publicly accessible by default, allowing anonymous readers to retrieve fully decrypted document content while a notebook is unlocked","source_url":"https://github.com/advisories/GHSA-v684-q882-jgmq"},{"id":"GHSA-VR34-HP96-76PP","date":"2026-09-08","title":"xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator","source_url":"https://github.com/advisories/GHSA-vr34-hp96-76pp"},{"id":"GHSA-W27V-7Q3P-W38R","date":"2026-09-08","title":"SVGO: removeScripts allows executable links through namespace and control-character bypasses","source_url":"https://github.com/advisories/GHSA-w27v-7q3p-w38r"},{"id":"GHSA-WC9G-MQFW-JRWM","date":"2026-09-08","title":"multer vulnerable to Denial of Service via crafted multipart field names","source_url":"https://github.com/advisories/GHSA-wc9g-mqfw-jrwm"},{"id":"GHSA-X4FP-J954-R2F4","date":"2026-09-08","title":"xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser","source_url":"https://github.com/advisories/GHSA-x4fp-j954-r2f4"},{"id":"GHSA-X5PH-MJ9P-RFR8","date":"2026-09-08","title":"NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read","source_url":"https://github.com/advisories/GHSA-x5ph-mj9p-rfr8"},{"id":"IBM:7286591","date":"2026-09-08","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in brace-expansion","source_url":"https://www.ibm.com/support/pages/node/7286591"},{"id":"IBM:7286592","date":"2026-09-08","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in brace-expansion","source_url":"https://www.ibm.com/support/pages/node/7286592"},{"id":"RHSA-2026:63041","date":"2026-09-08","title":"OpenShift Container Platform 4.21.32 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63041"},{"id":"RHSA-2026:63046","date":"2026-09-08","title":"OpenShift Container Platform 4.21.32 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63046"},{"id":"RHSA-2026:63091","date":"2026-09-08","title":"OpenShift Container Platform 4.22.13 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63091"},{"id":"RHSA-2026:63093","date":"2026-09-08","title":"OpenShift Container Platform 4.22.13 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63093"},{"id":"RHSA-2026:63096","date":"2026-09-08","title":"OpenShift Container Platform 4.22.13 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63096"},{"id":"RHSA-2026:63100","date":"2026-09-08","title":"OpenShift Container Platform 4.20.37 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63100"},{"id":"RHSA-2026:63637","date":"2026-09-08","title":"Red Hat build of MicroShift 4.20.37 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63637"},{"id":"RHSA-2026:63639","date":"2026-09-08","title":"Red Hat build of MicroShift 4.22.13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63639"},{"id":"RHSA-2026:64767","date":"2026-09-08","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64767"},{"id":"RHSA-2026:64768","date":"2026-09-08","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64768"},{"id":"RHSA-2026:64769","date":"2026-09-08","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64769"},{"id":"RHSA-2026:64770","date":"2026-09-08","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64770"},{"id":"RHSA-2026:64774","date":"2026-09-08","title":"python3.14-cryptography security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64774"},{"id":"RHSA-2026:64782","date":"2026-09-08","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64782"},{"id":"RHSA-2026:64786","date":"2026-09-08","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64786"},{"id":"RHSA-2026:64795","date":"2026-09-08","title":"python3.14-cryptography security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64795"},{"id":"RHSA-2026:64813","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64813"},{"id":"RHSA-2026:64814","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64814"},{"id":"RHSA-2026:64816","date":"2026-09-08","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64816"},{"id":"RHSA-2026:64823","date":"2026-09-08","title":"redis:6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:64823"},{"id":"RHSA-2026:64824","date":"2026-09-08","title":"redis security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:64824"},{"id":"RHSA-2026:65103","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65103"},{"id":"RHSA-2026:65105","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65105"},{"id":"RHSA-2026:65110","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65110"},{"id":"RHSA-2026:65111","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65111"},{"id":"RHSA-2026:65116","date":"2026-09-08","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65116"},{"id":"RHSA-2026:65117","date":"2026-09-08","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65117"},{"id":"RHSA-2026:65123","date":"2026-09-08","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65123"},{"id":"RHSA-2026:65124","date":"2026-09-08","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65124"},{"id":"RHSA-2026:65126","date":"2026-09-08","title":"RHOAI 2.25.11 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:65126"},{"id":"RHSA-2026:65147","date":"2026-09-08","title":"microcode_ctl security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65147"},{"id":"RHSA-2026:65159","date":"2026-09-08","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65159"},{"id":"RHSA-2026:65160","date":"2026-09-08","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65160"},{"id":"RHSA-2026:65162","date":"2026-09-08","title":"gpsd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65162"},{"id":"RHSA-2026:65335","date":"2026-09-08","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65335"},{"id":"RHSA-2026:65336","date":"2026-09-08","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65336"},{"id":"RHSA-2026:65359","date":"2026-09-08","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65359"},{"id":"RHSA-2026:65375","date":"2026-09-08","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65375"},{"id":"RHSA-2026:65442","date":"2026-09-08","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65442"},{"id":"RHSA-2026:65467","date":"2026-09-08","title":"libyang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65467"},{"id":"RHSA-2026:65477","date":"2026-09-08","title":"libyang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:65477"},{"id":"RHSA-2026:65508","date":"2026-09-08","title":"libyang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65508"},{"id":"RHSA-2026:65516","date":"2026-09-08","title":"libvirt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65516"},{"id":"RHSA-2026:65534","date":"2026-09-08","title":"image-builder security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65534"},{"id":"RHSA-2026:65606","date":"2026-09-08","title":"gpsd-minimal security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65606"},{"id":"RHSA-2026:65633","date":"2026-09-08","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65633"},{"id":"RHSA-2026:65670","date":"2026-09-08","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:65670"},{"id":"BSI:WID-SEC-2026-2025","date":"2026-09-08","title":"libexpat: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2025"},{"id":"BSI:WID-SEC-2026-2126","date":"2026-09-08","title":"gzip: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2126"},{"id":"BSI:WID-SEC-2026-2633","date":"2026-09-08","title":"GNU tar: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2633"},{"id":"BSI:WID-SEC-2026-2724","date":"2026-09-08","title":"libvirt: Mehrere Schwachstellen ermöglichen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2724"},{"id":"BSI:WID-SEC-2026-2760","date":"2026-09-08","title":"Red Hat Enterprise Linux (udisks2): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2760"},{"id":"BSI:WID-SEC-2026-2772","date":"2026-09-08","title":"Intel Prozessor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2772"},{"id":"BSI:WID-SEC-2026-2854","date":"2026-09-08","title":"Red Hat Enterprise Linux (389-ds-base): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2854"},{"id":"BSI:WID-SEC-2026-2913","date":"2026-09-08","title":"PAM: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2913"},{"id":"BSI:WID-SEC-2026-2970","date":"2026-09-08","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2970"},{"id":"BSI:WID-SEC-2026-3179","date":"2026-09-08","title":"ILIAS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3179"},{"id":"BSI:WID-SEC-2026-3209","date":"2026-09-08","title":"MongoDB: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3209"},{"id":"BSI:WID-SEC-2026-3228","date":"2026-09-08","title":"libvirt: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3228"},{"id":"BSI:WID-SEC-2026-3232","date":"2026-09-08","title":"Siemens SICAM 8: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3232"},{"id":"BSI:WID-SEC-2026-3233","date":"2026-09-08","title":"Eclipse Jetty: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3233"},{"id":"ICSA-26-251-01","date":"2026-09-08","title":"CareCam Pro IP Cameras","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-251-01"},{"id":"GHSA-2WM5-Q62R-HMRV","date":"2026-09-08","title":"Colord: Slow rejection of oversized malformed color strings","source_url":"https://github.com/advisories/GHSA-2wm5-q62r-hmrv"},{"id":"GHSA-376H-93R7-7G6F","date":"2026-09-08","title":"Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base","source_url":"https://github.com/advisories/GHSA-376h-93r7-7g6f"},{"id":"GHSA-3HHW-38PF-PXJ6","date":"2026-09-08","title":"NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely","source_url":"https://github.com/advisories/GHSA-3hhw-38pf-pxj6"},{"id":"GHSA-3WXW-XV34-2FRG","date":"2026-09-08","title":"GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)","source_url":"https://github.com/advisories/GHSA-3wxw-xv34-2frg"},{"id":"GHSA-4VPR-X523-8J87","date":"2026-09-08","title":"SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements","source_url":"https://github.com/advisories/GHSA-4vpr-x523-8j87"},{"id":"GHSA-57V5-WQX3-CGJ4","date":"2026-09-08","title":"SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews","source_url":"https://github.com/advisories/GHSA-57v5-wqx3-cgj4"},{"id":"GHSA-5QR2-V392-M9G8","date":"2026-09-08","title":"SWC HTML minifier may allow script element breakout when minifying embedded JSON","source_url":"https://github.com/advisories/GHSA-5qr2-v392-m9g8"},{"id":"GHSA-5WP5-5229-5G6Q","date":"2026-09-08","title":"NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection","source_url":"https://github.com/advisories/GHSA-5wp5-5229-5g6q"},{"id":"GHSA-5XXX-QHH7-9287","date":"2026-09-08","title":"GitPython: Incomplete unsafe_git_revision_options denylist omits --contents/-S, enabling arbitrary file read via Repo.blame()","source_url":"https://github.com/advisories/GHSA-5xxx-qhh7-9287"},{"id":"GHSA-6H8R-XR42-GP59","date":"2026-09-08","title":"xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content","source_url":"https://github.com/advisories/GHSA-6h8r-xr42-gp59"},{"id":"GHSA-6X6C-W9W9-HV4H","date":"2026-09-08","title":"Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname","source_url":"https://github.com/advisories/GHSA-6x6c-w9w9-hv4h"},{"id":"GHSA-72R2-7MFR-5XR9","date":"2026-09-08","title":"NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol","source_url":"https://github.com/advisories/GHSA-72r2-7mfr-5xr9"},{"id":"GHSA-74PJ-6G7R-J55C","date":"2026-09-08","title":"SiYuan: Notebook name, document count, size and timestamps are returned for any notebook, including notebooks hidden from readers, by /api/notebook/getNotebookInfo","source_url":"https://github.com/advisories/GHSA-74pj-6g7r-j55c"},{"id":"GHSA-7HGX-277F-7VMG","date":"2026-09-08","title":"n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy","source_url":"https://github.com/advisories/GHSA-7hgx-277f-7vmg"},{"id":"GHSA-82FW-GWWQ-J7X9","date":"2026-09-08","title":"Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock","source_url":"https://github.com/advisories/GHSA-82fw-gwwq-j7x9"},{"id":"GHSA-8CW4-87C7-C6XX","date":"2026-09-08","title":"node-csv: Prototype replacement still reachable via columns path","source_url":"https://github.com/advisories/GHSA-8cw4-87c7-c6xx"},{"id":"GHSA-8M3C-C648-2XJJ","date":"2026-09-08","title":"Nodemailer: resolveContent() on a MailMessage bypasses disableFileAccess/disableUrlAccess when called with the legacy signature","source_url":"https://github.com/advisories/GHSA-8m3c-c648-2xjj"},{"id":"GHSA-C2JG-2778-GGM4","date":"2026-09-08","title":"Prowler: Stored XSS in HTML reports through unescaped cloud resource tags","source_url":"https://github.com/advisories/GHSA-c2jg-2778-ggm4"},{"id":"GHSA-CC9R-2J5M-2M83","date":"2026-09-08","title":"Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain","source_url":"https://github.com/advisories/GHSA-cc9r-2j5m-2m83"},{"id":"GHSA-CRVJ-82CR-HJCX","date":"2026-09-08","title":"Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials","source_url":"https://github.com/advisories/GHSA-crvj-82cr-hjcx"},{"id":"GHSA-FCCG-MWVH-QQG4","date":"2026-09-08","title":"Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing","source_url":"https://github.com/advisories/GHSA-fccg-mwvh-qqg4"},{"id":"GHSA-G6GW-C38X-MQFC","date":"2026-09-08","title":"Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion","source_url":"https://github.com/advisories/GHSA-g6gw-c38x-mqfc"},{"id":"GHSA-GQVV-2MRQ-WPJV","date":"2026-09-08","title":"Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory","source_url":"https://github.com/advisories/GHSA-gqvv-2mrq-wpjv"},{"id":"GHSA-JXFW-X594-9X9M","date":"2026-09-08","title":"morgan vulnerable to Log Forging via unescaped Unicode line separators","source_url":"https://github.com/advisories/GHSA-jxfw-x594-9x9m"},{"id":"GHSA-MMG6-4QMV-6PC8","date":"2026-09-08","title":"Infracost: Arbitrary file read via config-template readFile symlink traversal","source_url":"https://github.com/advisories/GHSA-mmg6-4qmv-6pc8"},{"id":"GHSA-PF96-P4FJ-6566","date":"2026-09-08","title":"HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated","source_url":"https://github.com/advisories/GHSA-pf96-p4fj-6566"},{"id":"GHSA-Q97C-8QH3-FPC6","date":"2026-09-08","title":"phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery","source_url":"https://github.com/advisories/GHSA-q97c-8qh3-fpc6"},{"id":"GHSA-QC2Q-P7WX-3PX3","date":"2026-09-08","title":"gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion","source_url":"https://github.com/advisories/GHSA-qc2q-p7wx-3px3"},{"id":"GHSA-WMMP-3585-3RMP","date":"2026-09-08","title":"Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain","source_url":"https://github.com/advisories/GHSA-wmmp-3585-3rmp"},{"id":"IBM:7286577","date":"2026-09-08","title":"Security Bulletin: Vunerabilities in IBM SDK affecting Rational Business Developer","source_url":"https://www.ibm.com/support/pages/node/7286577"},{"id":"IBM:7286586","date":"2026-09-08","title":"Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7286586"},{"id":"IBM:7286594","date":"2026-09-08","title":"Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7286594"},{"id":"NCSC-2026-0345","date":"2026-09-08","title":"NCSC-2026-0345 Kwetsbaarheden verholpen in MikroTik RouterOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0345"},{"id":"NCSC-2026-0348","date":"2026-09-08","title":"NCSC-2026-0348 Kwetsbaarheden verholpen in Microsoft Dynamics","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0348"},{"id":"NCSC-2026-0349","date":"2026-09-08","title":"NCSC-2026-0349 Kwetsbaarheden verholpen in Microsoft Exchange server","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349"},{"id":"NCSC-2026-0350","date":"2026-09-08","title":"NCSC-2026-0350 Kwetsbaarheden verholpen in SQL Server","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0350"},{"id":"NCSC-2026-0351","date":"2026-09-08","title":"NCSC-2026-0351 Kwetsbaarheden verholpen in Microsoft Developer Tools","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351"},{"id":"NCSC-2026-0352","date":"2026-09-08","title":"NCSC-2026-0352 Kwetsbaarheden verholpen in Microsoft Office","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0352"},{"id":"USN-8670-3","date":"2026-09-08","title":"USN-8670-3: curl vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8670-3"},{"id":"USN-8679-2","date":"2026-09-08","title":"USN-8679-2: Vim vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8679-2"},{"id":"USN-8735-1","date":"2026-09-08","title":"USN-8735-1: HSQLDB vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8735-1"},{"id":"USN-8736-1","date":"2026-09-08","title":"USN-8736-1: Perl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8736-1"},{"id":"USN-8737-1","date":"2026-09-08","title":"USN-8737-1: GNU C Library vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8737-1"},{"id":"USN-8738-1","date":"2026-09-08","title":"USN-8738-1: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8738-1"},{"id":"USN-8739-1","date":"2026-09-08","title":"USN-8739-1: ImageMagick vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8739-1"},{"id":"BSI:WID-SEC-2026-2967","date":"2026-09-08","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2967"},{"id":"GHSA-6W3J-5FW6-R9VR","date":"2026-09-08","title":"joi: Prototype pollution via a `__proto__` language key in custom messages","source_url":"https://github.com/advisories/GHSA-6w3j-5fw6-r9vr"},{"id":"GHSA-GG4H-3HG2-GRPC","date":"2026-09-08","title":"joi: object().rename() with a template target can set the validated object's prototype","source_url":"https://github.com/advisories/GHSA-gg4h-3hg2-grpc"},{"id":"GHSA-P2W3-6X73-2F6X","date":"2026-09-08","title":"Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher","source_url":"https://github.com/advisories/GHSA-p2w3-6x73-2f6x"},{"id":"GHSA-QVFW-J98X-7Q72","date":"2026-09-08","title":"multer vulnerable to file size limit bypass via async fileFilter race condition","source_url":"https://github.com/advisories/GHSA-qvfw-j98x-7q72"},{"id":"BSI:WID-SEC-2026-2927","date":"2026-09-07","title":"Citrix Systems NetScaler (Gateway und ADC): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2927"},{"id":"BSI:WID-SEC-2026-3193","date":"2026-09-07","title":"MikroTik RouterOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3193"},{"id":"IBM:7279347","date":"2026-09-07","title":"Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7279347"},{"id":"IBM:7286489","date":"2026-09-07","title":"Security Bulletin: IBM Maximo Application Suite uses undici-7.28.0.tgz which is vulnerable to CVE-2026-13697.","source_url":"https://www.ibm.com/support/pages/node/7286489"},{"id":"IBM:7286490","date":"2026-09-07","title":"Security Bulletin: Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","source_url":"https://www.ibm.com/support/pages/node/7286490"},{"id":"IBM:7286493","date":"2026-09-07","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in various components","source_url":"https://www.ibm.com/support/pages/node/7286493"},{"id":"IBM:7286495","date":"2026-09-07","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7286495"},{"id":"IBM:7286497","date":"2026-09-07","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7286497"},{"id":"IBM:7286515","date":"2026-09-07","title":"Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7286515"},{"id":"IBM:7286516","date":"2026-09-07","title":"Security Bulletin: Multiple vulnerabilities affect IBM Db2 Warehouse container images.","source_url":"https://www.ibm.com/support/pages/node/7286516"},{"id":"IBM:7286562","date":"2026-09-07","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286562"},{"id":"IBM:7286564","date":"2026-09-07","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286564"},{"id":"IBM:7286566","date":"2026-09-07","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286566"},{"id":"NCSC-2026-0342","date":"2026-09-07","title":"NCSC-2026-0342 Kwetsbaarheid verholpen in N-central van N-able","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0342"},{"id":"NCSC-2026-0343","date":"2026-09-07","title":"NCSC-2026-0343 Kwetsbaarheden verholpen in GeoNetwork door OpenGeo","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0343"},{"id":"BSI:WID-SEC-2025-1988","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1988"},{"id":"BSI:WID-SEC-2025-2092","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2092"},{"id":"BSI:WID-SEC-2025-2194","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2194"},{"id":"BSI:WID-SEC-2025-2431","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2431"},{"id":"BSI:WID-SEC-2026-0215","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0215"},{"id":"BSI:WID-SEC-2026-0774","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0774"},{"id":"BSI:WID-SEC-2026-0961","date":"2026-09-07","title":"Netgate pfSense Plus und CE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0961"},{"id":"BSI:WID-SEC-2026-1346","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1346"},{"id":"BSI:WID-SEC-2026-1379","date":"2026-09-07","title":"Ollama: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1379"},{"id":"BSI:WID-SEC-2026-2844","date":"2026-09-07","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2844"},{"id":"BSI:WID-SEC-2026-2911","date":"2026-09-07","title":"Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2911"},{"id":"BSI:WID-SEC-2026-3132","date":"2026-09-07","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3132"},{"id":"BSI:WID-SEC-2026-3173","date":"2026-09-07","title":"MISP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3173"},{"id":"BSI:WID-SEC-2026-3207","date":"2026-09-07","title":"Snipe-IT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3207"},{"id":"BSI:WID-SEC-2026-3210","date":"2026-09-07","title":"OpenCTI: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3210"},{"id":"BSI:WID-SEC-2026-3211","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3211"},{"id":"BSI:WID-SEC-2026-3212","date":"2026-09-07","title":"SmarterTools SmarterMail: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3212"},{"id":"IBM:7286491","date":"2026-09-07","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)","source_url":"https://www.ibm.com/support/pages/node/7286491"},{"id":"IBM:7286492","date":"2026-09-07","title":"Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7286492"},{"id":"IBM:7286496","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules adm-zip and websocket-driver (CVE-2026-39244, CVE-2026-54466 and CVE-2026-54490)","source_url":"https://www.ibm.com/support/pages/node/7286496"},{"id":"IBM:7286498","date":"2026-09-07","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7286498"},{"id":"IBM:7286502","date":"2026-09-07","title":"Security Bulletin: IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri (CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172)","source_url":"https://www.ibm.com/support/pages/node/7286502"},{"id":"IBM:7286503","date":"2026-09-07","title":"Security Bulletin: IBM ApplinX is vulnerable to being directed to unintended host due to the use of fast-uri (CVE-2026-18446)","source_url":"https://www.ibm.com/support/pages/node/7286503"},{"id":"IBM:7286506","date":"2026-09-07","title":"Security Bulletin: IBM Documentation Offline is vulnerable to `Denial of Service via __proto__ header name in req.headersDistinct` due to Node.js (CVE-2026-21710)","source_url":"https://www.ibm.com/support/pages/node/7286506"},{"id":"IBM:7286522","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules","source_url":"https://www.ibm.com/support/pages/node/7286522"},{"id":"IBM:7286530","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7286530"},{"id":"IBM:7286532","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to privilege escalation and Denial of Service (CVE-2026-75624)","source_url":"https://www.ibm.com/support/pages/node/7286532"},{"id":"IBM:7286534","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Apache Neethi (CVE-2026-66142,CVE-2026-66143 & CVE-2026-66144)","source_url":"https://www.ibm.com/support/pages/node/7286534"},{"id":"IBM:7286535","date":"2026-09-07","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono","source_url":"https://www.ibm.com/support/pages/node/7286535"},{"id":"BSI:WID-SEC-2025-1921","date":"2026-09-07","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1921"},{"id":"BSI:WID-SEC-2026-1252","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1252"},{"id":"BSI:WID-SEC-2026-1314","date":"2026-09-07","title":"Netgate pfSense: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1314"},{"id":"BSI:WID-SEC-2026-1332","date":"2026-09-07","title":"libssh2: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1332"},{"id":"BSI:WID-SEC-2026-1756","date":"2026-09-07","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1756"},{"id":"BSI:WID-SEC-2026-2158","date":"2026-09-07","title":"Linux Kernel: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2158"},{"id":"BSI:WID-SEC-2026-2175","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2175"},{"id":"BSI:WID-SEC-2026-2313","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2313"},{"id":"BSI:WID-SEC-2026-2570","date":"2026-09-07","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2570"},{"id":"BSI:WID-SEC-2026-3191","date":"2026-09-07","title":"Langflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3191"},{"id":"BSI:WID-SEC-2026-3201","date":"2026-09-07","title":"Apache Ant: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3201"},{"id":"BSI:WID-SEC-2026-3202","date":"2026-09-07","title":"OpenVPN: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3202"},{"id":"BSI:WID-SEC-2026-3203","date":"2026-09-07","title":"MISP: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3203"},{"id":"BSI:WID-SEC-2026-3204","date":"2026-09-07","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3204"},{"id":"BSI:WID-SEC-2026-3206","date":"2026-09-07","title":"Samsung Exynos: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3206"},{"id":"BSI:WID-SEC-2026-3208","date":"2026-09-07","title":"IBM Integration Bus und IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3208"},{"id":"IBM:7286504","date":"2026-09-07","title":"Security Bulletin: IBM ApplinX is vulnerable to an Improper Neutralization of Input during web generation and Insufficient verification of data authenticity vulnerabilities due to use of Angular compiler and common-joins (CVE-2026-69151, CVE-2026-68945)","source_url":"https://www.ibm.com/support/pages/node/7286504"},{"id":"USN-8726-1","date":"2026-09-07","title":"USN-8726-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8726-1"},{"id":"USN-8727-1","date":"2026-09-07","title":"USN-8727-1: Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8727-1"},{"id":"USN-8728-1","date":"2026-09-07","title":"USN-8728-1: Linux kernel (GCP) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8728-1"},{"id":"USN-8729-1","date":"2026-09-07","title":"USN-8729-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8729-1"},{"id":"USN-8730-1","date":"2026-09-07","title":"USN-8730-1: Linux kernel vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8730-1"},{"id":"USN-8731-1","date":"2026-09-07","title":"USN-8731-1: MiniUPnPd vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8731-1"},{"id":"USN-8732-1","date":"2026-09-07","title":"USN-8732-1: Minetest vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8732-1"},{"id":"USN-8733-1","date":"2026-09-07","title":"USN-8733-1: Gzip vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8733-1"},{"id":"USN-8734-1","date":"2026-09-07","title":"USN-8734-1: PHP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8734-1"},{"id":"IBM:7286479","date":"2026-09-06","title":"Security Bulletin: Multiple Vulnerabilities in IBM Event Streams","source_url":"https://www.ibm.com/support/pages/node/7286479"},{"id":"IBM:7286476","date":"2026-09-05","title":"Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-68494","source_url":"https://www.ibm.com/support/pages/node/7286476"},{"id":"BSI:WID-SEC-2026-3189","date":"2026-09-04","title":"vm2: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3189"},{"id":"GHSA-6V2G-FPXH-PMMH","date":"2026-09-04","title":"CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning","source_url":"https://github.com/advisories/GHSA-6v2g-fpxh-pmmh"},{"id":"GHSA-RH53-XVX2-J327","date":"2026-09-04","title":"OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation","source_url":"https://github.com/advisories/GHSA-rh53-xvx2-j327"},{"id":"IBM:7286368","date":"2026-09-04","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to Missing Release of Resource after Effective Lifetime and Improper Certificate Validation due to HttpClient (CVE-2026-64607 & CVE-2026-71290)","source_url":"https://www.ibm.com/support/pages/node/7286368"},{"id":"IBM:7286374","date":"2026-09-04","title":"Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for Aug 2026- Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7286374"},{"id":"IBM:7286379","date":"2026-09-04","title":"Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by transformers(Publicly disclosed vulnerability) ( CVE-2024-11393, CVE-2024-11394, CVE-2024-11392, CVE-2024-12720, CVE-2024-3568)","source_url":"https://www.ibm.com/support/pages/node/7286379"},{"id":"NCSC-2026-0341","date":"2026-09-04","title":"NCSC-2026-0341 Kwetsbaarheden verholpen in Google Chrome","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0341"},{"id":"BSI:WID-SEC-2026-0379","date":"2026-09-04","title":"Intel Prozessoren: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0379"},{"id":"BSI:WID-SEC-2026-0409","date":"2026-09-04","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0409"},{"id":"BSI:WID-SEC-2026-2747","date":"2026-09-04","title":"OpenSSH: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2747"},{"id":"BSI:WID-SEC-2026-2836","date":"2026-09-04","title":"Netgate pfSense: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2836"},{"id":"BSI:WID-SEC-2026-2933","date":"2026-09-04","title":"Splunk SOAR: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2933"},{"id":"BSI:WID-SEC-2026-2936","date":"2026-09-04","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2936"},{"id":"BSI:WID-SEC-2026-2958","date":"2026-09-04","title":"IBM License Metric Tool: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2958"},{"id":"BSI:WID-SEC-2026-3000","date":"2026-09-04","title":"Red Hat Enterprise Linux (Apicurio Registry): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3000"},{"id":"BSI:WID-SEC-2026-3007","date":"2026-09-04","title":"Apache Tomcat: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3007"},{"id":"BSI:WID-SEC-2026-3013","date":"2026-09-04","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3013"},{"id":"BSI:WID-SEC-2026-3066","date":"2026-09-04","title":"MongoDB Clients: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3066"},{"id":"BSI:WID-SEC-2026-3072","date":"2026-09-04","title":"Composer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3072"},{"id":"BSI:WID-SEC-2026-3073","date":"2026-09-04","title":"Rancher: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3073"},{"id":"BSI:WID-SEC-2026-3174","date":"2026-09-04","title":"GeoNetwork: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3174"},{"id":"BSI:WID-SEC-2026-3177","date":"2026-09-04","title":"Kibana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3177"},{"id":"BSI:WID-SEC-2026-3178","date":"2026-09-04","title":"SEPPmail Secure E-Mail Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3178"},{"id":"BSI:WID-SEC-2026-3180","date":"2026-09-04","title":"util-linux: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3180"},{"id":"BSI:WID-SEC-2026-3186","date":"2026-09-04","title":"Microsoft Clouddienste: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3186"},{"id":"GHSA-34FJ-MWM6-FJFG","date":"2026-09-04","title":"SiYuan: The session-cookie signing key (Conf.CookieKey) is returned to anonymous readers by /api/system/getConf","source_url":"https://github.com/advisories/GHSA-34fj-mwm6-fjfg"},{"id":"GHSA-62F5-CP2P-VQ95","date":"2026-09-04","title":"CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository","source_url":"https://github.com/advisories/GHSA-62f5-cp2p-vq95"},{"id":"GHSA-7J5W-7R7X-9V27","date":"2026-09-04","title":"CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval","source_url":"https://github.com/advisories/GHSA-7j5w-7r7x-9v27"},{"id":"GHSA-7Q9C-HPX7-9CWM","date":"2026-09-04","title":"TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop","source_url":"https://github.com/advisories/GHSA-7q9c-hpx7-9cwm"},{"id":"GHSA-848M-R628-VRXW","date":"2026-09-04","title":"SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path","source_url":"https://github.com/advisories/GHSA-848m-r628-vrxw"},{"id":"GHSA-C6MW-8XH8-GPQ6","date":"2026-09-04","title":"CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval","source_url":"https://github.com/advisories/GHSA-c6mw-8xh8-gpq6"},{"id":"GHSA-G29H-PFMP-QP9R","date":"2026-09-04","title":"CodeWhale: exec_shell_interact sends LLM-controlled input to a running shell without an approval prompt (privilege escalation)","source_url":"https://github.com/advisories/GHSA-g29h-pfmp-qp9r"},{"id":"GHSA-GX45-XRJ5-G6C4","date":"2026-09-04","title":"CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository","source_url":"https://github.com/advisories/GHSA-gx45-xrj5-g6c4"},{"id":"GHSA-H4V5-CRX2-3CV4","date":"2026-09-04","title":"SiYuan: Non-administrator responses from /api/system/getConf omit three secrets that the configuration-export path explicitly strips, disclosing the session-cookie signing key and the OS username to anonymous readers","source_url":"https://github.com/advisories/GHSA-h4v5-crx2-3cv4"},{"id":"GHSA-H539-C7R8-3XQ4","date":"2026-09-04","title":"CodeWhale: js_execution leaks parent environment to model context via missing env scrub","source_url":"https://github.com/advisories/GHSA-h539-c7r8-3xq4"},{"id":"GHSA-H6W7-XXCF-W2MQ","date":"2026-09-04","title":"SiYuan: Embedded (transclusion) block content is returned without publish-access filtering, leaking private and password-protected document content to anonymous readers","source_url":"https://github.com/advisories/GHSA-h6w7-xxcf-w2mq"},{"id":"GHSA-MFRJ-V65R-979C","date":"2026-09-04","title":"SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns","source_url":"https://github.com/advisories/GHSA-mfrj-v65r-979c"},{"id":"GHSA-W7WX-5Q49-R59W","date":"2026-09-04","title":"CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes","source_url":"https://github.com/advisories/GHSA-w7wx-5q49-r59w"},{"id":"GHSA-WRJ3-VJ8C-784F","date":"2026-09-04","title":"CodeWhale: rlm_eval auto-approves arbitrary Python execution, bypassing the user's approval policy (RCE)","source_url":"https://github.com/advisories/GHSA-wrj3-vj8c-784f"},{"id":"IBM:7286357","date":"2026-09-04","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Management Interoperability Services(CMIS) 3.0.7-IF15","source_url":"https://www.ibm.com/support/pages/node/7286357"},{"id":"IBM:7286362","date":"2026-09-04","title":"Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-10842)","source_url":"https://www.ibm.com/support/pages/node/7286362"},{"id":"IBM:7286363","date":"2026-09-04","title":"Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-11897)","source_url":"https://www.ibm.com/support/pages/node/7286363"},{"id":"IBM:7286364","date":"2026-09-04","title":"Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-15057)","source_url":"https://www.ibm.com/support/pages/node/7286364"},{"id":"IBM:7286365","date":"2026-09-04","title":"Security Bulletin: IBM Watson Explorer is affected by a vulnerability in IBM WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7286365"},{"id":"IBM:7286372","date":"2026-09-04","title":"Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7286372"},{"id":"IBM:7286387","date":"2026-09-04","title":"Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026","source_url":"https://www.ibm.com/support/pages/node/7286387"},{"id":"IBM:7286433","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286433"},{"id":"IBM:7286434","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286434"},{"id":"IBM:7286435","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286435"},{"id":"IBM:7286436","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286436"},{"id":"IBM:7286437","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286437"},{"id":"IBM:7286438","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286438"},{"id":"IBM:7286440","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286440"},{"id":"IBM:7286441","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286441"},{"id":"IBM:7286442","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286442"},{"id":"IBM:7286443","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286443"},{"id":"IBM:7286444","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286444"},{"id":"IBM:7286445","date":"2026-09-04","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7286445"},{"id":"RHSA-2026:63537","date":"2026-09-04","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63537"},{"id":"RHSA-2026:63538","date":"2026-09-04","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:63538"},{"id":"RHSA-2026:63539","date":"2026-09-04","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:63539"},{"id":"BSI:WID-SEC-2025-1401","date":"2026-09-04","title":"Puppet: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1401"},{"id":"BSI:WID-SEC-2026-0353","date":"2026-09-04","title":"libpng: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0353"},{"id":"BSI:WID-SEC-2026-0419","date":"2026-09-04","title":"vim (NetBeans): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0419"},{"id":"BSI:WID-SEC-2026-2757","date":"2026-09-04","title":"Intel UEFI Reference BIOS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2757"},{"id":"BSI:WID-SEC-2026-2758","date":"2026-09-04","title":"Intel Chipset: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2758"},{"id":"BSI:WID-SEC-2026-2776","date":"2026-09-04","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2776"},{"id":"BSI:WID-SEC-2026-2782","date":"2026-09-04","title":"Apache HttpComponents: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2782"},{"id":"BSI:WID-SEC-2026-2957","date":"2026-09-04","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2957"},{"id":"BSI:WID-SEC-2026-3080","date":"2026-09-04","title":"Red Hat Enterprise Linux (iperf3): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3080"},{"id":"BSI:WID-SEC-2026-3095","date":"2026-09-04","title":"Red Hat Enterprise Linux (pipewire,dbus-broker): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3095"},{"id":"BSI:WID-SEC-2026-3176","date":"2026-09-04","title":"bluez: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3176"},{"id":"BSI:WID-SEC-2026-3181","date":"2026-09-04","title":"Ollama: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3181"},{"id":"BSI:WID-SEC-2026-3182","date":"2026-09-04","title":"MongoDB: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3182"},{"id":"BSI:WID-SEC-2026-3185","date":"2026-09-04","title":"xpdf: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3185"},{"id":"BSI:WID-SEC-2026-3187","date":"2026-09-04","title":"vllm: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3187"},{"id":"GHSA-48JH-3GJ7-FG8V","date":"2026-09-04","title":"vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m","source_url":"https://github.com/advisories/GHSA-48jh-3gj7-fg8v"},{"id":"GHSA-5W7R-F4CG-RQQ7","date":"2026-09-04","title":"SiYuan: Missing publish-access filter on the HPath/path-resolution endpoints discloses the private document tree to anonymous readers","source_url":"https://github.com/advisories/GHSA-5w7r-f4cg-rqq7"},{"id":"GHSA-66R2-5GWJ-GXM2","date":"2026-09-04","title":"SurrealDB: Writes in a PERMISSIONS clause bypass table permissions","source_url":"https://github.com/advisories/GHSA-66r2-5gwj-gxm2"},{"id":"GHSA-8737-QX52-HJFF","date":"2026-09-04","title":"vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds","source_url":"https://github.com/advisories/GHSA-8737-qx52-hjff"},{"id":"GHSA-F2RW-W22V-54VH","date":"2026-09-04","title":"SiYuan: getEncryptedNotebookStatus discloses names and current lock/unlock state of all encrypted notebooks to anonymous readers","source_url":"https://github.com/advisories/GHSA-f2rw-w22v-54vh"},{"id":"GHSA-FGMR-7W36-9QFQ","date":"2026-09-04","title":"SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers","source_url":"https://github.com/advisories/GHSA-fgmr-7w36-9qfq"},{"id":"GHSA-HWRM-C4CX-RF4J","date":"2026-09-04","title":"vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages","source_url":"https://github.com/advisories/GHSA-hwrm-c4cx-rf4j"},{"id":"GHSA-M3C3-78FH-W3W7","date":"2026-09-04","title":"SurrealDB allows bypass of deny-net flags via DNS resolution","source_url":"https://github.com/advisories/GHSA-m3c3-78fh-w3w7"},{"id":"GHSA-MP7R-57W4-5QM3","date":"2026-09-04","title":"SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password","source_url":"https://github.com/advisories/GHSA-mp7r-57w4-5qm3"},{"id":"GHSA-PR7F-P5MW-FC87","date":"2026-09-04","title":"vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts","source_url":"https://github.com/advisories/GHSA-pr7f-p5mw-fc87"},{"id":"IBM:7286370","date":"2026-09-04","title":"Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in DOMPurify","source_url":"https://www.ibm.com/support/pages/node/7286370"},{"id":"USN-8714-2","date":"2026-09-04","title":"USN-8714-2: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8714-2"},{"id":"USN-8725-1","date":"2026-09-04","title":"USN-8725-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8725-1"},{"id":"BSI:WID-SEC-2026-3188","date":"2026-09-04","title":"ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3188"},{"id":"BSI:WID-SEC-2026-3192","date":"2026-09-04","title":"Checkmk: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3192"},{"id":"GHSA-6HXQ-P678-4HR2","date":"2026-09-04","title":"SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor","source_url":"https://github.com/advisories/GHSA-6hxq-p678-4hr2"},{"id":"BSI:WID-SEC-2026-1190","date":"2026-09-03","title":"GNU libc: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1190"},{"id":"BSI:WID-SEC-2026-3093","date":"2026-09-03","title":"JFrog Artifactory: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3093"},{"id":"BSI:WID-SEC-2026-3164","date":"2026-09-03","title":"Langflow: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3164"},{"id":"GHSA-2H9G-J24R-H63G","date":"2026-09-03","title":"Orval: Import-time RCE via array-items default -> zod module-level template literal","source_url":"https://github.com/advisories/GHSA-2h9g-j24r-h63g"},{"id":"GHSA-2W86-XFRC-G85R","date":"2026-09-03","title":"Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator","source_url":"https://github.com/advisories/GHSA-2w86-xfrc-g85r"},{"id":"GHSA-3575-W9FC-C2J6","date":"2026-09-03","title":"Orval: Import-time RCE via enum-typed default -> zod module-level template literal","source_url":"https://github.com/advisories/GHSA-3575-w9fc-c2j6"},{"id":"GHSA-4MVJ-M6J5-PMF7","date":"2026-09-03","title":"unstructured: Server-Side Request Forgery in the URL-based partitioning","source_url":"https://github.com/advisories/GHSA-4mvj-m6j5-pmf7"},{"id":"GHSA-6437-GXHQ-PQV8","date":"2026-09-03","title":"Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client","source_url":"https://github.com/advisories/GHSA-6437-gxhq-pqv8"},{"id":"GHSA-653Q-5476-X79G","date":"2026-09-03","title":"Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli","source_url":"https://github.com/advisories/GHSA-653q-5476-x79g"},{"id":"GHSA-88F2-FPV8-89Q2","date":"2026-09-03","title":"Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)","source_url":"https://github.com/advisories/GHSA-88f2-fpv8-89q2"},{"id":"GHSA-8J6P-R8JG-MXQH","date":"2026-09-03","title":"Orval: Import-time RCE via header-parameter default -> zod module-level template literal","source_url":"https://github.com/advisories/GHSA-8j6p-r8jg-mxqh"},{"id":"GHSA-FG9P-MRXR-HVQ7","date":"2026-09-03","title":"Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)","source_url":"https://github.com/advisories/GHSA-fg9p-mrxr-hvq7"},{"id":"GHSA-FPH3-GHQ9-VW66","date":"2026-09-03","title":"SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB","source_url":"https://github.com/advisories/GHSA-fph3-ghq9-vw66"},{"id":"GHSA-Q2VG-7QGX-X5FC","date":"2026-09-03","title":"SiYuan: SQL injection in backlink/mention search via unescaped stored and client input (publish mode): first-order (client keyword) and second-order (stored document title) breakout on read-write handle","source_url":"https://github.com/advisories/GHSA-q2vg-7qgx-x5fc"},{"id":"GHSA-VH22-H7HF-WWW7","date":"2026-09-03","title":"SiYuan: Unauthenticated arbitrary SQL execution via searchEmbedBlock (publish mode) : reader-reachable raw statement on read-write handle, cross-notebook read/write","source_url":"https://github.com/advisories/GHSA-vh22-h7hf-www7"},{"id":"GHSA-W727-8J6C-2RJ4","date":"2026-09-03","title":"Orval: Import-time RCE via schema default -> zod module-level template literal","source_url":"https://github.com/advisories/GHSA-w727-8j6c-2rj4"},{"id":"IBM:7285133","date":"2026-09-03","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026","source_url":"https://www.ibm.com/support/pages/node/7285133"},{"id":"IBM:7286196","date":"2026-09-03","title":"Security Bulletin: IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7286196"},{"id":"IBM:7286233","date":"2026-09-03","title":"Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images","source_url":"https://www.ibm.com/support/pages/node/7286233"},{"id":"IBM:7286237","date":"2026-09-03","title":"Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple Bouncy Castle vulnerabilities that could cause denial of service, resource exhaustion, cryptographic verification bypass, or other security impacts.","source_url":"https://www.ibm.com/support/pages/node/7286237"},{"id":"IBM:7286274","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-41409, CVE-2026-41635)","source_url":"https://www.ibm.com/support/pages/node/7286274"},{"id":"IBM:7286278","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Code Injection, Prototype Pollution (CVE-2025-13465, CVE-2026-2950, CVE-2026-4800)","source_url":"https://www.ibm.com/support/pages/node/7286278"},{"id":"IBM:7286279","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Authorization (CVE-2026-33186)","source_url":"https://www.ibm.com/support/pages/node/7286279"},{"id":"IBM:7286280","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Code Injection, Improper Check for Unusual or Exceptional Conditions, Cross-site Scripting (CVE-2026-33937, CVE-2026-33938, CVE-2026-33939, CVE-2026-33940, CVE-2026-33941)","source_url":"https://www.ibm.com/support/pages/node/7286280"},{"id":"IBM:7286283","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Deserialization of Untrusted Data (CVE-2026-42778, CVE-2026-42779)","source_url":"https://www.ibm.com/support/pages/node/7286283"},{"id":"NCSC-2026-0338","date":"2026-09-03","title":"NCSC-2026-0338 Kwetsbaarheden verholpen in Cisco Nexus 9000 Series, IOS XR Software en Secure Email","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0338"},{"id":"NCSC-2026-0339","date":"2026-09-03","title":"NCSC-2026-0339 Kwetsbaarheden verholpen in HPE Networking Fabric Composer","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0339"},{"id":"NCSC-2026-0340","date":"2026-09-03","title":"NCSC-2026-0340 Kwetsbaarheden verholpen in Aruba Networks ArubaOS-CX","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0340"},{"id":"BSI:WID-SEC-2026-0940","date":"2026-09-03","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0940"},{"id":"BSI:WID-SEC-2026-1312","date":"2026-09-03","title":"GnuTLS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1312"},{"id":"BSI:WID-SEC-2026-2263","date":"2026-09-03","title":"LiteLLM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2263"},{"id":"BSI:WID-SEC-2026-3165","date":"2026-09-03","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3165"},{"id":"BSI:WID-SEC-2026-3166","date":"2026-09-03","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3166"},{"id":"BSI:WID-SEC-2026-3167","date":"2026-09-03","title":"Hitachi Energy RTU500: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3167"},{"id":"BSI:WID-SEC-2026-3168","date":"2026-09-03","title":"Drupal Erweiterungen: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3168"},{"id":"BSI:WID-SEC-2026-3170","date":"2026-09-03","title":"BigBlueButton: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3170"},{"id":"BSI:WID-SEC-2026-3172","date":"2026-09-03","title":"IBM i: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3172"},{"id":"GHSA-2Q7J-2VHX-56G8","date":"2026-09-03","title":"OpenClaw Feishu tools could ignore per-account disablement","source_url":"https://github.com/advisories/GHSA-2q7j-2vhx-56g8"},{"id":"GHSA-36V8-MPJM-8J5R","date":"2026-09-03","title":"SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered","source_url":"https://github.com/advisories/GHSA-36v8-mpjm-8j5r"},{"id":"GHSA-3MP7-4RH5-JRV9","date":"2026-09-03","title":"SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy","source_url":"https://github.com/advisories/GHSA-3mp7-4rh5-jrv9"},{"id":"GHSA-6983-JFQ8-485W","date":"2026-09-03","title":"Phoenix: Unbounded channel joins per transport enables DoS over few connections","source_url":"https://github.com/advisories/GHSA-6983-jfq8-485w"},{"id":"GHSA-69MH-GVH4-8GP7","date":"2026-09-03","title":"SiYuan: Full-content disclosure of publish-disabled documents via getHeading*Transaction endpoints (publish mode): reader-reachable rendered DOM with no publish-access check","source_url":"https://github.com/advisories/GHSA-69mh-gvh4-8gp7"},{"id":"GHSA-6C5V-HQJR-5XXP","date":"2026-09-03","title":"amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload","source_url":"https://github.com/advisories/GHSA-6c5v-hqjr-5xxp"},{"id":"GHSA-79WM-X847-7CVG","date":"2026-09-03","title":"Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)","source_url":"https://github.com/advisories/GHSA-79wm-x847-7cvg"},{"id":"GHSA-7HM9-V7VF-7G4W","date":"2026-09-03","title":"SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure","source_url":"https://github.com/advisories/GHSA-7hm9-v7vf-7g4w"},{"id":"GHSA-7J72-F6WG-CXW6","date":"2026-09-03","title":"SiYuan: Anonymous publish-password authentication bypass via getHeadingChildrenDOM / getHeading*Transaction / getBacklinkDoc (publish mode)","source_url":"https://github.com/advisories/GHSA-7j72-f6wg-cxw6"},{"id":"GHSA-82X6-Q7MM-W9CF","date":"2026-09-03","title":"toml-node: Uncontrolled Recursion","source_url":"https://github.com/advisories/GHSA-82x6-q7mm-w9cf"},{"id":"GHSA-8CJ9-R88M-8945","date":"2026-09-03","title":"Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation","source_url":"https://github.com/advisories/GHSA-8cj9-r88m-8945"},{"id":"GHSA-8X84-R2FF-H8PQ","date":"2026-09-03","title":"SiYuan: Encrypted-notebook key-derivation material and wrapped notebook keys disclosed to anonymous readers, enabling offline master-password cracking","source_url":"https://github.com/advisories/GHSA-8x84-r2ff-h8pq"},{"id":"GHSA-99RQ-75J6-5J9F","date":"2026-09-03","title":"SiYuan: Stored and reflected XSS in SiYuan through an SVG sanitizer bypass","source_url":"https://github.com/advisories/GHSA-99rq-75j6-5j9f"},{"id":"GHSA-CXVF-GVFQ-36W2","date":"2026-09-03","title":"Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision","source_url":"https://github.com/advisories/GHSA-cxvf-gvfq-36w2"},{"id":"GHSA-JCVH-XF52-2CWM","date":"2026-09-03","title":"ffuf denial of service (OOM) via HTTP response decompression bomb","source_url":"https://github.com/advisories/GHSA-jcvh-xf52-2cwm"},{"id":"GHSA-M7FP-H3P4-HR49","date":"2026-09-03","title":"LiquidJS has an infinite loop vulnerability in its `strip_html` filter","source_url":"https://github.com/advisories/GHSA-m7fp-h3p4-hr49"},{"id":"GHSA-MW8R-MW84-88V2","date":"2026-09-03","title":"SiYuan: Publish-boundary bypass via WebSocket broadcast: anonymous readers receive a live unfiltered feed of all edits including protected/forbidden documents (publish mode)","source_url":"https://github.com/advisories/GHSA-mw8r-mw84-88v2"},{"id":"GHSA-P95V-992W-H6C3","date":"2026-09-03","title":"TOON: Prototype pollution when decoding untrusted TOON input","source_url":"https://github.com/advisories/GHSA-p95v-992w-h6c3"},{"id":"GHSA-V5MP-JGW5-2X6J","date":"2026-09-03","title":"toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization","source_url":"https://github.com/advisories/GHSA-v5mp-jgw5-2x6j"},{"id":"GHSA-VPJW-WF5H-CGPQ","date":"2026-09-03","title":"SiYuan: Graph endpoints omit the publish-password tier: anonymous readers receive block-level content of password-protected documents","source_url":"https://github.com/advisories/GHSA-vpjw-wf5h-cgpq"},{"id":"GHSA-W8WF-3QVJ-6XQF","date":"2026-09-03","title":"OpenClaw Feishu permission tools could ignore per-account disablement","source_url":"https://github.com/advisories/GHSA-w8wf-3qvj-6xqf"},{"id":"GHSA-X67C-8PWR-M8G3","date":"2026-09-03","title":"SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel","source_url":"https://github.com/advisories/GHSA-x67c-8pwr-m8g3"},{"id":"IBM:7286217","date":"2026-09-03","title":"Security Bulletin:Vulnerabilities exists in callhome of IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7286217"},{"id":"IBM:7286220","date":"2026-09-03","title":"Security Bulletin: Due to the use of mchange-commons-java, IBM webMethods BPM is vulnerable to Unsafe Reflection ( CVE-2026-55153 )","source_url":"https://www.ibm.com/support/pages/node/7286220"},{"id":"IBM:7286223","date":"2026-09-03","title":"Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7286223"},{"id":"IBM:7286254","date":"2026-09-03","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-59899, CVE-2026-59921)","source_url":"https://www.ibm.com/support/pages/node/7286254"},{"id":"IBM:7286255","date":"2026-09-03","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Request/Response Smuggling vuln in Netty (CVE-2026-59898)","source_url":"https://www.ibm.com/support/pages/node/7286255"},{"id":"IBM:7286264","date":"2026-09-03","title":"Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in Bouncy Castle for Java","source_url":"https://www.ibm.com/support/pages/node/7286264"},{"id":"IBM:7286265","date":"2026-09-03","title":"Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7286265"},{"id":"IBM:7286267","date":"2026-09-03","title":"Security Bulletin: Multiple vulnerabilities within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.","source_url":"https://www.ibm.com/support/pages/node/7286267"},{"id":"IBM:7286276","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: CRLF Injection (CVE-2026-39983)","source_url":"https://www.ibm.com/support/pages/node/7286276"},{"id":"IBM:7286336","date":"2026-09-03","title":"Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL","source_url":"https://www.ibm.com/support/pages/node/7286336"},{"id":"RHSA-2026:59830","date":"2026-09-03","title":"OpenShift Container Platform 4.12.97 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59830"},{"id":"RHSA-2026:59831","date":"2026-09-03","title":"OpenShift Container Platform 4.12.97 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59831"},{"id":"RHSA-2026:59833","date":"2026-09-03","title":"OpenShift Container Platform 4.12.97 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59833"},{"id":"RHSA-2026:60019","date":"2026-09-03","title":"OpenShift Container Platform 4.17.57 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60019"},{"id":"RHSA-2026:62515","date":"2026-09-03","title":"Red Hat build of Quarkus 3.27.5.SP1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62515"},{"id":"RHSA-2026:62555","date":"2026-09-03","title":"Red Hat build of Quarkus 3.33.3.SP1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62555"},{"id":"RHSA-2026:63013","date":"2026-09-03","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:63013"},{"id":"RHSA-2026:63014","date":"2026-09-03","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:63014"},{"id":"RHSA-2026:63022","date":"2026-09-03","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63022"},{"id":"RHSA-2026:63024","date":"2026-09-03","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63024"},{"id":"RHSA-2026:63117","date":"2026-09-03","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63117"},{"id":"RHSA-2026:63124","date":"2026-09-03","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63124"},{"id":"RHSA-2026:63130","date":"2026-09-03","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63130"},{"id":"RHSA-2026:63134","date":"2026-09-03","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63134"},{"id":"RHSA-2026:63136","date":"2026-09-03","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63136"},{"id":"RHSA-2026:63189","date":"2026-09-03","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:63189"},{"id":"RHSA-2026:63302","date":"2026-09-03","title":"Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1)","source_url":"https://access.redhat.com/errata/RHSA-2026:63302"},{"id":"RHSA-2026:63327","date":"2026-09-03","title":"Satellite 6.16.13 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:63327"},{"id":"RHSA-2026:63334","date":"2026-09-03","title":"satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:63334"},{"id":"RHSA-2026:63337","date":"2026-09-03","title":"satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:63337"},{"id":"RHSA-2026:63354","date":"2026-09-03","title":"Technical preview of the satellite/iop-vmaas-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63354"},{"id":"RHSA-2026:63355","date":"2026-09-03","title":"General availability of the satellite/iop-host-inventory-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63355"},{"id":"RHSA-2026:63357","date":"2026-09-03","title":"General availability of the satellite/iop-remediations-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63357"},{"id":"RHSA-2026:63371","date":"2026-09-03","title":"General availability of the satellite/iop-remediations-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63371"},{"id":"RHSA-2026:63372","date":"2026-09-03","title":"Technical preview of the satellite/iop-vmaas-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63372"},{"id":"RHSA-2026:63373","date":"2026-09-03","title":"General availability of the satellite/iop-host-inventory-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:63373"},{"id":"RHSA-2026:63385","date":"2026-09-03","title":"Satellite 6.19.4 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:63385"},{"id":"RHSA-2026:63386","date":"2026-09-03","title":"Satellite 6.18.9 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:63386"},{"id":"RHSA-2026:63387","date":"2026-09-03","title":"Satellite 6.17.11 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:63387"},{"id":"BSI:WID-SEC-2026-0831","date":"2026-09-03","title":"systemd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0831"},{"id":"BSI:WID-SEC-2026-0863","date":"2026-09-03","title":"Internet Systems Consortium BIND: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0863"},{"id":"BSI:WID-SEC-2026-1147","date":"2026-09-03","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1147"},{"id":"BSI:WID-SEC-2026-1548","date":"2026-09-03","title":"vim: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1548"},{"id":"BSI:WID-SEC-2026-2119","date":"2026-09-03","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2119"},{"id":"BSI:WID-SEC-2026-2219","date":"2026-09-03","title":"GIMP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2219"},{"id":"BSI:WID-SEC-2026-2236","date":"2026-09-03","title":"wget: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2236"},{"id":"BSI:WID-SEC-2026-2247","date":"2026-09-03","title":"Red Hat Enterprise Linux (libsolv, aardvark-dns): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2247"},{"id":"BSI:WID-SEC-2026-2271","date":"2026-09-03","title":"CoreDNS: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2271"},{"id":"BSI:WID-SEC-2026-2292","date":"2026-09-03","title":"Apache log4j und Log4cxx: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2292"},{"id":"BSI:WID-SEC-2026-2314","date":"2026-09-03","title":"Eclipse Jetty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2314"},{"id":"BSI:WID-SEC-2026-2350","date":"2026-09-03","title":"FasterXML Jackson: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2350"},{"id":"BSI:WID-SEC-2026-3134","date":"2026-09-03","title":"Filebeat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3134"},{"id":"BSI:WID-SEC-2026-3171","date":"2026-09-03","title":"Sonatype Nexus Repository Manager: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3171"},{"id":"ICSA-26-169-07","date":"2026-09-03","title":"Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products (Update A)","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-07"},{"id":"ICSA-26-246-01","date":"2026-09-03","title":"OPCFoundation OPC UA LocalDiscoveryServer (LDS)","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-01"},{"id":"ICSA-26-246-02","date":"2026-09-03","title":"IXON VPN Client","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-02"},{"id":"ICSA-26-246-03","date":"2026-09-03","title":"Rockwell Automation ControlFLASH","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-03"},{"id":"ICSA-26-246-04","date":"2026-09-03","title":"Rockwell Automation ArmorStart LT","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-04"},{"id":"ICSA-26-246-05","date":"2026-09-03","title":"Rockwell Automation 1756-ENBT Module","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-05"},{"id":"ICSA-26-246-06","date":"2026-09-03","title":"Inductive Automation Ignition","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-06"},{"id":"ICSA-26-246-07","date":"2026-09-03","title":"Pyramid Solutions NetStaX EtherNet/IP Stack","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-07"},{"id":"ICSA-26-246-08","date":"2026-09-03","title":"Tycon Systems TPDIN-Monitor-WEB3","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08"},{"id":"GHSA-528H-PC64-C93X","date":"2026-09-03","title":"stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)","source_url":"https://github.com/advisories/GHSA-528h-pc64-c93x"},{"id":"GHSA-5FHR-F75J-8WR9","date":"2026-09-03","title":"SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)","source_url":"https://github.com/advisories/GHSA-5fhr-f75j-8wr9"},{"id":"GHSA-63MC-HW7G-86RR","date":"2026-09-03","title":"Phoenix: Presence keys colliding with `Object.prototype` members break existence checks","source_url":"https://github.com/advisories/GHSA-63mc-hw7g-86rr"},{"id":"GHSA-67X2-MQ63-V9VM","date":"2026-09-03","title":"SiYuan: Missing publish-access check on getBlockBreadcrumb, getRefText, and getBlockTreeInfos discloses content and metadata of protected/forbidden documents","source_url":"https://github.com/advisories/GHSA-67x2-mq63-v9vm"},{"id":"GHSA-6MCF-G667-W3QV","date":"2026-09-03","title":"SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)","source_url":"https://github.com/advisories/GHSA-6mcf-g667-w3qv"},{"id":"GHSA-78X9-FHHX-V2G6","date":"2026-09-03","title":"CKAN MCP Server: Cache-key canonicalization collision enables cache confusion / poisoning","source_url":"https://github.com/advisories/GHSA-78x9-fhhx-v2g6"},{"id":"GHSA-8Q3C-RJR9-XXRP","date":"2026-09-03","title":"VictoriaMetrics vmrestore: Path traversal via crafted backup part names escapes restore root","source_url":"https://github.com/advisories/GHSA-8q3c-rjr9-xxrp"},{"id":"GHSA-FM8W-2M5W-9J7R","date":"2026-09-03","title":"Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match","source_url":"https://github.com/advisories/GHSA-fm8w-2m5w-9j7r"},{"id":"GHSA-GW25-M53R-QH88","date":"2026-09-03","title":"SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)","source_url":"https://github.com/advisories/GHSA-gw25-m53r-qh88"},{"id":"GHSA-H6CJ-26G5-67FV","date":"2026-09-03","title":"OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool","source_url":"https://github.com/advisories/GHSA-h6cj-26g5-67fv"},{"id":"GHSA-JV8V-XQ2H-657V","date":"2026-09-03","title":"SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath","source_url":"https://github.com/advisories/GHSA-jv8v-xq2h-657v"},{"id":"GHSA-JXWJ-J7WR-GFRW","date":"2026-09-03","title":"ApostropheCMS: Mutation-XSS / allowedTags bypass via literal `</textarea/>` solidus close","source_url":"https://github.com/advisories/GHSA-jxwj-j7wr-gfrw"},{"id":"GHSA-PM3W-VXP9-CCWC","date":"2026-09-03","title":"SiYuan: Cross-boundary metadata disclosure via getBlockInfo (publish mode): reader-reachable document title/root info for publish-forbidden docs; sibling getDocInfo is filtered","source_url":"https://github.com/advisories/GHSA-pm3w-vxp9-ccwc"},{"id":"GHSA-QVQ9-HQ6P-V378","date":"2026-09-03","title":"SiYuan: Missing publish-access filter on getBlockAttrs and batchGetBlockAttrs discloses block attributes (name, alias, memo, custom fields) of protected documents","source_url":"https://github.com/advisories/GHSA-qvq9-hq6p-v378"},{"id":"GHSA-V7PH-R5R6-4JCJ","date":"2026-09-03","title":"SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)","source_url":"https://github.com/advisories/GHSA-v7ph-r5r6-4jcj"},{"id":"GHSA-WGWX-479J-23VQ","date":"2026-09-03","title":"SiYuan: Missing authorization on refreshBacklink allows anonymous readers to trigger persistent server-side writes and unauthenticated resource amplification (publish mode)","source_url":"https://github.com/advisories/GHSA-wgwx-479j-23vq"},{"id":"GHSA-WR5R-WQP2-X4FH","date":"2026-09-03","title":"ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree","source_url":"https://github.com/advisories/GHSA-wr5r-wqp2-x4fh"},{"id":"GHSA-XVG9-69GF-FJRF","date":"2026-09-03","title":"Material for MkDocs: DOM XSS in search suggestions via query parameter","source_url":"https://github.com/advisories/GHSA-xvg9-69gf-fjrf"},{"id":"IBM:7286213","date":"2026-09-03","title":"Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7286213"},{"id":"IBM:7286214","date":"2026-09-03","title":"Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7286214"},{"id":"IBM:7286256","date":"2026-09-03","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure vulnerability (CVE-2026-78658)","source_url":"https://www.ibm.com/support/pages/node/7286256"},{"id":"IBM:7286273","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2025-8916)","source_url":"https://www.ibm.com/support/pages/node/7286273"},{"id":"IBM:7286275","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2026-35469)","source_url":"https://www.ibm.com/support/pages/node/7286275"},{"id":"IBM:7286277","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-39406)","source_url":"https://www.ibm.com/support/pages/node/7286277"},{"id":"IBM:7286281","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Cross-site Scripting (CVE-2026-33916)","source_url":"https://www.ibm.com/support/pages/node/7286281"},{"id":"IBM:7286282","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Validation of Specified Quantity in Input (CVE-2026-33349)","source_url":"https://www.ibm.com/support/pages/node/7286282"},{"id":"IBM:7286284","date":"2026-09-03","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: CRLF Injection (CVE-2026-41417)","source_url":"https://www.ibm.com/support/pages/node/7286284"},{"id":"IBM:7286293","date":"2026-09-03","title":"Security Bulletin: Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components","source_url":"https://www.ibm.com/support/pages/node/7286293"},{"id":"IBM:7286294","date":"2026-09-03","title":"Security Bulletin: Langflow is affected by improper authorization due to missing access control on the voice-mode WebSocket endpoint","source_url":"https://www.ibm.com/support/pages/node/7286294"},{"id":"USN-8716-1","date":"2026-09-03","title":"USN-8716-1: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8716-1"},{"id":"USN-8717-1","date":"2026-09-03","title":"USN-8717-1: Apache Tika vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8717-1"},{"id":"USN-8718-1","date":"2026-09-03","title":"USN-8718-1: SSSD vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8718-1"},{"id":"USN-8719-1","date":"2026-09-03","title":"USN-8719-1: APR-util vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8719-1"},{"id":"USN-8720-1","date":"2026-09-03","title":"USN-8720-1: GnuPG vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8720-1"},{"id":"USN-8721-1","date":"2026-09-03","title":"USN-8721-1: OpenSSH vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8721-1"},{"id":"USN-8722-1","date":"2026-09-03","title":"USN-8722-1: libssh2 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8722-1"},{"id":"USN-8723-1","date":"2026-09-03","title":"USN-8723-1: SPICE vdagent vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8723-1"},{"id":"USN-8724-1","date":"2026-09-03","title":"USN-8724-1: rabbitmq-c vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8724-1"},{"id":"BSI:WID-SEC-2026-1777","date":"2026-09-03","title":"vim: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1777"},{"id":"BSI:WID-SEC-2026-3024","date":"2026-09-03","title":"wget: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3024"},{"id":"GHSA-6F9W-9HF2-5RG3","date":"2026-09-03","title":"CKAN MCP Server: Information disclosure via verbose error reflection","source_url":"https://github.com/advisories/GHSA-6f9w-9hf2-5rg3"},{"id":"BSI:WID-SEC-2026-3027","date":"2026-09-02","title":"Vercel Next.js: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3027"},{"id":"BSI:WID-SEC-2026-3135","date":"2026-09-02","title":"SonicWall SMA: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3135"},{"id":"BSI:WID-SEC-2026-3144","date":"2026-09-02","title":"Proxmox Virtual Environment: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3144"},{"id":"CISCO-SA-HARDENING-IOSXR-QG64NCM","date":"2026-09-02","title":"Cisco IOS XR Software Security Hardening Release: September 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM"},{"id":"CISCO-SA-N9K-S1-RCE-EH8DETR","date":"2026-09-02","title":"Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr"},{"id":"GHSA-2V6V-25FM-P4FG","date":"2026-09-02","title":"SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control","source_url":"https://github.com/advisories/GHSA-2v6v-25fm-p4fg"},{"id":"GHSA-6MR6-JVCR-2F25","date":"2026-09-02","title":"Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client","source_url":"https://github.com/advisories/GHSA-6mr6-jvcr-2f25"},{"id":"GHSA-JRRM-9HC7-2V3H","date":"2026-09-02","title":"Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE","source_url":"https://github.com/advisories/GHSA-jrrm-9hc7-2v3h"},{"id":"GHSA-P4CG-3328-RVFG","date":"2026-09-02","title":"Orval: Import-time RCE via query-parameter default -> zod module-level template literal","source_url":"https://github.com/advisories/GHSA-p4cg-3328-rvfg"},{"id":"GHSA-QH9R-J7RP-4X2M","date":"2026-09-02","title":"OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs","source_url":"https://github.com/advisories/GHSA-qh9r-j7rp-4x2m"},{"id":"IBM:7286070","date":"2026-09-02","title":"Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image","source_url":"https://www.ibm.com/support/pages/node/7286070"},{"id":"IBM:7286078","date":"2026-09-02","title":"Security Bulletin: Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1","source_url":"https://www.ibm.com/support/pages/node/7286078"},{"id":"IBM:7286089","date":"2026-09-02","title":"Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7286089"},{"id":"NCSC-2026-0336","date":"2026-09-02","title":"NCSC-2026-0336 Kwetsbaarheid verholpen in JFrog Artifactory","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0336"},{"id":"NCSC-2026-0337","date":"2026-09-02","title":"NCSC-2026-0337 Zero-Day kwetsbaarheden verholpen in SMA1000 Appliance van SonicWall","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0337"},{"id":"BSI:WID-SEC-2026-0172","date":"2026-09-02","title":"Oracle Virtualization: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0172"},{"id":"BSI:WID-SEC-2026-2789","date":"2026-09-02","title":"Red Hat Enterprise Linux (open-iscsi): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2789"},{"id":"BSI:WID-SEC-2026-3140","date":"2026-09-02","title":"Aruba ArubaOS-CX: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3140"},{"id":"BSI:WID-SEC-2026-3143","date":"2026-09-02","title":"Rockwell Automation FactoryTalk Activation Manager und Historian Machine Edition: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3143"},{"id":"BSI:WID-SEC-2026-3145","date":"2026-09-02","title":"Kibana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3145"},{"id":"BSI:WID-SEC-2026-3148","date":"2026-09-02","title":"Jolokia: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3148"},{"id":"BSI:WID-SEC-2026-3150","date":"2026-09-02","title":"Coolify: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3150"},{"id":"BSI:WID-SEC-2026-3151","date":"2026-09-02","title":"Microsoft GitHub Enterprise Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3151"},{"id":"CISCO-SA-PHONE-DOS-TXMYNRZV","date":"2026-09-02","title":"Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv"},{"id":"GHSA-2MW5-23GM-PCCQ","date":"2026-09-02","title":"OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods","source_url":"https://github.com/advisories/GHSA-2mw5-23gm-pccq"},{"id":"GHSA-4Q39-2JHR-7QX8","date":"2026-09-02","title":"Plate: SSRF with response disclosure in DOCX image embedding","source_url":"https://github.com/advisories/GHSA-4q39-2jhr-7qx8"},{"id":"GHSA-52GF-6RPQ-FGMX","date":"2026-09-02","title":"OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints","source_url":"https://github.com/advisories/GHSA-52gf-6rpq-fgmx"},{"id":"GHSA-5JGF-P345-68V8","date":"2026-09-02","title":"fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references","source_url":"https://github.com/advisories/GHSA-5jgf-p345-68v8"},{"id":"GHSA-6M44-FPC8-C3RQ","date":"2026-09-02","title":"Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown","source_url":"https://github.com/advisories/GHSA-6m44-fpc8-c3rq"},{"id":"GHSA-756X-9HF6-Q4H4","date":"2026-09-02","title":"Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools","source_url":"https://github.com/advisories/GHSA-756x-9hf6-q4h4"},{"id":"GHSA-75MR-QW9X-3R39","date":"2026-09-02","title":"Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling","source_url":"https://github.com/advisories/GHSA-75mr-qw9x-3r39"},{"id":"GHSA-76G3-C3X4-CRVX","date":"2026-09-02","title":"Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default","source_url":"https://github.com/advisories/GHSA-76g3-c3x4-crvx"},{"id":"GHSA-7MGC-C7PQ-3RR3","date":"2026-09-02","title":"Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge","source_url":"https://github.com/advisories/GHSA-7mgc-c7pq-3rr3"},{"id":"GHSA-7MQG-CX4G-X2RF","date":"2026-09-02","title":"Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py","source_url":"https://github.com/advisories/GHSA-7mqg-cx4g-x2rf"},{"id":"GHSA-8MGP-746C-J5XP","date":"2026-09-02","title":"NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots","source_url":"https://github.com/advisories/GHSA-8mgp-746c-j5xp"},{"id":"GHSA-C59Q-G84Q-2GJ5","date":"2026-09-02","title":"pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph","source_url":"https://github.com/advisories/GHSA-c59q-g84q-2gj5"},{"id":"GHSA-CPJF-6666-R8FX","date":"2026-09-02","title":"link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897","source_url":"https://github.com/advisories/GHSA-cpjf-6666-r8fx"},{"id":"GHSA-CXQ5-97V7-87J8","date":"2026-09-02","title":"Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref","source_url":"https://github.com/advisories/GHSA-cxq5-97v7-87j8"},{"id":"GHSA-F65P-4M7J-42XC","date":"2026-09-02","title":"fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization","source_url":"https://github.com/advisories/GHSA-f65p-4m7j-42xc"},{"id":"GHSA-FJ2P-QJ2F-74V5","date":"2026-09-02","title":"Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()","source_url":"https://github.com/advisories/GHSA-fj2p-qj2f-74v5"},{"id":"GHSA-FPH4-WMHF-6FWF","date":"2026-09-02","title":"fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding","source_url":"https://github.com/advisories/GHSA-fph4-wmhf-6fwf"},{"id":"GHSA-G29J-RWFV-H99W","date":"2026-09-02","title":"Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass","source_url":"https://github.com/advisories/GHSA-g29j-rwfv-h99w"},{"id":"GHSA-G2FM-8HR4-J82H","date":"2026-09-02","title":"EasyAdmin custom-action dispatcher bypasses access_control on other routes","source_url":"https://github.com/advisories/GHSA-g2fm-8hr4-j82h"},{"id":"GHSA-GV5W-HFX8-8CWQ","date":"2026-09-02","title":"SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths","source_url":"https://github.com/advisories/GHSA-gv5w-hfx8-8cwq"},{"id":"GHSA-GXMJ-R5RF-GGWQ","date":"2026-09-02","title":"elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)","source_url":"https://github.com/advisories/GHSA-gxmj-r5rf-ggwq"},{"id":"GHSA-JQFF-G426-HQXP","date":"2026-09-02","title":"fast-uri vulnerable to host confusion via percent-encoded scheme normalization","source_url":"https://github.com/advisories/GHSA-jqff-g426-hqxp"},{"id":"GHSA-MPF4-983Q-P7J4","date":"2026-09-02","title":"Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop","source_url":"https://github.com/advisories/GHSA-mpf4-983q-p7j4"},{"id":"GHSA-P3M8-78J2-G5P3","date":"2026-09-02","title":"NLTK: Default ENFORCE=False Disables All pathsec Security Controls","source_url":"https://github.com/advisories/GHSA-p3m8-78j2-g5p3"},{"id":"GHSA-P8RW-8QJ3-HF33","date":"2026-09-02","title":"Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE","source_url":"https://github.com/advisories/GHSA-p8rw-8qj3-hf33"},{"id":"GHSA-VMG4-6GFG-83QX","date":"2026-09-02","title":"ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS","source_url":"https://github.com/advisories/GHSA-vmg4-6gfg-83qx"},{"id":"GHSA-VQ4V-J7R6-JQ4M","date":"2026-09-02","title":"pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install","source_url":"https://github.com/advisories/GHSA-vq4v-j7r6-jq4m"},{"id":"GHSA-W878-PJ84-3J5V","date":"2026-09-02","title":"Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection","source_url":"https://github.com/advisories/GHSA-w878-pj84-3j5v"},{"id":"IBM:7286026","date":"2026-09-02","title":"Security Bulletin: Multiple vulnerabilities in jackson-databind impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","source_url":"https://www.ibm.com/support/pages/node/7286026"},{"id":"IBM:7286027","date":"2026-09-02","title":"Security Bulletin: Multiple vulnerabilities in IBM WebSphere Liberty impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","source_url":"https://www.ibm.com/support/pages/node/7286027"},{"id":"IBM:7286028","date":"2026-09-02","title":"Security Bulletin: Multiple vulnerabilities in jackson-databind impact IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","source_url":"https://www.ibm.com/support/pages/node/7286028"},{"id":"IBM:7286030","date":"2026-09-02","title":"Security Bulletin: IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent is affected by a vulnerability in httpcore5 jar (CVE-2026-54399)","source_url":"https://www.ibm.com/support/pages/node/7286030"},{"id":"IBM:7286031","date":"2026-09-02","title":"Security Bulletin: Vulnerability in AngularJS affects IBM License Key Server Administration and Reporting Tool","source_url":"https://www.ibm.com/support/pages/node/7286031"},{"id":"IBM:7286052","date":"2026-09-02","title":"Security Bulletin: IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution","source_url":"https://www.ibm.com/support/pages/node/7286052"},{"id":"IBM:7286053","date":"2026-09-02","title":"Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation","source_url":"https://www.ibm.com/support/pages/node/7286053"},{"id":"IBM:7286055","date":"2026-09-02","title":"Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint","source_url":"https://www.ibm.com/support/pages/node/7286055"},{"id":"IBM:7286056","date":"2026-09-02","title":"Security Bulletin: IBM ContextForge Translate is affected by cross-client credential context confusion","source_url":"https://www.ibm.com/support/pages/node/7286056"},{"id":"IBM:7286064","date":"2026-09-02","title":"Security Bulletin: IBM Edge Data Collector component uses multiple dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7286064"},{"id":"IBM:7286186","date":"2026-09-02","title":"Security Bulletin: IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [CVE-2026-18175, CVE-2026-18221]","source_url":"https://www.ibm.com/support/pages/node/7286186"},{"id":"RHSA-2026:60452","date":"2026-09-02","title":"OpenShift Container Platform 4.19.45 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60452"},{"id":"RHSA-2026:62345","date":"2026-09-02","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62345"},{"id":"RHSA-2026:62346","date":"2026-09-02","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62346"},{"id":"RHSA-2026:62372","date":"2026-09-02","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62372"},{"id":"RHSA-2026:62401","date":"2026-09-02","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62401"},{"id":"RHSA-2026:62405","date":"2026-09-02","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62405"},{"id":"RHSA-2026:62407","date":"2026-09-02","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62407"},{"id":"RHSA-2026:62416","date":"2026-09-02","title":"nodejs:22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62416"},{"id":"RHSA-2026:62420","date":"2026-09-02","title":"gegl04 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62420"},{"id":"RHSA-2026:62425","date":"2026-09-02","title":"gegl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62425"},{"id":"RHSA-2026:62507","date":"2026-09-02","title":"gimp:2.8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62507"},{"id":"RHSA-2026:62508","date":"2026-09-02","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62508"},{"id":"RHSA-2026:62522","date":"2026-09-02","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62522"},{"id":"RHSA-2026:62532","date":"2026-09-02","title":"gstreamer-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62532"},{"id":"RHSA-2026:62558","date":"2026-09-02","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62558"},{"id":"RHSA-2026:62568","date":"2026-09-02","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62568"},{"id":"RHSA-2026:62571","date":"2026-09-02","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62571"},{"id":"RHSA-2026:62577","date":"2026-09-02","title":"go-fdo-client security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62577"},{"id":"RHSA-2026:62583","date":"2026-09-02","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62583"},{"id":"RHSA-2026:62602","date":"2026-09-02","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62602"},{"id":"RHSA-2026:62609","date":"2026-09-02","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62609"},{"id":"RHSA-2026:62614","date":"2026-09-02","title":"php security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62614"},{"id":"RHSA-2026:62631","date":"2026-09-02","title":"golang-github-openprinting-ipp-usb security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62631"},{"id":"RHSA-2026:62637","date":"2026-09-02","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62637"},{"id":"RHSA-2026:62638","date":"2026-09-02","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62638"},{"id":"RHSA-2026:62639","date":"2026-09-02","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62639"},{"id":"RHSA-2026:62640","date":"2026-09-02","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62640"},{"id":"RHSA-2026:62641","date":"2026-09-02","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62641"},{"id":"RHSA-2026:62642","date":"2026-09-02","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62642"},{"id":"RHSA-2026:62667","date":"2026-09-02","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62667"},{"id":"RHSA-2026:62753","date":"2026-09-02","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62753"},{"id":"RHSA-2026:62754","date":"2026-09-02","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62754"},{"id":"RHSA-2026:62803","date":"2026-09-02","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62803"},{"id":"RHSA-2026:62809","date":"2026-09-02","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62809"},{"id":"BSI:WID-SEC-2026-2527","date":"2026-09-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2527"},{"id":"BSI:WID-SEC-2026-2585","date":"2026-09-02","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2585"},{"id":"BSI:WID-SEC-2026-3044","date":"2026-09-02","title":"IBM Java SDK: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3044"},{"id":"BSI:WID-SEC-2026-3098","date":"2026-09-02","title":"IBM DataPower Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3098"},{"id":"BSI:WID-SEC-2026-3136","date":"2026-09-02","title":"IBM Java SDK: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3136"},{"id":"BSI:WID-SEC-2026-3137","date":"2026-09-02","title":"ffmpeg: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3137"},{"id":"BSI:WID-SEC-2026-3138","date":"2026-09-02","title":"MailPit: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3138"},{"id":"BSI:WID-SEC-2026-3139","date":"2026-09-02","title":"IBM QRadar SIEM: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3139"},{"id":"BSI:WID-SEC-2026-3141","date":"2026-09-02","title":"IBM i: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3141"},{"id":"BSI:WID-SEC-2026-3142","date":"2026-09-02","title":"Rockwell Automation ControlLogix 5580, CompactLogix 5380, und CompactLogix 5480: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3142"},{"id":"BSI:WID-SEC-2026-3146","date":"2026-09-02","title":"Erlang/OTP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3146"},{"id":"BSI:WID-SEC-2026-3147","date":"2026-09-02","title":"FasterXML Jackson: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3147"},{"id":"BSI:WID-SEC-2026-3149","date":"2026-09-02","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3149"},{"id":"CISCO-SA-ESA-SMIME-DISC-DZW4REDY","date":"2026-09-02","title":"Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY"},{"id":"GHSA-3GQM-FCW5-W839","date":"2026-09-02","title":"NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure","source_url":"https://github.com/advisories/GHSA-3gqm-fcw5-w839"},{"id":"GHSA-3M5P-2C4R-XXW2","date":"2026-09-02","title":"fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count","source_url":"https://github.com/advisories/GHSA-3m5p-2c4r-xxw2"},{"id":"GHSA-4MJR-XMP4-GH2G","date":"2026-09-02","title":"qs: Denial of Service via Attacker Controlled isBuffer","source_url":"https://github.com/advisories/GHSA-4mjr-xmp4-gh2g"},{"id":"GHSA-65CV-W493-7VHQ","date":"2026-09-02","title":"Sulu: Fix authorization bypass when creating preview links","source_url":"https://github.com/advisories/GHSA-65cv-w493-7vhq"},{"id":"GHSA-6GMQ-8VP8-GCM6","date":"2026-09-02","title":"xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization","source_url":"https://github.com/advisories/GHSA-6gmq-8vp8-gcm6"},{"id":"GHSA-6J4C-MGQR-QV76","date":"2026-09-02","title":"Kirby: Access to image files outside of the site root via path traversal in the media handling","source_url":"https://github.com/advisories/GHSA-6j4c-mgqr-qv76"},{"id":"GHSA-79QF-VQGC-7XX3","date":"2026-09-02","title":"ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal","source_url":"https://github.com/advisories/GHSA-79qf-vqgc-7xx3"},{"id":"GHSA-7W2G-9MF9-324M","date":"2026-09-02","title":"Hurl: Cookies in Cookies section leak when redirecting to a different host","source_url":"https://github.com/advisories/GHSA-7w2g-9mf9-324m"},{"id":"GHSA-83X6-42HR-JC76","date":"2026-09-02","title":"CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)","source_url":"https://github.com/advisories/GHSA-83x6-42hr-jc76"},{"id":"GHSA-928X-9MPW-8H56","date":"2026-09-02","title":"Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits","source_url":"https://github.com/advisories/GHSA-928x-9mpw-8h56"},{"id":"GHSA-9HJF-W35W-6VX2","date":"2026-09-02","title":"elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections","source_url":"https://github.com/advisories/GHSA-9hjf-w35w-6vx2"},{"id":"GHSA-C5F6-2RM9-2W8G","date":"2026-09-02","title":"OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)","source_url":"https://github.com/advisories/GHSA-c5f6-2rm9-2w8g"},{"id":"GHSA-CP6Q-959Q-F8RH","date":"2026-09-02","title":"Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes","source_url":"https://github.com/advisories/GHSA-cp6q-959q-f8rh"},{"id":"GHSA-CW6X-M8JW-QMRH","date":"2026-09-02","title":"NLTK: Uncontrolled recursion in nltk.featstruct.FeatStructReader causes unhandled RecursionError (DoS) via deeply nested feature-structure input","source_url":"https://github.com/advisories/GHSA-cw6x-m8jw-qmrh"},{"id":"GHSA-F794-5JV7-7672","date":"2026-09-02","title":"NLTK: Downloader.download follows hardlinks and overwrites outside-root files","source_url":"https://github.com/advisories/GHSA-f794-5jv7-7672"},{"id":"GHSA-FC8X-2RWW-XW9M","date":"2026-09-02","title":"pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace","source_url":"https://github.com/advisories/GHSA-fc8x-2rww-xw9m"},{"id":"GHSA-FF5C-CP5C-9WJF","date":"2026-09-02","title":"NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars","source_url":"https://github.com/advisories/GHSA-ff5c-cp5c-9wjf"},{"id":"GHSA-G3HC-697W-WM82","date":"2026-09-02","title":"Livewire DOM-based cross-site scripting during client-side state handling","source_url":"https://github.com/advisories/GHSA-g3hc-697w-wm82"},{"id":"GHSA-GCR2-9V8M-GQ45","date":"2026-09-02","title":"DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)","source_url":"https://github.com/advisories/GHSA-gcr2-9v8m-gq45"},{"id":"GHSA-H6CX-GJXX-V25C","date":"2026-09-02","title":"Sulu: Media move/update authorization bypass (IDOR)","source_url":"https://github.com/advisories/GHSA-h6cx-gjxx-v25c"},{"id":"GHSA-MC5Q-6HPJ-RP7J","date":"2026-09-02","title":"Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)","source_url":"https://github.com/advisories/GHSA-mc5q-6hpj-rp7j"},{"id":"GHSA-MVXR-6M87-MV2Q","date":"2026-09-02","title":"Mail: Email address spoofing via malformed RFC 2047 encoded-words","source_url":"https://github.com/advisories/GHSA-mvxr-6m87-mv2q"},{"id":"GHSA-PP4X-CCXQ-6R33","date":"2026-09-02","title":"Sulu: Stored XSS via media download inline-disposition override","source_url":"https://github.com/advisories/GHSA-pp4x-ccxq-6r33"},{"id":"GHSA-VP2X-QP44-57V7","date":"2026-09-02","title":"NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`","source_url":"https://github.com/advisories/GHSA-vp2x-qp44-57v7"},{"id":"GHSA-W2QP-RPH6-63G4","date":"2026-09-02","title":"fastify vulnerable to schema validation bypass via root primitive coercion mismatch","source_url":"https://github.com/advisories/GHSA-w2qp-rph6-63g4"},{"id":"GHSA-WW6M-CW3F-Q94G","date":"2026-09-02","title":"NLTK: Quadratic-time DoS in PorterStemmer via long runs of 'y'","source_url":"https://github.com/advisories/GHSA-ww6m-cw3f-q94g"},{"id":"GHSA-X5FP-WJ9C-MXMX","date":"2026-09-02","title":"qs array-limit bypass via bracket-key comma parsing","source_url":"https://github.com/advisories/GHSA-x5fp-wj9c-mxmx"},{"id":"GHSA-X8WG-4XGC-VR54","date":"2026-09-02","title":"Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root","source_url":"https://github.com/advisories/GHSA-x8wg-4xgc-vr54"},{"id":"IBM:7286029","date":"2026-09-02","title":"Security Bulletin: IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent are vulnerable to improper encoding in Apache Log4j [CVE-2026-49844]","source_url":"https://www.ibm.com/support/pages/node/7286029"},{"id":"IBM:7286032","date":"2026-09-02","title":"Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting","source_url":"https://www.ibm.com/support/pages/node/7286032"},{"id":"IBM:7286033","date":"2026-09-02","title":"Security Bulletin: Vulnerability in commons-configuration2 impacts IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent","source_url":"https://www.ibm.com/support/pages/node/7286033"},{"id":"IBM:7286036","date":"2026-09-02","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)","source_url":"https://www.ibm.com/support/pages/node/7286036"},{"id":"IBM:7286093","date":"2026-09-02","title":"Security Bulletin: IBM i is Affected By Denial of Service Vulnerability [CVE-2026-17255]","source_url":"https://www.ibm.com/support/pages/node/7286093"},{"id":"IBM:7286094","date":"2026-09-02","title":"Security Bulletin: IBM i is Affected By Buffer Overflow Vulnerability [CVE-2026-18341]","source_url":"https://www.ibm.com/support/pages/node/7286094"},{"id":"USN-8661-4","date":"2026-09-02","title":"USN-8661-4: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8661-4"},{"id":"USN-8713-1","date":"2026-09-02","title":"USN-8713-1: BioSig vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8713-1"},{"id":"USN-8714-1","date":"2026-09-02","title":"USN-8714-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8714-1"},{"id":"USN-8715-1","date":"2026-09-02","title":"USN-8715-1: Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8715-1"},{"id":"RHSA-2026:52807","date":"2026-09-02","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:52807"},{"id":"GHSA-M4RF-3FR8-XWX3","date":"2026-09-01","title":"NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)","source_url":"https://github.com/advisories/GHSA-m4rf-3fr8-xwx3"},{"id":"IBM:7285898","date":"2026-09-01","title":"Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-45623","source_url":"https://www.ibm.com/support/pages/node/7285898"},{"id":"IBM:7285907","date":"2026-09-01","title":"Security Bulletin: Multiple Vulnerabilities affects CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.","source_url":"https://www.ibm.com/support/pages/node/7285907"},{"id":"IBM:7285911","date":"2026-09-01","title":"Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for August 2026.","source_url":"https://www.ibm.com/support/pages/node/7285911"},{"id":"IBM:7285918","date":"2026-09-01","title":"Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7285918"},{"id":"IBM:7285922","date":"2026-09-01","title":"Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026","source_url":"https://www.ibm.com/support/pages/node/7285922"},{"id":"IBM:7285923","date":"2026-09-01","title":"Security Bulletin: Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026","source_url":"https://www.ibm.com/support/pages/node/7285923"},{"id":"IBM:7285930","date":"2026-09-01","title":"Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026","source_url":"https://www.ibm.com/support/pages/node/7285930"},{"id":"IBM:7285931","date":"2026-09-01","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.","source_url":"https://www.ibm.com/support/pages/node/7285931"},{"id":"BSI:WID-SEC-2026-1307","date":"2026-09-01","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1307"},{"id":"BSI:WID-SEC-2026-2784","date":"2026-09-01","title":"Microsoft Exchange Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2784"},{"id":"BSI:WID-SEC-2026-2938","date":"2026-09-01","title":"util-linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2938"},{"id":"BSI:WID-SEC-2026-2940","date":"2026-09-01","title":"WebKitGTK: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2940"},{"id":"BSI:WID-SEC-2026-3061","date":"2026-09-01","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3061"},{"id":"BSI:WID-SEC-2026-3091","date":"2026-09-01","title":"Apache Wicket: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3091"},{"id":"GHSA-2RX9-3G3H-C2JV","date":"2026-09-01","title":"pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project","source_url":"https://github.com/advisories/GHSA-2rx9-3g3h-c2jv"},{"id":"GHSA-3F6P-5WW8-9RCR","date":"2026-09-01","title":"MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials","source_url":"https://github.com/advisories/GHSA-3f6p-5ww8-9rcr"},{"id":"GHSA-52XP-W8HR-XV3C","date":"2026-09-01","title":"Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled","source_url":"https://github.com/advisories/GHSA-52xp-w8hr-xv3c"},{"id":"GHSA-68JX-F42C-7599","date":"2026-09-01","title":"TYPO3 CMS - Broken Access Control in Backend and Install Tool","source_url":"https://github.com/advisories/GHSA-68jx-f42c-7599"},{"id":"GHSA-6HWM-XVPH-95VM","date":"2026-09-01","title":"NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary","source_url":"https://github.com/advisories/GHSA-6hwm-xvph-95vm"},{"id":"GHSA-73WF-GQ98-2V4G","date":"2026-09-01","title":"Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)","source_url":"https://github.com/advisories/GHSA-73wf-gq98-2v4g"},{"id":"GHSA-8RR7-CVQ3-GMFH","date":"2026-09-01","title":"league/commonmark: Denial of service via distinctly-named attributes in the Attributes extension","source_url":"https://github.com/advisories/GHSA-8rr7-cvq3-gmfh"},{"id":"GHSA-C83G-RGW3-J3CX","date":"2026-09-01","title":"Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM","source_url":"https://github.com/advisories/GHSA-c83g-rgw3-j3cx"},{"id":"GHSA-F8FG-PG57-V4J8","date":"2026-09-01","title":"league/commonmark XSS: `on*` event-handler filter in `AttributesExtension` bypassed with a U+000C form feed","source_url":"https://github.com/advisories/GHSA-f8fg-pg57-v4j8"},{"id":"GHSA-GQVG-GMMX-X4HM","date":"2026-09-01","title":"MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact","source_url":"https://github.com/advisories/GHSA-gqvg-gmmx-x4hm"},{"id":"GHSA-J8PM-GJ4C-RQ4X","date":"2026-09-01","title":"league/commonmark: Denial of service via crafted code fences, reference links, and emphasis delimiters","source_url":"https://github.com/advisories/GHSA-j8pm-gj4c-rq4x"},{"id":"GHSA-JJV6-8J6V-6J52","date":"2026-09-01","title":"league/commonmark: Denial of service in the SmartPunct and Attributes extensions","source_url":"https://github.com/advisories/GHSA-jjv6-8j6v-6j52"},{"id":"GHSA-VP52-PCJ8-J9QC","date":"2026-09-01","title":"gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation","source_url":"https://github.com/advisories/GHSA-vp52-pcj8-j9qc"},{"id":"GHSA-VX52-2968-3VC6","date":"2026-09-01","title":"pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml","source_url":"https://github.com/advisories/GHSA-vx52-2968-3vc6"},{"id":"GHSA-XWG4-73V4-XW9W","date":"2026-09-01","title":"nanoid: Integer Overflow or Wraparound","source_url":"https://github.com/advisories/GHSA-xwg4-73v4-xw9w"},{"id":"IBM:7285901","date":"2026-09-01","title":"Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime (CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440)","source_url":"https://www.ibm.com/support/pages/node/7285901"},{"id":"IBM:7285987","date":"2026-09-01","title":"Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak","source_url":"https://www.ibm.com/support/pages/node/7285987"},{"id":"IBM:7285988","date":"2026-09-01","title":"Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak","source_url":"https://www.ibm.com/support/pages/node/7285988"},{"id":"IBM:7285989","date":"2026-09-01","title":"Security Bulletin: Security vulnerability in Java affects IBM Robotic Process Automation","source_url":"https://www.ibm.com/support/pages/node/7285989"},{"id":"RHSA-2026:60440","date":"2026-09-01","title":"OpenShift Container Platform 4.22.12 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60440"},{"id":"RHSA-2026:60444","date":"2026-09-01","title":"OpenShift Container Platform 4.20.36 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60444"},{"id":"RHSA-2026:60445","date":"2026-09-01","title":"OpenShift Container Platform 4.20.36 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60445"},{"id":"RHSA-2026:60449","date":"2026-09-01","title":"OpenShift Container Platform 4.21.31 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60449"},{"id":"RHSA-2026:60668","date":"2026-09-01","title":"Red Hat build of MicroShift 4.21.31 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60668"},{"id":"RHSA-2026:61882","date":"2026-09-01","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61882"},{"id":"RHSA-2026:61887","date":"2026-09-01","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61887"},{"id":"RHSA-2026:61903","date":"2026-09-01","title":"php:8.2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61903"},{"id":"RHSA-2026:61906","date":"2026-09-01","title":"runc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61906"},{"id":"RHSA-2026:61907","date":"2026-09-01","title":"runc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61907"},{"id":"RHSA-2026:61959","date":"2026-09-01","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61959"},{"id":"RHSA-2026:61973","date":"2026-09-01","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61973"},{"id":"RHSA-2026:61995","date":"2026-09-01","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61995"},{"id":"RHSA-2026:62029","date":"2026-09-01","title":"iscsi-initiator-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62029"},{"id":"RHSA-2026:62115","date":"2026-09-01","title":"Red Hat Ceph Storage","source_url":"https://access.redhat.com/errata/RHSA-2026:62115"},{"id":"RHSA-2026:62117","date":"2026-09-01","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62117"},{"id":"RHSA-2026:62123","date":"2026-09-01","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62123"},{"id":"RHSA-2026:62165","date":"2026-09-01","title":"httpd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62165"},{"id":"RHSA-2026:62222","date":"2026-09-01","title":"rest security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62222"},{"id":"RHSA-2026:62231","date":"2026-09-01","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62231"},{"id":"RHSA-2026:62236","date":"2026-09-01","title":"sqlite security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62236"},{"id":"RHSA-2026:62334","date":"2026-09-01","title":"php:7.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62334"},{"id":"RHSA-2026:62335","date":"2026-09-01","title":"Red Hat Enterprise Linux AI 3.3.6 enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62335"},{"id":"RHSA-2026:62336","date":"2026-09-01","title":"Red Hat Enterprise Linux AI 3.3.6 enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62336"},{"id":"BSI:WID-SEC-2026-1267","date":"2026-09-01","title":"Red Hat Hardened Images RPMs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1267"},{"id":"BSI:WID-SEC-2026-1268","date":"2026-09-01","title":"Red Hat Enterprise Linux (go-jose): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1268"},{"id":"BSI:WID-SEC-2026-1287","date":"2026-09-01","title":"Red Hat Hardened Images RPMs (libxslt): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1287"},{"id":"BSI:WID-SEC-2026-1290","date":"2026-09-01","title":"MIT Kerberos: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1290"},{"id":"BSI:WID-SEC-2026-1300","date":"2026-09-01","title":"GNU libc: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1300"},{"id":"BSI:WID-SEC-2026-2658","date":"2026-09-01","title":"X.Org X11 (libXfont2): Mehrere Schwachstellen ermöglichen Privilegieneskalation und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2658"},{"id":"BSI:WID-SEC-2026-2906","date":"2026-09-01","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2906"},{"id":"BSI:WID-SEC-2026-3005","date":"2026-09-01","title":"OpenSSL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3005"},{"id":"BSI:WID-SEC-2026-3065","date":"2026-09-01","title":"gdk-pixbuf: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3065"},{"id":"BSI:WID-SEC-2026-3130","date":"2026-09-01","title":"IBM i: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3130"},{"id":"ICSA-26-244-01","date":"2026-09-01","title":"Rockwell Automation RSLinx Classic","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01"},{"id":"ICSA-26-244-02","date":"2026-09-01","title":"Rockwell Automation Redundancy Module Configuration Tool","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-02"},{"id":"ICSA-26-244-03","date":"2026-09-01","title":"Rockwell Automation Logix Platform","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-03"},{"id":"ICSA-26-244-04","date":"2026-09-01","title":"Rockwell Automation FactoryTalk Activation Manager","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-04"},{"id":"ICSA-26-244-05","date":"2026-09-01","title":"Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-05"},{"id":"ICSA-26-244-06","date":"2026-09-01","title":"Rockwell Automation Historian ME","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06"},{"id":"GHSA-23W6-3W8W-8484","date":"2026-09-01","title":"pypdf: Possible long runtimes/large memory usage when retrieving outlines","source_url":"https://github.com/advisories/GHSA-23w6-3w8w-8484"},{"id":"GHSA-2M8G-3CMR-WG3W","date":"2026-09-01","title":"Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`","source_url":"https://github.com/advisories/GHSA-2m8g-3cmr-wg3w"},{"id":"GHSA-3WGP-X9P5-C7CC","date":"2026-09-01","title":"Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes","source_url":"https://github.com/advisories/GHSA-3wgp-x9p5-c7cc"},{"id":"GHSA-763M-79HH-57F2","date":"2026-09-01","title":"pypdf: Possible long runtimes/large memory usage when extracting XForm objects","source_url":"https://github.com/advisories/GHSA-763m-79hh-57f2"},{"id":"GHSA-8423-8FGW-73VQ","date":"2026-09-01","title":"tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)","source_url":"https://github.com/advisories/GHSA-8423-8fgw-73vq"},{"id":"GHSA-CFQR-CJX5-5JCM","date":"2026-09-01","title":"sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption","source_url":"https://github.com/advisories/GHSA-cfqr-cjx5-5jcm"},{"id":"GHSA-CQ55-C7WV-PXMQ","date":"2026-09-01","title":"Smarty: SSRF via redirect bypass of trusted_uri using {fetch}","source_url":"https://github.com/advisories/GHSA-cq55-c7wv-pxmq"},{"id":"GHSA-G47C-3XMW-Q6M2","date":"2026-09-01","title":"Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests","source_url":"https://github.com/advisories/GHSA-g47c-3xmw-q6m2"},{"id":"GHSA-G8QQ-57P8-GGW5","date":"2026-09-01","title":"ApostropheCMS: Stored XSS via SVG SMIL URI-list scheme-policy bypass","source_url":"https://github.com/advisories/GHSA-g8qq-57p8-ggw5"},{"id":"GHSA-JP53-MHQP-8XCG","date":"2026-09-01","title":"pypdf: Possible infinite loop for TreeObject.insert_child","source_url":"https://github.com/advisories/GHSA-jp53-mhqp-8xcg"},{"id":"GHSA-R3J6-GPJW-QFJR","date":"2026-09-01","title":"Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used","source_url":"https://github.com/advisories/GHSA-r3j6-gpjw-qfjr"},{"id":"GHSA-RF2P-VH74-7VVH","date":"2026-09-01","title":"Kirby: System path exposure from error messages in the REST API","source_url":"https://github.com/advisories/GHSA-rf2p-vh74-7vvh"},{"id":"IBM:7285838","date":"2026-09-01","title":"Security Bulletin: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms is vulnerable to cross-site scripting.","source_url":"https://www.ibm.com/support/pages/node/7285838"},{"id":"IBM:7285848","date":"2026-09-01","title":"Security Bulletin: IBM i is Affected By An Incorrect Authorization Vulnerability [CVE-2026-16941]","source_url":"https://www.ibm.com/support/pages/node/7285848"},{"id":"IBM:7285883","date":"2026-09-01","title":"Security Bulletin: IBM ApplinX is vulnerable to allocation of resources without limits or throttling vulnerability caused due to parsing oversized baggage.","source_url":"https://www.ibm.com/support/pages/node/7285883"},{"id":"IBM:7285891","date":"2026-09-01","title":"Security Bulletin: A Vulnerability of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments","source_url":"https://www.ibm.com/support/pages/node/7285891"},{"id":"IBM:7285892","date":"2026-09-01","title":"Security Bulletin: A Vulnerability of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.","source_url":"https://www.ibm.com/support/pages/node/7285892"},{"id":"IBM:7285903","date":"2026-09-01","title":"Security Bulletin: Security vulnerability affects IBM® SDK, Java™ Technology Edition (CVE-2026-71054)","source_url":"https://www.ibm.com/support/pages/node/7285903"},{"id":"IBM:7285904","date":"2026-09-01","title":"Security Bulletin: IBM Db2 Mirror for i is affected by multiple vulnerabilities [CVE-2026-18567, CVE-2026-16660, CVE-2026-17483]","source_url":"https://www.ibm.com/support/pages/node/7285904"},{"id":"IBM:7285926","date":"2026-09-01","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition, an IBM Websphere (WAS) prerequisite. WAS is used by IBM Rational ClearQuest","source_url":"https://www.ibm.com/support/pages/node/7285926"},{"id":"IBM:7285937","date":"2026-09-01","title":"Security Bulletin: IBM i is Affected By Denial of Service Vulnerability in Save Restore [CVE-2026-18078]","source_url":"https://www.ibm.com/support/pages/node/7285937"},{"id":"IBM:7285939","date":"2026-09-01","title":"Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [CVE-2026-17470, CVE-2026-17469]","source_url":"https://www.ibm.com/support/pages/node/7285939"},{"id":"IBM:7285940","date":"2026-09-01","title":"Security Bulletin: IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE [CVE-2026-18887]","source_url":"https://www.ibm.com/support/pages/node/7285940"},{"id":"IBM:7285990","date":"2026-09-01","title":"Security Bulletin: Multiple security vulnerabilities in .NET affect IBM Robotic Process Automation","source_url":"https://www.ibm.com/support/pages/node/7285990"},{"id":"NCSC-2026-0335","date":"2026-09-01","title":"NCSC-2026-0335 Kwetsbaarheden verholpen in WatchGuard Fireware OS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0335"},{"id":"RHSA-2026:61943","date":"2026-09-01","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61943"},{"id":"RHSA-2026:62143","date":"2026-09-01","title":"wget security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62143"},{"id":"RHSA-2026:62144","date":"2026-09-01","title":"wget security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:62144"},{"id":"RHSA-2026:62217","date":"2026-09-01","title":"libssh security update","source_url":"https://access.redhat.com/errata/RHSA-2026:62217"},{"id":"USN-8555-2","date":"2026-09-01","title":"USN-8555-2: Ubuntu Advantage Tools (pro client) regression","source_url":"https://ubuntu.com/security/notices/USN-8555-2"},{"id":"USN-8688-2","date":"2026-09-01","title":"USN-8688-2: PAM vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8688-2"},{"id":"USN-8690-1","date":"2026-09-01","title":"USN-8690-1: Pillow vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8690-1"},{"id":"USN-8708-1","date":"2026-09-01","title":"USN-8708-1: sudo-rs vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8708-1"},{"id":"USN-8709-1","date":"2026-09-01","title":"USN-8709-1: ncurses vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8709-1"},{"id":"USN-8710-1","date":"2026-09-01","title":"USN-8710-1: libevent vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8710-1"},{"id":"USN-8711-1","date":"2026-09-01","title":"USN-8711-1: Libgcrypt vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8711-1"},{"id":"USN-8712-1","date":"2026-09-01","title":"USN-8712-1: pyasn1 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8712-1"},{"id":"BSI:WID-SEC-2026-1240","date":"2026-09-01","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1240"},{"id":"BSI:WID-SEC-2026-1335","date":"2026-09-01","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1335"},{"id":"GHSA-WWV5-G3V4-889X","date":"2026-09-01","title":"Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`","source_url":"https://github.com/advisories/GHSA-wwv5-g3v4-889x"},{"id":"GHSA-XWPV-PQXP-5V36","date":"2026-09-01","title":"Filament: Password validity disclosure for accounts denied panel access on login page","source_url":"https://github.com/advisories/GHSA-xwpv-pqxp-5v36"},{"id":"IBM:7285938","date":"2026-09-01","title":"Security Bulletin: IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH [CVE-2026-18858]","source_url":"https://www.ibm.com/support/pages/node/7285938"},{"id":"RHSA-2026:60866","date":"2026-09-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:60866"},{"id":"IBM:7285704","date":"2026-08-31","title":"Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7285704"},{"id":"IBM:7285706","date":"2026-08-31","title":"Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7285706"},{"id":"IBM:7285729","date":"2026-08-31","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime","source_url":"https://www.ibm.com/support/pages/node/7285729"},{"id":"IBM:7285740","date":"2026-08-31","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for August 2026","source_url":"https://www.ibm.com/support/pages/node/7285740"},{"id":"IBM:7285769","date":"2026-08-31","title":"Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7285769"},{"id":"BSI:WID-SEC-2026-2093","date":"2026-08-31","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2093"},{"id":"BSI:WID-SEC-2026-2880","date":"2026-08-31","title":"Roundcube Webmail: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2880"},{"id":"BSI:WID-SEC-2026-3042","date":"2026-08-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3042"},{"id":"BSI:WID-SEC-2026-3046","date":"2026-08-31","title":"IBM Concert: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3046"},{"id":"BSI:WID-SEC-2026-3096","date":"2026-08-31","title":"Langflow OSS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3096"},{"id":"GHSA-67MX-6WF2-92XP","date":"2026-08-31","title":"Kirby: File upload permissions are not checked during processing of chunk data","source_url":"https://github.com/advisories/GHSA-67mx-6wf2-92xp"},{"id":"GHSA-8X3Q-JPJH-QH5C","date":"2026-08-31","title":"elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback","source_url":"https://github.com/advisories/GHSA-8x3q-jpjh-qh5c"},{"id":"GHSA-9VX2-J98C-P72W","date":"2026-08-31","title":"Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling","source_url":"https://github.com/advisories/GHSA-9vx2-j98c-p72w"},{"id":"GHSA-GR94-W7QR-F4J3","date":"2026-08-31","title":"Socket.IO: Engine.IO WebTransport SID DoS","source_url":"https://github.com/advisories/GHSA-gr94-w7qr-f4j3"},{"id":"IBM:7285705","date":"2026-08-31","title":"Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7285705"},{"id":"IBM:7285711","date":"2026-08-31","title":"Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog and IBM Master Data Management Neo4j On Cloud Pak for Data","source_url":"https://www.ibm.com/support/pages/node/7285711"},{"id":"IBM:7285717","date":"2026-08-31","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to an Interpretation Conflict due to Node.js module fast-uri (CVE-2026-16221)","source_url":"https://www.ibm.com/support/pages/node/7285717"},{"id":"IBM:7285718","date":"2026-08-31","title":"Security Bulletin: IBM Maximo Application Suite uses IBM WebSphere Application Server Liberty v.26.0.0.6 which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285718"},{"id":"IBM:7285722","date":"2026-08-31","title":"Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285722"},{"id":"IBM:7285733","date":"2026-08-31","title":"Security Bulletin: Maximo AI Service uses perl 0:5.32.1-481.1.el9_6 which is vulnerable to CVE-2023-47038 and CVE-2025-40909.","source_url":"https://www.ibm.com/support/pages/node/7285733"},{"id":"IBM:7285766","date":"2026-08-31","title":"Security Bulletin: Resolved multiple XSS vulnerabilities in DOMPurify (CVE-2026-49978, CVE-2026-65898, CVE-2026-66010, and others)","source_url":"https://www.ibm.com/support/pages/node/7285766"},{"id":"IBM:7285774","date":"2026-08-31","title":"Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7285774"},{"id":"IBM:7285775","date":"2026-08-31","title":"Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7285775"},{"id":"IBM:7285777","date":"2026-08-31","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-6321)","source_url":"https://www.ibm.com/support/pages/node/7285777"},{"id":"IBM:7285781","date":"2026-08-31","title":"Security Bulletin: IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-65898, CVE-2026-65899, CVE-2026-65900","source_url":"https://www.ibm.com/support/pages/node/7285781"},{"id":"IBM:7285783","date":"2026-08-31","title":"Security Bulletin: IBM Maximo Application Suite uses nanoid-3.3.11.tgz which is vulnerable to CVE-2026-67213, CVE-2026-67214","source_url":"https://www.ibm.com/support/pages/node/7285783"},{"id":"RHSA-2026:56786","date":"2026-08-31","title":"OpenShift Container Platform 4.14.72 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56786"},{"id":"RHSA-2026:56853","date":"2026-08-31","title":"OpenShift Container Platform 4.16.69 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56853"},{"id":"RHSA-2026:56911","date":"2026-08-31","title":"OpenShift Container Platform 4.15.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56911"},{"id":"RHSA-2026:61231","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61231"},{"id":"RHSA-2026:61232","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61232"},{"id":"RHSA-2026:61233","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61233"},{"id":"RHSA-2026:61234","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61234"},{"id":"RHSA-2026:61235","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61235"},{"id":"RHSA-2026:61236","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61236"},{"id":"RHSA-2026:61242","date":"2026-08-31","title":"mingw-sqlite security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61242"},{"id":"RHSA-2026:61249","date":"2026-08-31","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61249"},{"id":"RHSA-2026:61250","date":"2026-08-31","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61250"},{"id":"RHSA-2026:61251","date":"2026-08-31","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61251"},{"id":"RHSA-2026:61252","date":"2026-08-31","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61252"},{"id":"RHSA-2026:61254","date":"2026-08-31","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61254"},{"id":"RHSA-2026:61255","date":"2026-08-31","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61255"},{"id":"RHSA-2026:61257","date":"2026-08-31","title":"iperf3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61257"},{"id":"RHSA-2026:61258","date":"2026-08-31","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61258"},{"id":"RHSA-2026:61260","date":"2026-08-31","title":"sg3_utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61260"},{"id":"RHSA-2026:61261","date":"2026-08-31","title":"sg3_utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61261"},{"id":"RHSA-2026:61310","date":"2026-08-31","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61310"},{"id":"RHSA-2026:61313","date":"2026-08-31","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61313"},{"id":"RHSA-2026:61315","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61315"},{"id":"RHSA-2026:61316","date":"2026-08-31","title":"xmlrpc-c security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61316"},{"id":"RHSA-2026:61374","date":"2026-08-31","title":"nodejs-nodemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61374"},{"id":"RHSA-2026:61376","date":"2026-08-31","title":"nodejs22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61376"},{"id":"RHSA-2026:61377","date":"2026-08-31","title":"nodejs24 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61377"},{"id":"RHSA-2026:61379","date":"2026-08-31","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61379"},{"id":"RHSA-2026:61383","date":"2026-08-31","title":"nodejs:22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61383"},{"id":"RHSA-2026:61386","date":"2026-08-31","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61386"},{"id":"RHSA-2026:61389","date":"2026-08-31","title":"iperf3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61389"},{"id":"RHSA-2026:61585","date":"2026-08-31","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61585"},{"id":"RHSA-2026:61627","date":"2026-08-31","title":"Red Hat AI Inference Server 3.2.2 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:61627"},{"id":"RHSA-2026:61628","date":"2026-08-31","title":"Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:61628"},{"id":"RHSA-2026:61629","date":"2026-08-31","title":"Red Hat AI Inference Server 3.2.2 (ROCm)","source_url":"https://access.redhat.com/errata/RHSA-2026:61629"},{"id":"RHSA-2026:61657","date":"2026-08-31","title":"compat-libtiff3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61657"},{"id":"RHSA-2026:61679","date":"2026-08-31","title":"iscsi-initiator-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61679"},{"id":"RHSA-2026:61680","date":"2026-08-31","title":"iperf3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61680"},{"id":"RHSA-2026:61752","date":"2026-08-31","title":"libssh2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61752"},{"id":"RHSA-2026:61755","date":"2026-08-31","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61755"},{"id":"RHSA-2026:61756","date":"2026-08-31","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61756"},{"id":"RHSA-2026:61768","date":"2026-08-31","title":"pipewire security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61768"},{"id":"RHSA-2026:61779","date":"2026-08-31","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61779"},{"id":"RHSA-2026:61783","date":"2026-08-31","title":"A Subscription Management tool for finding and reporting Red Hat product usage","source_url":"https://access.redhat.com/errata/RHSA-2026:61783"},{"id":"BSI:WID-SEC-2026-2278","date":"2026-08-31","title":"wget: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2278"},{"id":"BSI:WID-SEC-2026-2289","date":"2026-08-31","title":"Grafana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2289"},{"id":"BSI:WID-SEC-2026-2407","date":"2026-08-31","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2407"},{"id":"BSI:WID-SEC-2026-2517","date":"2026-08-31","title":"Keycloak: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2517"},{"id":"BSI:WID-SEC-2026-2573","date":"2026-08-31","title":"Keycloak: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2573"},{"id":"BSI:WID-SEC-2026-2614","date":"2026-08-31","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2614"},{"id":"BSI:WID-SEC-2026-2725","date":"2026-08-31","title":"Red Hat Enterprise Linux (brace-expansion): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2725"},{"id":"BSI:WID-SEC-2026-3090","date":"2026-08-31","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3090"},{"id":"BSI:WID-SEC-2026-3094","date":"2026-08-31","title":"rsyslog: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3094"},{"id":"BSI:WID-SEC-2026-3097","date":"2026-08-31","title":"HP Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3097"},{"id":"BSI:WID-SEC-2026-3099","date":"2026-08-31","title":"Red Hat Undertow: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3099"},{"id":"BSI:WID-SEC-2026-3100","date":"2026-08-31","title":"PJSIP: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3100"},{"id":"GHSA-FM3F-CH8H-QW8Q","date":"2026-08-31","title":"@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking","source_url":"https://github.com/advisories/GHSA-fm3f-ch8h-qw8q"},{"id":"GHSA-MFQJ-CQV3-H7XW","date":"2026-08-31","title":"TYPO3 CMS - Unrestricted File Upload in Form Framework","source_url":"https://github.com/advisories/GHSA-mfqj-cqv3-h7xw"},{"id":"GHSA-VCC3-GHJQ-M6FR","date":"2026-08-31","title":"decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input","source_url":"https://github.com/advisories/GHSA-vcc3-ghjq-m6fr"},{"id":"IBM:7285702","date":"2026-08-31","title":"Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285702"},{"id":"IBM:7285720","date":"2026-08-31","title":"Security Bulletin: IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures","source_url":"https://www.ibm.com/support/pages/node/7285720"},{"id":"IBM:7285721","date":"2026-08-31","title":"Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285721"},{"id":"IBM:7285726","date":"2026-08-31","title":"Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Improper Encoding or Escaping of Output due to Apache Log4j (CVE-2026-49844)","source_url":"https://www.ibm.com/support/pages/node/7285726"},{"id":"IBM:7285737","date":"2026-08-31","title":"Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285737"},{"id":"IBM:7285757","date":"2026-08-31","title":"Security Bulletin: Maximo AI Service uses java 17.0.13 which is vulnerable to CVE-2025-21502.","source_url":"https://www.ibm.com/support/pages/node/7285757"},{"id":"IBM:7285843","date":"2026-08-31","title":"Security Bulletin: IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [CVE-2026-16892]","source_url":"https://www.ibm.com/support/pages/node/7285843"},{"id":"IBM:7285844","date":"2026-08-31","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Debug Server","source_url":"https://www.ibm.com/support/pages/node/7285844"},{"id":"IBM:7285846","date":"2026-08-31","title":"Security Bulletin: IBM i is Affected By Cryptographic Algorithm Weakness in DCM [CVE-2026-16693]","source_url":"https://www.ibm.com/support/pages/node/7285846"},{"id":"IBM:7285847","date":"2026-08-31","title":"Security Bulletin: IBM i is Affected By Denial of Service Vulnerabilities in NFS [CVE-2026-17057, CVE-2026-17207]","source_url":"https://www.ibm.com/support/pages/node/7285847"},{"id":"RHSA-2026:61223","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61223"},{"id":"RHSA-2026:61224","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61224"},{"id":"RHSA-2026:61225","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61225"},{"id":"RHSA-2026:61226","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61226"},{"id":"RHSA-2026:61227","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61227"},{"id":"RHSA-2026:61228","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61228"},{"id":"RHSA-2026:61229","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61229"},{"id":"RHSA-2026:61230","date":"2026-08-31","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61230"},{"id":"RHSA-2026:61239","date":"2026-08-31","title":"NetworkManager security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61239"},{"id":"RHSA-2026:61247","date":"2026-08-31","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61247"},{"id":"RHSA-2026:61248","date":"2026-08-31","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61248"},{"id":"RHSA-2026:61355","date":"2026-08-31","title":"dbus-broker security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61355"},{"id":"RHSA-2026:61572","date":"2026-08-31","title":"NetworkManager security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61572"},{"id":"RHSA-2026:61580","date":"2026-08-31","title":"NetworkManager security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61580"},{"id":"RHSA-2026:61581","date":"2026-08-31","title":"tar security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:61581"},{"id":"RHSA-2026:61588","date":"2026-08-31","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61588"},{"id":"RHSA-2026:61623","date":"2026-08-31","title":"gzip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61623"},{"id":"RHSA-2026:61625","date":"2026-08-31","title":"gzip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61625"},{"id":"RHSA-2026:61766","date":"2026-08-31","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:61766"},{"id":"USN-8678-3","date":"2026-08-31","title":"USN-8678-3: OpenSSL vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8678-3"},{"id":"USN-8689-1","date":"2026-08-31","title":"USN-8689-1: OpenJDK 26 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8689-1"},{"id":"USN-8697-1","date":"2026-08-31","title":"USN-8697-1: GNU Core Utilities vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8697-1"},{"id":"USN-8698-1","date":"2026-08-31","title":"USN-8698-1: FreeRDP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8698-1"},{"id":"USN-8699-1","date":"2026-08-31","title":"USN-8699-1: libssh vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8699-1"},{"id":"USN-8700-1","date":"2026-08-31","title":"USN-8700-1: MySQL vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8700-1"},{"id":"USN-8701-1","date":"2026-08-31","title":"USN-8701-1: UDisks vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8701-1"},{"id":"USN-8702-1","date":"2026-08-31","title":"USN-8702-1: util-linux vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8702-1"},{"id":"USN-8703-1","date":"2026-08-31","title":"USN-8703-1: WebKitGTK vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8703-1"},{"id":"USN-8704-1","date":"2026-08-31","title":"USN-8704-1: GNU cpio vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8704-1"},{"id":"USN-8705-1","date":"2026-08-31","title":"USN-8705-1: OpenZFS vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8705-1"},{"id":"USN-8705-2","date":"2026-08-31","title":"USN-8705-2: OpenZFS vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8705-2"},{"id":"USN-8706-1","date":"2026-08-31","title":"USN-8706-1: zlib vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8706-1"},{"id":"BSI:WID-SEC-2026-1729","date":"2026-08-31","title":"bzip2: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1729"},{"id":"RHSA-2026:60855","date":"2026-08-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:60855"},{"id":"RHSA-2026:60856","date":"2026-08-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:60856"},{"id":"BSI:WID-SEC-2026-3071","date":"2026-08-28","title":"vm2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3071"},{"id":"GHSA-9X44-4GXF-8C25","date":"2026-08-28","title":"Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name","source_url":"https://github.com/advisories/GHSA-9x44-4gxf-8c25"},{"id":"GHSA-C64Q-HJ4J-375F","date":"2026-08-28","title":"Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)","source_url":"https://github.com/advisories/GHSA-c64q-hj4j-375f"},{"id":"GHSA-R82H-MQW3-FC56","date":"2026-08-28","title":"plone.app.event vulnerable to denial of service via iCalendar import","source_url":"https://github.com/advisories/GHSA-r82h-mqw3-fc56"},{"id":"GHSA-W23P-WRP7-CH38","date":"2026-08-28","title":"Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)","source_url":"https://github.com/advisories/GHSA-w23p-wrp7-ch38"},{"id":"GHSA-X5G3-W747-2H8Q","date":"2026-08-28","title":"plone.app.portlets vulnerable to denial of service via RSS feed portlet","source_url":"https://github.com/advisories/GHSA-x5g3-w747-2h8q"},{"id":"IBM:7285329","date":"2026-08-28","title":"Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core","source_url":"https://www.ibm.com/support/pages/node/7285329"},{"id":"IBM:7285504","date":"2026-08-28","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7285504"},{"id":"IBM:7285509","date":"2026-08-28","title":"Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by an unsafe deserialization and exposure of sensitive information (CVE-2026-14512, CVE-2026-14528 )","source_url":"https://www.ibm.com/support/pages/node/7285509"},{"id":"IBM:7285539","date":"2026-08-28","title":"Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7285539"},{"id":"IBM:7285542","date":"2026-08-28","title":"Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7285542"},{"id":"IBM:7285543","date":"2026-08-28","title":"Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses ansible_core-2.19.11, postcss-8.5.10 and dompurify-3.4.11 which are vulnerable to CVE-2026-16493, CVE-2026-45623, CVE-2026-69153 and CVE-2026-66010","source_url":"https://www.ibm.com/support/pages/node/7285543"},{"id":"IBM:7285584","date":"2026-08-28","title":"Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in IBM Semeru Runtime","source_url":"https://www.ibm.com/support/pages/node/7285584"},{"id":"BSI:WID-SEC-2026-2222","date":"2026-08-28","title":"Red Hat Enterprise Linux (python-pip): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2222"},{"id":"BSI:WID-SEC-2026-2356","date":"2026-08-28","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2356"},{"id":"BSI:WID-SEC-2026-2579","date":"2026-08-28","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2579"},{"id":"BSI:WID-SEC-2026-2953","date":"2026-08-28","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2953"},{"id":"BSI:WID-SEC-2026-2955","date":"2026-08-28","title":"VMware Tanzu Spring Framework: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2955"},{"id":"BSI:WID-SEC-2026-2956","date":"2026-08-28","title":"VMware Tanzu Spring Security: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2956"},{"id":"BSI:WID-SEC-2026-2959","date":"2026-08-28","title":"Tor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2959"},{"id":"BSI:WID-SEC-2026-2995","date":"2026-08-28","title":"Langflow OSS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2995"},{"id":"BSI:WID-SEC-2026-3029","date":"2026-08-28","title":"GitLab: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3029"},{"id":"BSI:WID-SEC-2026-3053","date":"2026-08-28","title":"Ruby: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3053"},{"id":"BSI:WID-SEC-2026-3060","date":"2026-08-28","title":"ServiceNow Now Platform und AI Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3060"},{"id":"BSI:WID-SEC-2026-3068","date":"2026-08-28","title":"WatchGuard Firebox OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3068"},{"id":"BSI:WID-SEC-2026-3070","date":"2026-08-28","title":"SmarterTools SmarterMail: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3070"},{"id":"BSI:WID-SEC-2026-3074","date":"2026-08-28","title":"CKAN: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3074"},{"id":"GHSA-2GH4-JMWQ-RR8W","date":"2026-08-28","title":"piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.","source_url":"https://github.com/advisories/GHSA-2gh4-jmwq-rr8w"},{"id":"GHSA-2Q2Q-JR9G-V9RF","date":"2026-08-28","title":"Weblate has IDOR in GroupViewSet that allows authenticated project manager to gain unauthorized read access to any private project","source_url":"https://github.com/advisories/GHSA-2q2q-jr9g-v9rf"},{"id":"GHSA-334Q-H5G3-FPXV","date":"2026-08-28","title":"free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI","source_url":"https://github.com/advisories/GHSA-334q-h5g3-fpxv"},{"id":"GHSA-56WQ-X3WV-3FF4","date":"2026-08-28","title":"SeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read","source_url":"https://github.com/advisories/GHSA-56wq-x3wv-3ff4"},{"id":"GHSA-575R-357H-FHCH","date":"2026-08-28","title":"Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update","source_url":"https://github.com/advisories/GHSA-575r-357h-fhch"},{"id":"GHSA-5V29-34H8-V68R","date":"2026-08-28","title":"MapFish Print has XXE that allows reading arbitrary files of certain types","source_url":"https://github.com/advisories/GHSA-5v29-34h8-v68r"},{"id":"GHSA-64F3-V33M-W89F","date":"2026-08-28","title":"Incus has a project restriction bypass for custom volume copy across projects","source_url":"https://github.com/advisories/GHSA-64f3-v33m-w89f"},{"id":"GHSA-786W-P5PM-CVGH","date":"2026-08-28","title":"phpSysInfo has an IP allowlist (PSI_ALLOWED) bypass via spoofed X-Forwarded-For / Client-IP headers","source_url":"https://github.com/advisories/GHSA-786w-p5pm-cvgh"},{"id":"GHSA-79CW-HFCC-7MW9","date":"2026-08-28","title":"Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes","source_url":"https://github.com/advisories/GHSA-79cw-hfcc-7mw9"},{"id":"GHSA-86M2-FCXQ-5Q7C","date":"2026-08-28","title":"9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF","source_url":"https://github.com/advisories/GHSA-86m2-fcxq-5q7c"},{"id":"GHSA-8GMQ-J984-VP4R","date":"2026-08-28","title":"9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass","source_url":"https://github.com/advisories/GHSA-8gmq-j984-vp4r"},{"id":"GHSA-C6F4-WJ38-M3G3","date":"2026-08-28","title":"Snipe-IT vulnerable to directory traversal in displaySig","source_url":"https://github.com/advisories/GHSA-c6f4-wj38-m3g3"},{"id":"GHSA-C9F5-J9C3-MHRG","date":"2026-08-28","title":"Incus has a project restriction bypass in instance copy across projects","source_url":"https://github.com/advisories/GHSA-c9f5-j9c3-mhrg"},{"id":"GHSA-CQHC-2H57-WPXF","date":"2026-08-28","title":"MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`","source_url":"https://github.com/advisories/GHSA-cqhc-2h57-wpxf"},{"id":"GHSA-F97C-PH8J-8VFF","date":"2026-08-28","title":"Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation","source_url":"https://github.com/advisories/GHSA-f97c-ph8j-8vff"},{"id":"GHSA-FFG3-P8FM-MJX2","date":"2026-08-28","title":"RestrictedPython guard hooks can be shadowed via positional-only arguments","source_url":"https://github.com/advisories/GHSA-ffg3-p8fm-mjx2"},{"id":"GHSA-GQR6-R77P-C2PJ","date":"2026-08-28","title":"Fortigate syslog message parser can be exploited to modify or delete fields from the original message","source_url":"https://github.com/advisories/GHSA-gqr6-r77p-c2pj"},{"id":"GHSA-H854-C3M3-MH5V","date":"2026-08-28","title":"Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass","source_url":"https://github.com/advisories/GHSA-h854-c3m3-mh5v"},{"id":"GHSA-HR6J-W4MW-G9MJ","date":"2026-08-28","title":"alos-http has unauthenticated remote DoS: malformed path starting with \"?\" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server","source_url":"https://github.com/advisories/GHSA-hr6j-w4mw-g9mj"},{"id":"GHSA-J5G3-42WP-GQM3","date":"2026-08-28","title":"Snipe-IT has an Improper Privilege Management issue","source_url":"https://github.com/advisories/GHSA-j5g3-42wp-gqm3"},{"id":"GHSA-JQVF-J3WW-R8C7","date":"2026-08-28","title":"PowSyBl Core has Command Injection in LocalCommandExecutor-s","source_url":"https://github.com/advisories/GHSA-jqvf-j3ww-r8c7"},{"id":"GHSA-MRPP-V6PG-P54X","date":"2026-08-28","title":"klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply","source_url":"https://github.com/advisories/GHSA-mrpp-v6pg-p54x"},{"id":"GHSA-P68J-Q7HF-3QCP","date":"2026-08-28","title":"Spinnaker: Improper yaml processing on kustomize bake operations","source_url":"https://github.com/advisories/GHSA-p68j-q7hf-3qcp"},{"id":"GHSA-P6GW-4FRG-J7JW","date":"2026-08-28","title":"WsgiDAV MySQL provider has a blind SQL injection","source_url":"https://github.com/advisories/GHSA-p6gw-4frg-j7jw"},{"id":"GHSA-V358-WF77-39XV","date":"2026-08-28","title":"klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits","source_url":"https://github.com/advisories/GHSA-v358-wf77-39xv"},{"id":"GHSA-VGX7-C78R-69W9","date":"2026-08-28","title":"Snipe-IT has an authorization bypass on bulk editing users","source_url":"https://github.com/advisories/GHSA-vgx7-c78r-69w9"},{"id":"GHSA-W98G-5W9P-P3RC","date":"2026-08-28","title":"Bifrost's SSRF deny-list is incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL","source_url":"https://github.com/advisories/GHSA-w98g-5w9p-p3rc"},{"id":"GHSA-WJMF-P669-5M5P","date":"2026-08-28","title":"Protego has exponential backtracking ReDoS in robots.txt URL wildcard matching","source_url":"https://github.com/advisories/GHSA-wjmf-p669-5m5p"},{"id":"GHSA-X626-FCWX-F5PC","date":"2026-08-28","title":"Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances","source_url":"https://github.com/advisories/GHSA-x626-fcwx-f5pc"},{"id":"IBM:7285506","date":"2026-08-28","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7285506"},{"id":"IBM:7285507","date":"2026-08-28","title":"Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)","source_url":"https://www.ibm.com/support/pages/node/7285507"},{"id":"IBM:7285508","date":"2026-08-28","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite","source_url":"https://www.ibm.com/support/pages/node/7285508"},{"id":"IBM:7285513","date":"2026-08-28","title":"Security Bulletin: There is a vulnerability in IBM WebSphere Application Server Liberty used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-11806, CVE-2026-11541)","source_url":"https://www.ibm.com/support/pages/node/7285513"},{"id":"IBM:7285536","date":"2026-08-28","title":"Security Bulletin: Security vulnerabilities have been identified in Jackson Databind shipped with IBM Guardium Cryptography Manager (GCM)","source_url":"https://www.ibm.com/support/pages/node/7285536"},{"id":"IBM:7285538","date":"2026-08-28","title":"Security Bulletin: Security vulnerabilities have been identified in Java Jackson Databind library shipped with IBM Guardium Cryptography Manager (GCM)","source_url":"https://www.ibm.com/support/pages/node/7285538"},{"id":"IBM:7285541","date":"2026-08-28","title":"Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component uses pyasn1-0.6.3 which is vulnerable to CVE-2026-59884, CVE-2026-59885, CVE-2026-59886","source_url":"https://www.ibm.com/support/pages/node/7285541"},{"id":"IBM:7285583","date":"2026-08-28","title":"Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office","source_url":"https://www.ibm.com/support/pages/node/7285583"},{"id":"IBM:7285586","date":"2026-08-28","title":"Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache Thrift","source_url":"https://www.ibm.com/support/pages/node/7285586"},{"id":"IBM:7285642","date":"2026-08-28","title":"Security Bulletin: Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows","source_url":"https://www.ibm.com/support/pages/node/7285642"},{"id":"IBM:7285643","date":"2026-08-28","title":"Security Bulletin: Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components","source_url":"https://www.ibm.com/support/pages/node/7285643"},{"id":"NCSC-2026-0333","date":"2026-08-28","title":"NCSC-2026-0333 Kwetsbaarheden verholpen in CodeMeter Runtime van Wibu-Systems","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0333"},{"id":"BSI:WID-SEC-2026-0092","date":"2026-08-28","title":"Insyde UEFI Firmware: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0092"},{"id":"BSI:WID-SEC-2026-2187","date":"2026-08-28","title":"GIMP: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2187"},{"id":"BSI:WID-SEC-2026-2204","date":"2026-08-28","title":"GIMP: Schwachstelle ermöglicht Codeausführung und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2204"},{"id":"BSI:WID-SEC-2026-2245","date":"2026-08-28","title":"Wireshark: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2245"},{"id":"BSI:WID-SEC-2026-2309","date":"2026-08-28","title":"Perl: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2309"},{"id":"BSI:WID-SEC-2026-2952","date":"2026-08-28","title":"VMware Tanzu Spring Cloud: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2952"},{"id":"BSI:WID-SEC-2026-2972","date":"2026-08-28","title":"Red Hat Enterprise Linux (assertj): Schwachstelle ermöglicht Offenlegung von Informationen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2972"},{"id":"BSI:WID-SEC-2026-3056","date":"2026-08-28","title":"Foreman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3056"},{"id":"BSI:WID-SEC-2026-3059","date":"2026-08-28","title":"Red Hat Undertow: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3059"},{"id":"BSI:WID-SEC-2026-3062","date":"2026-08-28","title":"IBM SPSS Analytic Server: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3062"},{"id":"BSI:WID-SEC-2026-3063","date":"2026-08-28","title":"GNU libc: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3063"},{"id":"BSI:WID-SEC-2026-3064","date":"2026-08-28","title":"ffmpeg: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3064"},{"id":"BSI:WID-SEC-2026-3067","date":"2026-08-28","title":"n8n: Schwachstelle ermöglicht Manipulation von Dateien und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3067"},{"id":"BSI:WID-SEC-2026-3069","date":"2026-08-28","title":"VMware Tanzu Spring Framework: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3069"},{"id":"GHSA-2P9G-X3CV-5HH4","date":"2026-08-28","title":"Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups","source_url":"https://github.com/advisories/GHSA-2p9g-x3cv-5hh4"},{"id":"GHSA-35CR-9HQQ-P2MG","date":"2026-08-28","title":"Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint","source_url":"https://github.com/advisories/GHSA-35cr-9hqq-p2mg"},{"id":"GHSA-42R5-VHPQ-M858","date":"2026-08-28","title":"MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials","source_url":"https://github.com/advisories/GHSA-42r5-vhpq-m858"},{"id":"GHSA-53JC-27PC-X8R8","date":"2026-08-28","title":"Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter","source_url":"https://github.com/advisories/GHSA-53jc-27pc-x8r8"},{"id":"GHSA-5RQC-86VF-G8R2","date":"2026-08-28","title":"org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output","source_url":"https://github.com/advisories/GHSA-5rqc-86vf-g8r2"},{"id":"GHSA-5WX7-XQ8J-V4QM","date":"2026-08-28","title":"Snipe-IT's import created_by can be overwritten","source_url":"https://github.com/advisories/GHSA-5wx7-xq8j-v4qm"},{"id":"GHSA-73P9-6HRP-8QHR","date":"2026-08-28","title":"AIIR verification and policy gates could report success without enforcing the control (fail-open)","source_url":"https://github.com/advisories/GHSA-73p9-6hrp-8qhr"},{"id":"GHSA-8FRH-VHGH-64CF","date":"2026-08-28","title":"Snipe-IT has incorrect permission for legacy license checkin API","source_url":"https://github.com/advisories/GHSA-8frh-vhgh-64cf"},{"id":"GHSA-8W8C-8MX9-52CW","date":"2026-08-28","title":"Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation","source_url":"https://github.com/advisories/GHSA-8w8c-8mx9-52cw"},{"id":"GHSA-9272-WG2R-7XMX","date":"2026-08-28","title":"Yamcs has DOM XSS in Extension Routing","source_url":"https://github.com/advisories/GHSA-9272-wg2r-7xmx"},{"id":"GHSA-9PWQ-GCRX-WGHH","date":"2026-08-28","title":"Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref","source_url":"https://github.com/advisories/GHSA-9pwq-gcrx-wghh"},{"id":"GHSA-C857-9X2M-CVH2","date":"2026-08-28","title":"org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)","source_url":"https://github.com/advisories/GHSA-c857-9x2m-cvh2"},{"id":"GHSA-CRV3-J83J-F3R6","date":"2026-08-28","title":"Snipe-IT has missing object-level authorization in Kits API","source_url":"https://github.com/advisories/GHSA-crv3-j83j-f3r6"},{"id":"GHSA-F2XF-7X3G-4272","date":"2026-08-28","title":"PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction","source_url":"https://github.com/advisories/GHSA-f2xf-7x3g-4272"},{"id":"GHSA-F9QC-QG88-7PQ5","date":"2026-08-28","title":"Buffa Vulnerable to Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation","source_url":"https://github.com/advisories/GHSA-f9qc-qg88-7pq5"},{"id":"GHSA-FC33-6W3Q-538H","date":"2026-08-28","title":"Snipe-IT has an authorization bypass on print inventory page","source_url":"https://github.com/advisories/GHSA-fc33-6w3q-538h"},{"id":"GHSA-G5XC-5W98-JFVM","date":"2026-08-28","title":"MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets","source_url":"https://github.com/advisories/GHSA-g5xc-5w98-jfvm"},{"id":"GHSA-G9JJ-CGMH-9F38","date":"2026-08-28","title":"MariaDB has cleartext password disclosure to a MITM on the initial-handshake","source_url":"https://github.com/advisories/GHSA-g9jj-cgmh-9f38"},{"id":"GHSA-HGPF-8634-G44C","date":"2026-08-28","title":"SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets","source_url":"https://github.com/advisories/GHSA-hgpf-8634-g44c"},{"id":"GHSA-J769-9GV9-65GR","date":"2026-08-28","title":"Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens","source_url":"https://github.com/advisories/GHSA-j769-9gv9-65gr"},{"id":"GHSA-JHPH-5Q74-PMFX","date":"2026-08-28","title":"Snipe-IT vulnerable to stored XSS via inline-served attachment","source_url":"https://github.com/advisories/GHSA-jhph-5q74-pmfx"},{"id":"GHSA-M4G4-86QC-V8W7","date":"2026-08-28","title":"silverstripe/versioned has XSS in archive admin restore","source_url":"https://github.com/advisories/GHSA-m4g4-86qc-v8w7"},{"id":"GHSA-P378-JP5R-GPGW","date":"2026-08-28","title":"arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset","source_url":"https://github.com/advisories/GHSA-p378-jp5r-gpgw"},{"id":"GHSA-Q79R-R9XG-R863","date":"2026-08-28","title":"Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields","source_url":"https://github.com/advisories/GHSA-q79r-r9xg-r863"},{"id":"GHSA-QXVW-FVWX-5CP7","date":"2026-08-28","title":"org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials","source_url":"https://github.com/advisories/GHSA-qxvw-fvwx-5cp7"},{"id":"GHSA-R52F-R9V5-66XR","date":"2026-08-28","title":"Snipe-IT vulnerable to stored XSS via Markdown custom field","source_url":"https://github.com/advisories/GHSA-r52f-r9v5-66xr"},{"id":"GHSA-W7QW-5WFV-GWX9","date":"2026-08-28","title":"Snipe-IT has CSS Injection via `header_color` Setting","source_url":"https://github.com/advisories/GHSA-w7qw-5wfv-gwx9"},{"id":"GHSA-WG2F-X2C2-C4RP","date":"2026-08-28","title":"Snipe-IT has an Open Redirect After User Edit","source_url":"https://github.com/advisories/GHSA-wg2f-x2c2-c4rp"},{"id":"GHSA-WHRX-MMGR-GPCF","date":"2026-08-28","title":"Snipe-IT has CSV formula injection in Activity Report export","source_url":"https://github.com/advisories/GHSA-whrx-mmgr-gpcf"},{"id":"GHSA-XVR9-35CR-46V9","date":"2026-08-28","title":"org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context","source_url":"https://github.com/advisories/GHSA-xvr9-35cr-46v9"},{"id":"IBM:7285505","date":"2026-08-28","title":"Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153)","source_url":"https://www.ibm.com/support/pages/node/7285505"},{"id":"IBM:7285518","date":"2026-08-28","title":"Security Bulletin: Vulnerability found in IBM ApplinX.","source_url":"https://www.ibm.com/support/pages/node/7285518"},{"id":"IBM:7285600","date":"2026-08-28","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Babel (@babel/helpers) (CVE-2025-27789)","source_url":"https://www.ibm.com/support/pages/node/7285600"},{"id":"IBM:7285633","date":"2026-08-28","title":"Security Bulletin: IBM DataPower Gateway affected by cross-site scripting due to DOMPurify (CVE-2026-66010)","source_url":"https://www.ibm.com/support/pages/node/7285633"},{"id":"IBM:7285636","date":"2026-08-28","title":"Security Bulletin: IBM DataPower Gateway affected by server-side request forgery (CVE-2026-14521)","source_url":"https://www.ibm.com/support/pages/node/7285636"},{"id":"IBM:7285644","date":"2026-08-28","title":"Security Bulletin: Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components","source_url":"https://www.ibm.com/support/pages/node/7285644"},{"id":"IBM:7285646","date":"2026-08-28","title":"Security Bulletin: Langflow is vulnerable to stored cross-site scripting and IP spoofing due to unsanitized Markdown rendering and untrusted proxy header trust","source_url":"https://www.ibm.com/support/pages/node/7285646"},{"id":"NCSC-2026-0334","date":"2026-08-28","title":"NCSC-2026-0334 Kwetsbaarheden verholpen in PaperCut MF en PaperCut NG van PaperCut","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0334"},{"id":"GHSA-298F-872V-2RCX","date":"2026-08-28","title":"ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption","source_url":"https://github.com/advisories/GHSA-298f-872v-2rcx"},{"id":"GHSA-FP46-6VFW-GC9C","date":"2026-08-28","title":"free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA","source_url":"https://github.com/advisories/GHSA-fp46-6vfw-gc9c"},{"id":"GHSA-XR9M-GPHC-9P63","date":"2026-08-28","title":"Snipe-IT has a path traversal vulnerability via CSV import `image` field","source_url":"https://github.com/advisories/GHSA-xr9m-gphc-9p63"},{"id":"GHSA-XRJC-C68J-HP7W","date":"2026-08-28","title":"PrivateBin has reflected JSON injection in backend responses via unescaped REQUEST_URI","source_url":"https://github.com/advisories/GHSA-xrjc-c68j-hp7w"},{"id":"BSI:WID-SEC-2026-2147","date":"2026-08-27","title":"Citrix Systems NetScaler ADC und Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2147"},{"id":"IBM:7285305","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)","source_url":"https://www.ibm.com/support/pages/node/7285305"},{"id":"IBM:7285307","date":"2026-08-27","title":"Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image","source_url":"https://www.ibm.com/support/pages/node/7285307"},{"id":"IBM:7285337","date":"2026-08-27","title":"Security Bulletin: Multiple Vulnerabilities in IBM Concert Software","source_url":"https://www.ibm.com/support/pages/node/7285337"},{"id":"IBM:7285339","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms","source_url":"https://www.ibm.com/support/pages/node/7285339"},{"id":"IBM:7285341","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager","source_url":"https://www.ibm.com/support/pages/node/7285341"},{"id":"IBM:7285411","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)","source_url":"https://www.ibm.com/support/pages/node/7285411"},{"id":"IBM:7285429","date":"2026-08-27","title":"Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization","source_url":"https://www.ibm.com/support/pages/node/7285429"},{"id":"IBM:7285441","date":"2026-08-27","title":"Security Bulletin: IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz package which is vulnerable to CVE-2026-45623.","source_url":"https://www.ibm.com/support/pages/node/7285441"},{"id":"IBM:7285469","date":"2026-08-27","title":"Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in jetty-ee8-security jar (CVE-2026-10050)","source_url":"https://www.ibm.com/support/pages/node/7285469"},{"id":"IBM:7285470","date":"2026-08-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU","source_url":"https://www.ibm.com/support/pages/node/7285470"},{"id":"NCSC-2026-0330","date":"2026-08-27","title":"NCSC-2026-0330 Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0330"},{"id":"NCSC-2026-0331","date":"2026-08-27","title":"NCSC-2026-0331 Kwetsbaarheden verholpen in Adobe Campaign Classic","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0331"},{"id":"NCSC-2026-0332","date":"2026-08-27","title":"NCSC-2026-0332 Kwetsbaarheden verholpen in Apache CloudStack","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0332"},{"id":"RHSA-2026:60520","date":"2026-08-27","title":"RHOAI 3.4.4 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"id":"BSI:WID-SEC-2022-0156","date":"2026-08-27","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0156"},{"id":"BSI:WID-SEC-2026-0401","date":"2026-08-27","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0401"},{"id":"BSI:WID-SEC-2026-0420","date":"2026-08-27","title":"Google Chrome und Microsoft Edge: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0420"},{"id":"BSI:WID-SEC-2026-0452","date":"2026-08-27","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0452"},{"id":"BSI:WID-SEC-2026-0481","date":"2026-08-27","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0481"},{"id":"BSI:WID-SEC-2026-0612","date":"2026-08-27","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0612"},{"id":"BSI:WID-SEC-2026-2272","date":"2026-08-27","title":"CPython: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2272"},{"id":"BSI:WID-SEC-2026-2280","date":"2026-08-27","title":"Kyverno: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2280"},{"id":"BSI:WID-SEC-2026-2379","date":"2026-08-27","title":"Ruby: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2379"},{"id":"BSI:WID-SEC-2026-2774","date":"2026-08-27","title":"ILIAS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2774"},{"id":"BSI:WID-SEC-2026-2817","date":"2026-08-27","title":"Rsync: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2817"},{"id":"BSI:WID-SEC-2026-3004","date":"2026-08-27","title":"Wibu-Systems CodeMeter Runtime: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3004"},{"id":"BSI:WID-SEC-2026-3008","date":"2026-08-27","title":"Veeam ONE: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3008"},{"id":"BSI:WID-SEC-2026-3028","date":"2026-08-27","title":"Ubiquiti UnifiOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3028"},{"id":"BSI:WID-SEC-2026-3035","date":"2026-08-27","title":"Microsoft SQL Server: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3035"},{"id":"BSI:WID-SEC-2026-3041","date":"2026-08-27","title":"Drupal Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3041"},{"id":"BSI:WID-SEC-2026-3045","date":"2026-08-27","title":"TeamViewer Clients: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3045"},{"id":"BSI:WID-SEC-2026-3052","date":"2026-08-27","title":"DENX U-Boot: Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3052"},{"id":"BSI:WID-SEC-2026-3054","date":"2026-08-27","title":"CKAN: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3054"},{"id":"BSI:WID-SEC-2026-3055","date":"2026-08-27","title":"OpenCTI: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3055"},{"id":"BSI:WID-SEC-2026-3058","date":"2026-08-27","title":"D-LINK DIR-X1860Z Router: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3058"},{"id":"GHSA-39MM-RWM3-29JP","date":"2026-08-27","title":"silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template","source_url":"https://github.com/advisories/GHSA-39mm-rwm3-29jp"},{"id":"GHSA-G8WR-R2V2-VQC6","date":"2026-08-27","title":"silverstripe/userforms vulnerable to remote code execution via userforms email subject","source_url":"https://github.com/advisories/GHSA-g8wr-r2v2-vqc6"},{"id":"GHSA-MF7Q-R4RV-JV94","date":"2026-08-27","title":"Crossplane's TOCTOU between cosign verification and image fetch in xpkg.CachedClient allows tag-based package install to bypass signature check","source_url":"https://github.com/advisories/GHSA-mf7q-r4rv-jv94"},{"id":"IBM:7284268","date":"2026-08-27","title":"Security Bulletin: Security vulnerability is addressed in IBM Daeja ViewONE as part of iFix release in August 2026","source_url":"https://www.ibm.com/support/pages/node/7284268"},{"id":"IBM:7285340","date":"2026-08-27","title":"Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is vulnerable to stored cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)","source_url":"https://www.ibm.com/support/pages/node/7285340"},{"id":"IBM:7285342","date":"2026-08-27","title":"Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by multiple vulnerabilities (CVE-2026-14981, CVE-2026-15064, CVE-2026-15328, CVE-2026-15325)","source_url":"https://www.ibm.com/support/pages/node/7285342"},{"id":"IBM:7285349","date":"2026-08-27","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in click (CVE-2026-7246)","source_url":"https://www.ibm.com/support/pages/node/7285349"},{"id":"IBM:7285360","date":"2026-08-27","title":"Security Bulletin: Multiple security vulnerabilities identified in Spring Framework version shipped with IBM Guardium Cryptography Manager (GCM)","source_url":"https://www.ibm.com/support/pages/node/7285360"},{"id":"IBM:7285365","date":"2026-08-27","title":"Security Bulletin: Security vulnerabilities have been identified in Golang version shipped with IBM Guardium Cryptography Manager (GCM)","source_url":"https://www.ibm.com/support/pages/node/7285365"},{"id":"IBM:7285366","date":"2026-08-27","title":"Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)","source_url":"https://www.ibm.com/support/pages/node/7285366"},{"id":"IBM:7285380","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software","source_url":"https://www.ibm.com/support/pages/node/7285380"},{"id":"IBM:7285420","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub","source_url":"https://www.ibm.com/support/pages/node/7285420"},{"id":"IBM:7285422","date":"2026-08-27","title":"Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285422"},{"id":"IBM:7285428","date":"2026-08-27","title":"Security Bulletin: IBM Maximo Application Suite - Monitor Component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244.","source_url":"https://www.ibm.com/support/pages/node/7285428"},{"id":"IBM:7285430","date":"2026-08-27","title":"Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285430"},{"id":"IBM:7285433","date":"2026-08-27","title":"Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285433"},{"id":"IBM:7285443","date":"2026-08-27","title":"Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7285443"},{"id":"IBM:7285472","date":"2026-08-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jetty-server jar (CVE-2026-10051, CVE-2026-6790)","source_url":"https://www.ibm.com/support/pages/node/7285472"},{"id":"RHSA-2026:60437","date":"2026-08-27","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60437"},{"id":"RHSA-2026:60438","date":"2026-08-27","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60438"},{"id":"RHSA-2026:60485","date":"2026-08-27","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60485"},{"id":"RHSA-2026:60486","date":"2026-08-27","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60486"},{"id":"BSI:WID-SEC-2026-0240","date":"2026-08-27","title":"Broadcom Brocade SANnav: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0240"},{"id":"BSI:WID-SEC-2026-2142","date":"2026-08-27","title":"Red Hat OpenShift Container Platform (protobufjs, fast-uri): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2142"},{"id":"BSI:WID-SEC-2026-2172","date":"2026-08-27","title":"Apache HttpComponents Core: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2172"},{"id":"BSI:WID-SEC-2026-2176","date":"2026-08-27","title":"vllm: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2176"},{"id":"BSI:WID-SEC-2026-2259","date":"2026-08-27","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2259"},{"id":"BSI:WID-SEC-2026-2843","date":"2026-08-27","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2843"},{"id":"BSI:WID-SEC-2026-2897","date":"2026-08-27","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2897"},{"id":"BSI:WID-SEC-2026-2920","date":"2026-08-27","title":"Red Hat Enterprise Linux (attr): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2920"},{"id":"BSI:WID-SEC-2026-2937","date":"2026-08-27","title":"Perl: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2937"},{"id":"BSI:WID-SEC-2026-3011","date":"2026-08-27","title":"Veeam Backup & Replication: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3011"},{"id":"BSI:WID-SEC-2026-3017","date":"2026-08-27","title":"Dell integrated Dell Remote Access Controller: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3017"},{"id":"BSI:WID-SEC-2026-3021","date":"2026-08-27","title":"PolicyKit: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3021"},{"id":"BSI:WID-SEC-2026-3040","date":"2026-08-27","title":"Snipe-IT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3040"},{"id":"BSI:WID-SEC-2026-3047","date":"2026-08-27","title":"IBM Planning Analytics: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3047"},{"id":"BSI:WID-SEC-2026-3048","date":"2026-08-27","title":"WP Royal Royal Elementor Addons: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3048"},{"id":"BSI:WID-SEC-2026-3049","date":"2026-08-27","title":"vim: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3049"},{"id":"BSI:WID-SEC-2026-3050","date":"2026-08-27","title":"RustDesk: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3050"},{"id":"BSI:WID-SEC-2026-3051","date":"2026-08-27","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3051"},{"id":"BSI:WID-SEC-2026-3057","date":"2026-08-27","title":"FreeRDP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3057"},{"id":"ICSA-25-128-03","date":"2026-08-27","title":"Mitsubishi Electric Multiple FA Products (Update D)","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03"},{"id":"ICSA-26-078-05","date":"2026-08-27","title":"Mitsubishi Electric CNC Series (Update A)","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-05"},{"id":"ICSA-26-239-01","date":"2026-08-27","title":"Xiiaozet LK100W","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01"},{"id":"ICSA-26-239-02","date":"2026-08-27","title":"All-Line Equipment Company Fuel-Boss","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-02"},{"id":"ICSA-26-239-03","date":"2026-08-27","title":"Rockwell Automation OTTO Fleet Manager","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-03"},{"id":"ICSA-26-239-04","date":"2026-08-27","title":"Applied Systems Engineering ASE2000 V2 Communications Test Set","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04"},{"id":"ICSA-26-239-05","date":"2026-08-27","title":"Ebyte NA111-M","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05"},{"id":"GHSA-6HX8-3WJJ-GR8G","date":"2026-08-27","title":"WebOb: Open redirect in Location header normalization via leading C0 control / space characters","source_url":"https://github.com/advisories/GHSA-6hx8-3wjj-gr8g"},{"id":"GHSA-GMXC-R82Q-347R","date":"2026-08-27","title":"libreoffice-convert vulnerable to path traversal / arbitrary file write","source_url":"https://github.com/advisories/GHSA-gmxc-r82q-347r"},{"id":"GHSA-GVRW-QQP5-JGC5","date":"2026-08-27","title":"Silverstripe Framework: Possible XSS attack through media embed","source_url":"https://github.com/advisories/GHSA-gvrw-qqp5-jgc5"},{"id":"GHSA-Q7M3-RHXG-7VXR","date":"2026-08-27","title":"n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)","source_url":"https://github.com/advisories/GHSA-q7m3-rhxg-7vxr"},{"id":"GHSA-VXJ7-4XRP-5VR4","date":"2026-08-27","title":"aiosmtplib: STARTTLS response injection","source_url":"https://github.com/advisories/GHSA-vxj7-4xrp-5vr4"},{"id":"IBM:7285306","date":"2026-08-27","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase","source_url":"https://www.ibm.com/support/pages/node/7285306"},{"id":"IBM:7285309","date":"2026-08-27","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-10571)","source_url":"https://www.ibm.com/support/pages/node/7285309"},{"id":"IBM:7285310","date":"2026-08-27","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server Liberty is affected by a privilege escalation (CVE-2026-18499)","source_url":"https://www.ibm.com/support/pages/node/7285310"},{"id":"IBM:7285313","date":"2026-08-27","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVE-2026-14525)","source_url":"https://www.ibm.com/support/pages/node/7285313"},{"id":"IBM:7285314","date":"2026-08-27","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7285314"},{"id":"RHSA-2026:57118","date":"2026-08-27","title":"OpenJDK 25.0.4.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:57118"},{"id":"RHSA-2026:60394","date":"2026-08-27","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60394"},{"id":"USN-8643-5","date":"2026-08-27","title":"USN-8643-5: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8643-5"},{"id":"USN-8644-3","date":"2026-08-27","title":"USN-8644-3: Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8644-3"},{"id":"USN-8658-4","date":"2026-08-27","title":"USN-8658-4: Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8658-4"},{"id":"USN-8661-3","date":"2026-08-27","title":"USN-8661-3: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8661-3"},{"id":"USN-8666-3","date":"2026-08-27","title":"USN-8666-3: Linux kernel (GCP FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8666-3"},{"id":"USN-8684-1","date":"2026-08-27","title":"USN-8684-1: Perl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8684-1"},{"id":"USN-8686-1","date":"2026-08-27","title":"USN-8686-1: openCryptoki vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8686-1"},{"id":"USN-8687-1","date":"2026-08-27","title":"USN-8687-1: p11-kit vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8687-1"},{"id":"USN-8688-1","date":"2026-08-27","title":"USN-8688-1: PAM vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8688-1"},{"id":"BSI:WID-SEC-2026-2274","date":"2026-08-27","title":"patch: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2274"},{"id":"GHSA-G7GW-M874-7RMF","date":"2026-08-27","title":"Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter","source_url":"https://github.com/advisories/GHSA-g7gw-m874-7rmf"},{"id":"GHSA-R5PM-VRC5-3M73","date":"2026-08-27","title":"cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions","source_url":"https://github.com/advisories/GHSA-r5pm-vrc5-3m73"},{"id":"IBM:7285431","date":"2026-08-27","title":"Security Bulletin: IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185.","source_url":"https://www.ibm.com/support/pages/node/7285431"},{"id":"BSI:WID-SEC-2026-3003","date":"2026-08-26","title":"TYPO3 Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3003"},{"id":"GHSA-79GF-7FRW-68M9","date":"2026-08-26","title":"Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system","source_url":"https://github.com/advisories/GHSA-79gf-7frw-68m9"},{"id":"GHSA-93QJ-5Q5V-3C2H","date":"2026-08-26","title":"Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)","source_url":"https://github.com/advisories/GHSA-93qj-5q5v-3c2h"},{"id":"GHSA-JRW6-7X4Q-W25J","date":"2026-08-26","title":"senaite.core Vulnerable to Eval Injection and Missing Authorization","source_url":"https://github.com/advisories/GHSA-jrw6-7x4q-w25j"},{"id":"IBM:7284805","date":"2026-08-26","title":"Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps","source_url":"https://www.ibm.com/support/pages/node/7284805"},{"id":"IBM:7285128","date":"2026-08-26","title":"Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.","source_url":"https://www.ibm.com/support/pages/node/7285128"},{"id":"IBM:7285129","date":"2026-08-26","title":"Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments","source_url":"https://www.ibm.com/support/pages/node/7285129"},{"id":"IBM:7285141","date":"2026-08-26","title":"Security Bulletin: Multiple Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition affects WebSphere eXtreme Scale","source_url":"https://www.ibm.com/support/pages/node/7285141"},{"id":"IBM:7285154","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a deserialization vulnerability due to PLY (Python Lex-Yacc)","source_url":"https://www.ibm.com/support/pages/node/7285154"},{"id":"IBM:7285157","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to pyOpenSSL","source_url":"https://www.ibm.com/support/pages/node/7285157"},{"id":"NCSC-2026-0327","date":"2026-08-26","title":"NCSC-2026-0327 Kwetsbaarheden verholpen in DrayTek VigorAP","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0327"},{"id":"NCSC-2026-0328","date":"2026-08-26","title":"NCSC-2026-0328 Kwetsbaarheden verholpen in DrayTek VigorSwitch","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0328"},{"id":"BSI:WID-SEC-2026-0860","date":"2026-08-26","title":"NGINX und NGINX Plus: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0860"},{"id":"BSI:WID-SEC-2026-1129","date":"2026-08-26","title":"Bouncy Castle BC-JAVA: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1129"},{"id":"BSI:WID-SEC-2026-1415","date":"2026-08-26","title":"Red Hat OpenShift Tempo (Apache Thrift): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1415"},{"id":"BSI:WID-SEC-2026-1527","date":"2026-08-26","title":"NGINX Open Source and NGINX Plus: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1527"},{"id":"BSI:WID-SEC-2026-1661","date":"2026-08-26","title":"NGINX Open Source und NGINX Plus: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1661"},{"id":"BSI:WID-SEC-2026-1824","date":"2026-08-26","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1824"},{"id":"BSI:WID-SEC-2026-1884","date":"2026-08-26","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1884"},{"id":"BSI:WID-SEC-2026-1995","date":"2026-08-26","title":"NGINX und NGINX Plus: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1995"},{"id":"BSI:WID-SEC-2026-2058","date":"2026-08-26","title":"FasterXML Jackson: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2058"},{"id":"BSI:WID-SEC-2026-2074","date":"2026-08-26","title":"Jenkins Plugins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2074"},{"id":"BSI:WID-SEC-2026-2300","date":"2026-08-26","title":"Red Hat Enterprise Linux (plexus-utils): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2300"},{"id":"BSI:WID-SEC-2026-2623","date":"2026-08-26","title":"rclone: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2623"},{"id":"BSI:WID-SEC-2026-2629","date":"2026-08-26","title":"Red Hat Enterprise Linux AI: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2629"},{"id":"BSI:WID-SEC-2026-2656","date":"2026-08-26","title":"Veeam ONE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2656"},{"id":"BSI:WID-SEC-2026-2665","date":"2026-08-26","title":"Jenkins Plugins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2665"},{"id":"BSI:WID-SEC-2026-2816","date":"2026-08-26","title":"Red Hat Enterprise Linux (nodejs:24): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2816"},{"id":"BSI:WID-SEC-2026-3010","date":"2026-08-26","title":"Gitea: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3010"},{"id":"BSI:WID-SEC-2026-3018","date":"2026-08-26","title":"libTIFF: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3018"},{"id":"BSI:WID-SEC-2026-3031","date":"2026-08-26","title":"DNN: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3031"},{"id":"BSI:WID-SEC-2026-3034","date":"2026-08-26","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3034"},{"id":"GHSA-2WXC-X7RJ-HG8F","date":"2026-08-26","title":"asyncssh has SCP Path Traversal to Arbitrary File Write","source_url":"https://github.com/advisories/GHSA-2wxc-x7rj-hg8f"},{"id":"GHSA-6X9P-4R67-5GJX","date":"2026-08-26","title":"Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`","source_url":"https://github.com/advisories/GHSA-6x9p-4r67-5gjx"},{"id":"GHSA-7W8C-QGXG-M7JX","date":"2026-08-26","title":"LibreNMS — Stored XSS via SNMP/Syslog Data in Legacy Templates","source_url":"https://github.com/advisories/GHSA-7w8c-qgxg-m7jx"},{"id":"GHSA-8H6H-X5PQ-56FQ","date":"2026-08-26","title":"@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys","source_url":"https://github.com/advisories/GHSA-8h6h-x5pq-56fq"},{"id":"GHSA-F63G-88CJ-HJF9","date":"2026-08-26","title":"IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries","source_url":"https://github.com/advisories/GHSA-f63g-88cj-hjf9"},{"id":"GHSA-VMM3-XGCX-67HM","date":"2026-08-26","title":"http4s has HTTP/2 Denial of Service with Ember Backend","source_url":"https://github.com/advisories/GHSA-vmm3-xgcx-67hm"},{"id":"GHSA-W5FV-7X5Q-G8QP","date":"2026-08-26","title":"Cloudreve WebDAV (`/dav`) has Path Traversal / Broken Access Control — scoped DAV credential escapes its configured account root","source_url":"https://github.com/advisories/GHSA-w5fv-7x5q-g8qp"},{"id":"GHSA-W93Q-CQ9W-58P7","date":"2026-08-26","title":"SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed","source_url":"https://github.com/advisories/GHSA-w93q-cq9w-58p7"},{"id":"IBM:7285132","date":"2026-08-26","title":"Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7285132"},{"id":"IBM:7285152","date":"2026-08-26","title":"Security Bulletin: IBM Guardium Data Protection is affected by security vulnerability (CVE-2026-43869)","source_url":"https://www.ibm.com/support/pages/node/7285152"},{"id":"IBM:7285153","date":"2026-08-26","title":"Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7285153"},{"id":"IBM:7285156","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to Eclipse Jetty","source_url":"https://www.ibm.com/support/pages/node/7285156"},{"id":"IBM:7285158","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to OpenSSH","source_url":"https://www.ibm.com/support/pages/node/7285158"},{"id":"IBM:7285159","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to urllib3","source_url":"https://www.ibm.com/support/pages/node/7285159"},{"id":"IBM:7285164","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an uncontrolled resource consumption vulnerability due to Apache HttpComponents Core","source_url":"https://www.ibm.com/support/pages/node/7285164"},{"id":"IBM:7285169","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple uncontrolled resource consumption vulnerabilities due to pyasn1","source_url":"https://www.ibm.com/support/pages/node/7285169"},{"id":"RHSA-2026:56785","date":"2026-08-26","title":"OpenShift Container Platform 4.14.72 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56785"},{"id":"RHSA-2026:56852","date":"2026-08-26","title":"OpenShift Container Platform 4.16.69 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56852"},{"id":"RHSA-2026:56910","date":"2026-08-26","title":"OpenShift Container Platform 4.15.68 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56910"},{"id":"RHSA-2026:57401","date":"2026-08-26","title":"OpenShift Container Platform 4.19.44 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57401"},{"id":"RHSA-2026:57402","date":"2026-08-26","title":"OpenShift Container Platform 4.19.44 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57402"},{"id":"RHSA-2026:57482","date":"2026-08-26","title":"OpenShift Container Platform 4.18.54 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57482"},{"id":"RHSA-2026:57483","date":"2026-08-26","title":"OpenShift Container Platform 4.18.54 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57483"},{"id":"RHSA-2026:57845","date":"2026-08-26","title":"Red Hat build of MicroShift 4.16.69 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57845"},{"id":"RHSA-2026:57914","date":"2026-08-26","title":"Red Hat build of MicroShift 4.18.54 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57914"},{"id":"RHSA-2026:59663","date":"2026-08-26","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59663"},{"id":"RHSA-2026:59723","date":"2026-08-26","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59723"},{"id":"RHSA-2026:59737","date":"2026-08-26","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59737"},{"id":"RHSA-2026:59821","date":"2026-08-26","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59821"},{"id":"RHSA-2026:59956","date":"2026-08-26","title":"sqlite security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59956"},{"id":"RHSA-2026:59972","date":"2026-08-26","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59972"},{"id":"RHSA-2026:59994","date":"2026-08-26","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59994"},{"id":"RHSA-2026:59996","date":"2026-08-26","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59996"},{"id":"RHSA-2026:59999","date":"2026-08-26","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59999"},{"id":"RHSA-2026:60006","date":"2026-08-26","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60006"},{"id":"RHSA-2026:60146","date":"2026-08-26","title":"OpenShift Virtualization v4.22 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:60146"},{"id":"RHSA-2026:60173","date":"2026-08-26","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60173"},{"id":"RHSA-2026:60239","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60239"},{"id":"RHSA-2026:60246","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.17 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60246"},{"id":"RHSA-2026:60247","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60247"},{"id":"RHSA-2026:60248","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.14 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60248"},{"id":"RHSA-2026:60249","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60249"},{"id":"RHSA-2026:60250","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.18 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60250"},{"id":"RHSA-2026:60251","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60251"},{"id":"RHSA-2026:60252","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.19 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60252"},{"id":"RHSA-2026:60254","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.21 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60254"},{"id":"RHSA-2026:60256","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60256"},{"id":"RHSA-2026:60259","date":"2026-08-26","title":"Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.20 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60259"},{"id":"RHSA-2026:60265","date":"2026-08-26","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60265"},{"id":"RHSA-2026:60304","date":"2026-08-26","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:60304"},{"id":"RHSA-2026:60305","date":"2026-08-26","title":"go-toolset:rhel8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:60305"},{"id":"RHSA-2026:60306","date":"2026-08-26","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:60306"},{"id":"RHSA-2026:60315","date":"2026-08-26","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60315"},{"id":"RHSA-2026:60333","date":"2026-08-26","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60333"},{"id":"RHSA-2026:60334","date":"2026-08-26","title":"RHEL AI 3.4 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:60334"},{"id":"RHSA-2026:60335","date":"2026-08-26","title":"RHEL AI 3.5 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:60335"},{"id":"RHSA-2026:60336","date":"2026-08-26","title":"RHEL AI 3.3 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:60336"},{"id":"RHSA-2026:60353","date":"2026-08-26","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60353"},{"id":"RHSA-2026:60362","date":"2026-08-26","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60362"},{"id":"RHSA-2026:60363","date":"2026-08-26","title":"Red Hat AI Inference Server 3.3.6 (Spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:60363"},{"id":"RHSA-2026:60371","date":"2026-08-26","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60371"},{"id":"RHSA-2026:60383","date":"2026-08-26","title":"bind security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60383"},{"id":"RHSA-2026:60385","date":"2026-08-26","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60385"},{"id":"RHSA-2026:60427","date":"2026-08-26","title":"iscsi-initiator-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60427"},{"id":"RHSA-2026:60428","date":"2026-08-26","title":"iscsi-initiator-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:60428"},{"id":"BSI:WID-SEC-2026-0604","date":"2026-08-26","title":"Eclipse Jetty: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0604"},{"id":"BSI:WID-SEC-2026-1082","date":"2026-08-26","title":"Eclipse Jetty: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1082"},{"id":"BSI:WID-SEC-2026-1137","date":"2026-08-26","title":"Grafana: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1137"},{"id":"BSI:WID-SEC-2026-1546","date":"2026-08-26","title":"Grafana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1546"},{"id":"BSI:WID-SEC-2026-2064","date":"2026-08-26","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2064"},{"id":"BSI:WID-SEC-2026-2209","date":"2026-08-26","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2209"},{"id":"BSI:WID-SEC-2026-2587","date":"2026-08-26","title":"Drupal (Token Content Access, Disable Login Page und Powerful Surveys): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2587"},{"id":"BSI:WID-SEC-2026-2653","date":"2026-08-26","title":"FasterXML Jackson: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2653"},{"id":"BSI:WID-SEC-2026-2686","date":"2026-08-26","title":"Drupal Module: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2686"},{"id":"BSI:WID-SEC-2026-2700","date":"2026-08-26","title":"ffmpeg: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2700"},{"id":"BSI:WID-SEC-2026-2739","date":"2026-08-26","title":"vllm: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2739"},{"id":"BSI:WID-SEC-2026-2748","date":"2026-08-26","title":"Red Hat Enterprise Linux (pyasn1): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2748"},{"id":"BSI:WID-SEC-2026-2770","date":"2026-08-26","title":"Red Hat Enterprise Linux (open-iscsi): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2770"},{"id":"BSI:WID-SEC-2026-2834","date":"2026-08-26","title":"Red Hat Build of Apache Camel for Quarkus (sshd-core, libthrift, org.hl7.fhir.utilities): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2834"},{"id":"BSI:WID-SEC-2026-2976","date":"2026-08-26","title":"GNU Emacs: Schwachstelle ermöglicht Offenlegung von Informationen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2976"},{"id":"BSI:WID-SEC-2026-3012","date":"2026-08-26","title":"WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3012"},{"id":"BSI:WID-SEC-2026-3014","date":"2026-08-26","title":"GNU libc: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3014"},{"id":"BSI:WID-SEC-2026-3015","date":"2026-08-26","title":"PolicyKit: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3015"},{"id":"BSI:WID-SEC-2026-3019","date":"2026-08-26","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3019"},{"id":"BSI:WID-SEC-2026-3020","date":"2026-08-26","title":"GNU Emacs TRAMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3020"},{"id":"BSI:WID-SEC-2026-3022","date":"2026-08-26","title":"Adobe Creative Cloud (Substance 3D, XD, und Illustrator): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3022"},{"id":"BSI:WID-SEC-2026-3023","date":"2026-08-26","title":"bluez: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3023"},{"id":"BSI:WID-SEC-2026-3030","date":"2026-08-26","title":"SQLite: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3030"},{"id":"BSI:WID-SEC-2026-3032","date":"2026-08-26","title":"OPNsense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3032"},{"id":"GHSA-6753-GR46-6WPR","date":"2026-08-26","title":"Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS","source_url":"https://github.com/advisories/GHSA-6753-gr46-6wpr"},{"id":"GHSA-M452-Q8C9-RG2F","date":"2026-08-26","title":"AsyncHttpClient stores cookie for an unrelated domain (cookie tossing) via ThreadSafeCookieStore","source_url":"https://github.com/advisories/GHSA-m452-q8c9-rg2f"},{"id":"GHSA-P46M-G734-VPC4","date":"2026-08-26","title":"cakephp/debug_kit: MailPreview contains unsafe reflection","source_url":"https://github.com/advisories/GHSA-p46m-g734-vpc4"},{"id":"GHSA-QR67-GV47-XWWH","date":"2026-08-26","title":"asyncssh has an incomplete fix for CVE-2026-45309 — AuthorizedKeysFile %u still escapes the intended directory via a leading ~ (and weakly via ${ENV}) username substitution","source_url":"https://github.com/advisories/GHSA-qr67-gv47-xwwh"},{"id":"GHSA-X287-5C68-36WP","date":"2026-08-26","title":"OpenWISP IPAM has broken object-level authorization: ExportSubnetView lets a member of one organization export another organization's subnet and all its IP addresses","source_url":"https://github.com/advisories/GHSA-x287-5c68-36wp"},{"id":"IBM:7285122","date":"2026-08-26","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)","source_url":"https://www.ibm.com/support/pages/node/7285122"},{"id":"IBM:7285124","date":"2026-08-26","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVE-2026-14525)","source_url":"https://www.ibm.com/support/pages/node/7285124"},{"id":"IBM:7285138","date":"2026-08-26","title":"Security Bulletin: IBM Informix Wire Listener is affected by a vulnerability in the third-party Netty library (CVE-2026-59900).","source_url":"https://www.ibm.com/support/pages/node/7285138"},{"id":"IBM:7285143","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient","source_url":"https://www.ibm.com/support/pages/node/7285143"},{"id":"IBM:7285144","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to Eclipse Jetty","source_url":"https://www.ibm.com/support/pages/node/7285144"},{"id":"IBM:7285145","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a vulnerability due to Apache Commons HttpClient","source_url":"https://www.ibm.com/support/pages/node/7285145"},{"id":"IBM:7285147","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component","source_url":"https://www.ibm.com/support/pages/node/7285147"},{"id":"IBM:7285149","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component","source_url":"https://www.ibm.com/support/pages/node/7285149"},{"id":"IBM:7285165","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an insecure temporary file vulnerability due to Python Requests library","source_url":"https://www.ibm.com/support/pages/node/7285165"},{"id":"IBM:7285171","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a Regular Expression Denial of Service vulnerability due to Python idna library","source_url":"https://www.ibm.com/support/pages/node/7285171"},{"id":"IBM:7285172","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple path traversal vulnerabilities due to pip","source_url":"https://www.ibm.com/support/pages/node/7285172"},{"id":"IBM:7285175","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by an improper Unicode handling vulnerability due to Python setuptools","source_url":"https://www.ibm.com/support/pages/node/7285175"},{"id":"IBM:7285215","date":"2026-08-26","title":"Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition (CVE-2026-61308, CVE-2026-71054, CVE-2026-70907, CVE-2026-60589)","source_url":"https://www.ibm.com/support/pages/node/7285215"},{"id":"NCSC-2026-0329","date":"2026-08-26","title":"NCSC-2026-0329 Kwetsbaarheden verholpen in Next.js","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0329"},{"id":"RHSA-2026:59997","date":"2026-08-26","title":"polkit security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59997"},{"id":"RHSA-2026:60224","date":"2026-08-26","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60224"},{"id":"RHSA-2026:60226","date":"2026-08-26","title":"attr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60226"},{"id":"USN-8659-4","date":"2026-08-26","title":"USN-8659-4: Linux kernel (Oracle) vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8659-4"},{"id":"USN-8681-1","date":"2026-08-26","title":"USN-8681-1: OpenJDK 25 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8681-1"},{"id":"USN-8682-1","date":"2026-08-26","title":"USN-8682-1: Bind vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8682-1"},{"id":"USN-8683-1","date":"2026-08-26","title":"USN-8683-1: libheif vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8683-1"},{"id":"BSI:WID-SEC-2026-2992","date":"2026-08-26","title":"Advisory zurückgezogen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2992"},{"id":"BSI:WID-SEC-2026-3033","date":"2026-08-26","title":"Insyde UEFI Firmware: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3033"},{"id":"CISCO-SA-NOTICE-F2SIMFXL","date":"2026-08-26","title":"Cisco Advance Notification for Publication of September 2, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-f2SiMFxl"},{"id":"GHSA-3P27-QVP9-27QF","date":"2026-08-26","title":"Wasmtime has a leak in WASIp1 `fd_renumber` implementation","source_url":"https://github.com/advisories/GHSA-3p27-qvp9-27qf"},{"id":"GHSA-CRX4-7MMQ-J74J","date":"2026-08-26","title":"OpenSTAManager has HTML Injection in modules/utenti/edit.php","source_url":"https://github.com/advisories/GHSA-crx4-7mmq-j74j"},{"id":"GHSA-MV8M-V9V6-5F94","date":"2026-08-26","title":"kas Persistently Disables SSH Host Key Checking","source_url":"https://github.com/advisories/GHSA-mv8m-v9v6-5f94"},{"id":"IBM:7285178","date":"2026-08-26","title":"Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a weak cryptographic algorithm vulnerability due to Paramiko","source_url":"https://www.ibm.com/support/pages/node/7285178"},{"id":"RHSA-2026:60329","date":"2026-08-26","title":"mingw-openssl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:60329"},{"id":"BSI:WID-SEC-2026-0162","date":"2026-08-25","title":"Oracle Fusion Middleware: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0162"},{"id":"BSI:WID-SEC-2026-2997","date":"2026-08-25","title":"vm2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2997"},{"id":"GHSA-6G6R-Q6GW-W8FG","date":"2026-08-25","title":"PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)","source_url":"https://github.com/advisories/GHSA-6g6r-q6gw-w8fg"},{"id":"GHSA-777C-2FXX-QR28","date":"2026-08-25","title":"AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching","source_url":"https://github.com/advisories/GHSA-777c-2fxx-qr28"},{"id":"GHSA-8VH3-G2QG-2H2C","date":"2026-08-25","title":"nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )","source_url":"https://github.com/advisories/GHSA-8vh3-g2qg-2h2c"},{"id":"GHSA-GRP7-V8XH-RJ7H","date":"2026-08-25","title":"gRPC Erlang package vulnerable to Remote Code Execution with attacker-controlled gRPC payloads","source_url":"https://github.com/advisories/GHSA-grp7-v8xh-rj7h"},{"id":"GHSA-MW6R-2HVM-4RP2","date":"2026-08-25","title":"qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input","source_url":"https://github.com/advisories/GHSA-mw6r-2hvm-4rp2"},{"id":"GHSA-W3FX-MC44-MF6J","date":"2026-08-25","title":"Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution","source_url":"https://github.com/advisories/GHSA-w3fx-mc44-mf6j"},{"id":"IBM:7284879","date":"2026-08-25","title":"Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint","source_url":"https://www.ibm.com/support/pages/node/7284879"},{"id":"IBM:7284949","date":"2026-08-25","title":"Security Bulletin: Multiple security vulnerabilities may affect IBM Java that is shipped with IBM CICS TX Advanced.","source_url":"https://www.ibm.com/support/pages/node/7284949"},{"id":"IBM:7284967","date":"2026-08-25","title":"Security Bulletin: Security vulnerabilities may affect IBM Java shipped with TXSeries for Multiplatforms.","source_url":"https://www.ibm.com/support/pages/node/7284967"},{"id":"NCSC-2026-0326","date":"2026-08-25","title":"NCSC-2026-0326 Kwetsbaarheden verholpen in Keycloak","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0326"},{"id":"BSI:WID-SEC-2026-1938","date":"2026-08-25","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1938"},{"id":"BSI:WID-SEC-2026-2044","date":"2026-08-25","title":"CPython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2044"},{"id":"BSI:WID-SEC-2026-2050","date":"2026-08-25","title":"IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2050"},{"id":"BSI:WID-SEC-2026-2159","date":"2026-08-25","title":"IBM WebSphere Application Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2159"},{"id":"BSI:WID-SEC-2026-2981","date":"2026-08-25","title":"Snipe-IT: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2981"},{"id":"BSI:WID-SEC-2026-2987","date":"2026-08-25","title":"WebKitGTK: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2987"},{"id":"BSI:WID-SEC-2026-2998","date":"2026-08-25","title":"ZScaler Client Connector: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2998"},{"id":"BSI:WID-SEC-2026-2999","date":"2026-08-25","title":"Contao: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2999"},{"id":"GHSA-2JGC-F764-C5R2","date":"2026-08-25","title":"PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete","source_url":"https://github.com/advisories/GHSA-2jgc-f764-c5r2"},{"id":"GHSA-3VFR-4GWF-QXFP","date":"2026-08-25","title":"Whistle vulnerable to path traversal","source_url":"https://github.com/advisories/GHSA-3vfr-4gwf-qxfp"},{"id":"GHSA-3X77-WG38-92R3","date":"2026-08-25","title":"mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable","source_url":"https://github.com/advisories/GHSA-3x77-wg38-92r3"},{"id":"GHSA-5R34-2G38-6569","date":"2026-08-25","title":"praisonaiagents web_crawl vulnerable to SSRF via redirect-following","source_url":"https://github.com/advisories/GHSA-5r34-2g38-6569"},{"id":"GHSA-6CCX-9C9F-327W","date":"2026-08-25","title":"gRPC Erlang package has unbounded gzip decompression (decompression bomb)","source_url":"https://github.com/advisories/GHSA-6ccx-9c9f-327w"},{"id":"GHSA-74HP-MGGR-HV58","date":"2026-08-25","title":"mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias","source_url":"https://github.com/advisories/GHSA-74hp-mggr-hv58"},{"id":"GHSA-7G3P-92QQ-8WVH","date":"2026-08-25","title":"praisonaiagents: AgentServer declares auth_token but never enforces it on any route","source_url":"https://github.com/advisories/GHSA-7g3p-92qq-8wvh"},{"id":"GHSA-7WW9-85PG-CV4X","date":"2026-08-25","title":"PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution","source_url":"https://github.com/advisories/GHSA-7ww9-85pg-cv4x"},{"id":"GHSA-8CP3-QXJ6-PX34","date":"2026-08-25","title":"utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion","source_url":"https://github.com/advisories/GHSA-8cp3-qxj6-px34"},{"id":"GHSA-8HJW-25CG-G52H","date":"2026-08-25","title":"praisonaiagents has a `web_crawl` SSRF protection bypass via unchecked redirect targets","source_url":"https://github.com/advisories/GHSA-8hjw-25cg-g52h"},{"id":"GHSA-8QX3-8GM5-9CJ2","date":"2026-08-25","title":"pickem vulnerable to terminal escape-sequence injection via unsanitized item text","source_url":"https://github.com/advisories/GHSA-8qx3-8gm5-9cj2"},{"id":"GHSA-9QHG-99WW-9MQC","date":"2026-08-25","title":"utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target","source_url":"https://github.com/advisories/GHSA-9qhg-99ww-9mqc"},{"id":"GHSA-CH89-H4R2-C8F8","date":"2026-08-25","title":"PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks","source_url":"https://github.com/advisories/GHSA-ch89-h4r2-c8f8"},{"id":"GHSA-CMWV-WF9P-P8WX","date":"2026-08-25","title":"genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport","source_url":"https://github.com/advisories/GHSA-cmwv-wf9p-p8wx"},{"id":"GHSA-CV84-9P8J-FJ68","date":"2026-08-25","title":"icalendar has Algorithmic Complexity in Equality","source_url":"https://github.com/advisories/GHSA-cv84-9p8j-fj68"},{"id":"GHSA-F5PJ-2738-996M","date":"2026-08-25","title":"mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist","source_url":"https://github.com/advisories/GHSA-f5pj-2738-996m"},{"id":"GHSA-FH3R-G96V-F578","date":"2026-08-25","title":"@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled Key","source_url":"https://github.com/advisories/GHSA-fh3r-g96v-f578"},{"id":"GHSA-G7GC-GMGP-WGQG","date":"2026-08-25","title":"eml_parser vulnerable to DoS via deeply nested parens in Received headers","source_url":"https://github.com/advisories/GHSA-g7gc-gmgp-wgqg"},{"id":"GHSA-GFQ8-HMPH-9GJV","date":"2026-08-25","title":"PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret","source_url":"https://github.com/advisories/GHSA-gfq8-hmph-9gjv"},{"id":"GHSA-GXMW-5F7X-6G22","date":"2026-08-25","title":"praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location","source_url":"https://github.com/advisories/GHSA-gxmw-5f7x-6g22"},{"id":"GHSA-HQ3H-G68C-HP78","date":"2026-08-25","title":"urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage","source_url":"https://github.com/advisories/GHSA-hq3h-g68c-hp78"},{"id":"GHSA-HVFH-5MJ3-5F3J","date":"2026-08-25","title":"Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access","source_url":"https://github.com/advisories/GHSA-hvfh-5mj3-5f3j"},{"id":"GHSA-HXMV-C4G6-5FQC","date":"2026-08-25","title":"PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code","source_url":"https://github.com/advisories/GHSA-hxmv-c4g6-5fqc"},{"id":"GHSA-M9MQ-7M7Q-XC6P","date":"2026-08-25","title":"browse-mcp has an arbitrary file write via unconfined download and state paths","source_url":"https://github.com/advisories/GHSA-m9mq-7m7q-xc6p"},{"id":"GHSA-MCJ4-MPHF-J9FF","date":"2026-08-25","title":"Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts","source_url":"https://github.com/advisories/GHSA-mcj4-mphf-j9ff"},{"id":"GHSA-MWR4-5G34-J5CQ","date":"2026-08-25","title":"gRPC Erlang package's path bindings are overridable by query string and request body","source_url":"https://github.com/advisories/GHSA-mwr4-5g34-j5cq"},{"id":"GHSA-PG62-F8G4-4WQH","date":"2026-08-25","title":"phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold","source_url":"https://github.com/advisories/GHSA-pg62-f8g4-4wqh"},{"id":"GHSA-PVPH-5J39-V8QC","date":"2026-08-25","title":"PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server","source_url":"https://github.com/advisories/GHSA-pvph-5j39-v8qc"},{"id":"GHSA-PVXX-R596-F5QJ","date":"2026-08-25","title":"PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced","source_url":"https://github.com/advisories/GHSA-pvxx-r596-f5qj"},{"id":"GHSA-Q27Q-98J4-9PFV","date":"2026-08-25","title":"qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`","source_url":"https://github.com/advisories/GHSA-q27q-98j4-9pfv"},{"id":"GHSA-Q8GF-9RVJ-GMGJ","date":"2026-08-25","title":"gRPC Erlang package has unbounded request body accumulation in `read_full_body/3`","source_url":"https://github.com/advisories/GHSA-q8gf-9rvj-gmgj"},{"id":"GHSA-QJ6X-XX2H-8HVV","date":"2026-08-25","title":"Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript","source_url":"https://github.com/advisories/GHSA-qj6x-xx2h-8hvv"},{"id":"GHSA-R7V3-X45F-G7HP","date":"2026-08-25","title":"PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated","source_url":"https://github.com/advisories/GHSA-r7v3-x45f-g7hp"},{"id":"GHSA-RG5Q-PP8P-F7JM","date":"2026-08-25","title":"PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114","source_url":"https://github.com/advisories/GHSA-rg5q-pp8p-f7jm"},{"id":"GHSA-VFP3-V2GW-7WFQ","date":"2026-08-25","title":"Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files","source_url":"https://github.com/advisories/GHSA-vfp3-v2gw-7wfq"},{"id":"GHSA-VG6P-V9VM-6FGJ","date":"2026-08-25","title":"praisonaiagents vulnerable to SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)","source_url":"https://github.com/advisories/GHSA-vg6p-v9vm-6fgj"},{"id":"GHSA-VWF3-4XXJ-QG6H","date":"2026-08-25","title":"mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment","source_url":"https://github.com/advisories/GHSA-vwf3-4xxj-qg6h"},{"id":"GHSA-X44H-65QV-CW74","date":"2026-08-25","title":"praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)","source_url":"https://github.com/advisories/GHSA-x44h-65qv-cw74"},{"id":"GHSA-XC9G-J69Q-37XW","date":"2026-08-25","title":"consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write","source_url":"https://github.com/advisories/GHSA-xc9g-j69q-37xw"},{"id":"GHSA-XX4J-W367-7247","date":"2026-08-25","title":"djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch event-handler calls","source_url":"https://github.com/advisories/GHSA-xx4j-w367-7247"},{"id":"IBM:7281452","date":"2026-08-25","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in Perl [CVE-2023-47038]","source_url":"https://www.ibm.com/support/pages/node/7281452"},{"id":"IBM:7283967","date":"2026-08-25","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK (July 2026) affect IBM InfoSphere Information Server","source_url":"https://www.ibm.com/support/pages/node/7283967"},{"id":"IBM:7284969","date":"2026-08-25","title":"Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.","source_url":"https://www.ibm.com/support/pages/node/7284969"},{"id":"IBM:7284974","date":"2026-08-25","title":"Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.","source_url":"https://www.ibm.com/support/pages/node/7284974"},{"id":"IBM:7285014","date":"2026-08-25","title":"Security Bulletin: Vulnerability in undici affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285014"},{"id":"IBM:7285018","date":"2026-08-25","title":"Security Bulletin: Vulnerability in protobufjs affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285018"},{"id":"IBM:7285021","date":"2026-08-25","title":"Security Bulletin: Vulnerability in Pillow affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285021"},{"id":"IBM:7285033","date":"2026-08-25","title":"Security Bulletin: Vulnerability in Nokogiri affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285033"},{"id":"RHSA-2026:57361","date":"2026-08-25","title":"OpenShift Container Platform 4.22.11 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57361"},{"id":"RHSA-2026:57362","date":"2026-08-25","title":"OpenShift Container Platform 4.22.11 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57362"},{"id":"RHSA-2026:57456","date":"2026-08-25","title":"OpenShift Container Platform 4.21.30 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57456"},{"id":"RHSA-2026:57457","date":"2026-08-25","title":"OpenShift Container Platform 4.21.30 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57457"},{"id":"RHSA-2026:57543","date":"2026-08-25","title":"OpenShift Container Platform 4.20.35 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57543"},{"id":"RHSA-2026:59238","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59238"},{"id":"RHSA-2026:59239","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59239"},{"id":"RHSA-2026:59240","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59240"},{"id":"RHSA-2026:59241","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59241"},{"id":"RHSA-2026:59245","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59245"},{"id":"RHSA-2026:59246","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59246"},{"id":"RHSA-2026:59247","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59247"},{"id":"RHSA-2026:59248","date":"2026-08-25","title":"python-pyasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59248"},{"id":"RHSA-2026:59277","date":"2026-08-25","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59277"},{"id":"RHSA-2026:59278","date":"2026-08-25","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59278"},{"id":"RHSA-2026:59311","date":"2026-08-25","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59311"},{"id":"RHSA-2026:59312","date":"2026-08-25","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59312"},{"id":"RHSA-2026:59325","date":"2026-08-25","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59325"},{"id":"RHSA-2026:59326","date":"2026-08-25","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59326"},{"id":"RHSA-2026:59329","date":"2026-08-25","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59329"},{"id":"RHSA-2026:59360","date":"2026-08-25","title":"Apicurio Registry (container images) release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59360"},{"id":"RHSA-2026:59395","date":"2026-08-25","title":"RHEL AI 3.4 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:59395"},{"id":"RHSA-2026:59396","date":"2026-08-25","title":"RHEL AI 3.3 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:59396"},{"id":"RHSA-2026:59409","date":"2026-08-25","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59409"},{"id":"RHSA-2026:59467","date":"2026-08-25","title":"Red Hat OpenShift API for Data Protection","source_url":"https://access.redhat.com/errata/RHSA-2026:59467"},{"id":"RHSA-2026:59473","date":"2026-08-25","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59473"},{"id":"RHSA-2026:59487","date":"2026-08-25","title":"gstreamer1-plugins-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59487"},{"id":"RHSA-2026:59490","date":"2026-08-25","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59490"},{"id":"RHSA-2026:59518","date":"2026-08-25","title":"Red Hat AI Inference Server Model Optimization Tools 3.3.6 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:59518"},{"id":"RHSA-2026:59546","date":"2026-08-25","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59546"},{"id":"RHSA-2026:59548","date":"2026-08-25","title":"Kiali 2.4.22 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:59548"},{"id":"RHSA-2026:59555","date":"2026-08-25","title":"sg3_utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59555"},{"id":"RHSA-2026:59558","date":"2026-08-25","title":"multicluster engine for Kubernetes v2.8.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59558"},{"id":"RHSA-2026:59560","date":"2026-08-25","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59560"},{"id":"RHSA-2026:59562","date":"2026-08-25","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59562"},{"id":"RHSA-2026:59567","date":"2026-08-25","title":"sg3_utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59567"},{"id":"RHSA-2026:59568","date":"2026-08-25","title":"sg3_utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59568"},{"id":"RHSA-2026:59579","date":"2026-08-25","title":"multicluster engine for Kubernetes v2.6.14 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59579"},{"id":"RHSA-2026:59583","date":"2026-08-25","title":"Kiali 2.27.3 for Red Hat OpenShift Service Mesh 3.4","source_url":"https://access.redhat.com/errata/RHSA-2026:59583"},{"id":"BSI:WID-SEC-2023-0600","date":"2026-08-25","title":"Red Hat OpenShift: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0600"},{"id":"BSI:WID-SEC-2026-1719","date":"2026-08-25","title":"Erlang/OTP: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1719"},{"id":"BSI:WID-SEC-2026-1754","date":"2026-08-25","title":"PostgreSQL JDBC Driver: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1754"},{"id":"BSI:WID-SEC-2026-1796","date":"2026-08-25","title":"CPython: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1796"},{"id":"BSI:WID-SEC-2026-1887","date":"2026-08-25","title":"Erlang/OTP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1887"},{"id":"BSI:WID-SEC-2026-1897","date":"2026-08-25","title":"vllm: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1897"},{"id":"BSI:WID-SEC-2026-1971","date":"2026-08-25","title":"CPython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1971"},{"id":"BSI:WID-SEC-2026-2232","date":"2026-08-25","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht Ausführung von Aktionen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2232"},{"id":"BSI:WID-SEC-2026-2239","date":"2026-08-25","title":"Golang Go: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2239"},{"id":"BSI:WID-SEC-2026-2522","date":"2026-08-25","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2522"},{"id":"BSI:WID-SEC-2026-2606","date":"2026-08-25","title":"IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2606"},{"id":"BSI:WID-SEC-2026-2982","date":"2026-08-25","title":"Devolutions Remote Desktop Manager: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2982"},{"id":"BSI:WID-SEC-2026-2983","date":"2026-08-25","title":"Apache Camel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2983"},{"id":"BSI:WID-SEC-2026-2984","date":"2026-08-25","title":"bluez: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2984"},{"id":"BSI:WID-SEC-2026-2986","date":"2026-08-25","title":"GIMP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2986"},{"id":"BSI:WID-SEC-2026-2988","date":"2026-08-25","title":"FasterXML Jackson: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2988"},{"id":"BSI:WID-SEC-2026-2989","date":"2026-08-25","title":"Grafana: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2989"},{"id":"BSI:WID-SEC-2026-2990","date":"2026-08-25","title":"DrayTek VigorAP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2990"},{"id":"BSI:WID-SEC-2026-2991","date":"2026-08-25","title":"DrayTek Vigor Switches: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2991"},{"id":"BSI:WID-SEC-2026-2993","date":"2026-08-25","title":"Hashicorp Vault: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2993"},{"id":"BSI:WID-SEC-2026-2994","date":"2026-08-25","title":"Autodesk 3ds Max: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2994"},{"id":"BSI:WID-SEC-2026-2996","date":"2026-08-25","title":"Zammad: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2996"},{"id":"BSI:WID-SEC-2026-3001","date":"2026-08-25","title":"Django: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3001"},{"id":"BSI:WID-SEC-2026-3002","date":"2026-08-25","title":"libTIFF: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3002"},{"id":"ICSA-26-237-01","date":"2026-08-25","title":"Rently Smart Home","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01"},{"id":"ICSA-26-237-02","date":"2026-08-25","title":"Zoneminder","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-02"},{"id":"ICSA-26-237-03","date":"2026-08-25","title":"Siemens SIMATIC IoT2050 Advanced","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-03"},{"id":"ICSA-26-237-04","date":"2026-08-25","title":"PayRange API","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-04"},{"id":"ICSA-26-237-05","date":"2026-08-25","title":"Bendix EC80 Brake ECU","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"},{"id":"ICSA-26-237-06","date":"2026-08-25","title":"Ebyte NE2-D11","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-06"},{"id":"ICSA-26-237-07","date":"2026-08-25","title":"FURUNO FA-50 Class B AIS Transponder","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-07"},{"id":"GHSA-72F3-6W86-7RV3","date":"2026-08-25","title":"@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint","source_url":"https://github.com/advisories/GHSA-72f3-6w86-7rv3"},{"id":"GHSA-88G4-74F3-63X9","date":"2026-08-25","title":"phpMyFAQ has Potential Authenticated Path Traversal in PDF Export","source_url":"https://github.com/advisories/GHSA-88g4-74f3-63x9"},{"id":"GHSA-CFXV-8FW8-RWPV","date":"2026-08-25","title":"praisonaiagents: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool","source_url":"https://github.com/advisories/GHSA-cfxv-8fw8-rwpv"},{"id":"GHSA-FXGQ-9M89-CXJ9","date":"2026-08-25","title":"eml_parser has a URL extraction bypass via HTML entities in URLs","source_url":"https://github.com/advisories/GHSA-fxgq-9m89-cxj9"},{"id":"GHSA-HMFX-4V44-9QW9","date":"2026-08-25","title":"PraisonAI vulnerable to Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation","source_url":"https://github.com/advisories/GHSA-hmfx-4v44-9qw9"},{"id":"GHSA-M2PC-3Q4Q-W6JR","date":"2026-08-25","title":"reachy_mini Allows Unrestricted Upload of File with Dangerous Type","source_url":"https://github.com/advisories/GHSA-m2pc-3q4q-w6jr"},{"id":"GHSA-M66C-FW79-6359","date":"2026-08-25","title":"eml_parser has parser DoS via deeply nested parentheses in e-mail headers","source_url":"https://github.com/advisories/GHSA-m66c-fw79-6359"},{"id":"GHSA-MF8R-WM2W-F8C5","date":"2026-08-25","title":"phpMyFAQ public FAQ APIs expose inactive FAQ content","source_url":"https://github.com/advisories/GHSA-mf8r-wm2w-f8c5"},{"id":"GHSA-P43P-WHWX-Q52H","date":"2026-08-25","title":"JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login","source_url":"https://github.com/advisories/GHSA-p43p-whwx-q52h"},{"id":"GHSA-P7X2-G5CQ-FHMQ","date":"2026-08-25","title":"mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)","source_url":"https://github.com/advisories/GHSA-p7x2-g5cq-fhmq"},{"id":"GHSA-PPX3-28RW-8FPF","date":"2026-08-25","title":"utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins","source_url":"https://github.com/advisories/GHSA-ppx3-28rw-8fpf"},{"id":"GHSA-WJ6G-V78P-6FX3","date":"2026-08-25","title":"PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server","source_url":"https://github.com/advisories/GHSA-wj6g-v78p-6fx3"},{"id":"GHSA-WV94-5QCP-6M36","date":"2026-08-25","title":"PraisonAI MCP HTTP server has unauthenticated unbounded session accumulation (memory exhaustion; session TTL never enforced)","source_url":"https://github.com/advisories/GHSA-wv94-5qcp-6m36"},{"id":"IBM:7284906","date":"2026-08-25","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase","source_url":"https://www.ibm.com/support/pages/node/7284906"},{"id":"IBM:7284907","date":"2026-08-25","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase","source_url":"https://www.ibm.com/support/pages/node/7284907"},{"id":"IBM:7284909","date":"2026-08-25","title":"Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase","source_url":"https://www.ibm.com/support/pages/node/7284909"},{"id":"IBM:7284910","date":"2026-08-25","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase","source_url":"https://www.ibm.com/support/pages/node/7284910"},{"id":"IBM:7284997","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284997"},{"id":"IBM:7284998","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)","source_url":"https://www.ibm.com/support/pages/node/7284998"},{"id":"IBM:7285000","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-16192)","source_url":"https://www.ibm.com/support/pages/node/7285000"},{"id":"IBM:7285001","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)","source_url":"https://www.ibm.com/support/pages/node/7285001"},{"id":"IBM:7285016","date":"2026-08-25","title":"Security Bulletin: Vulnerability in DOMPurify affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285016"},{"id":"IBM:7285017","date":"2026-08-25","title":"Security Bulletin: Vulnerability in Apache Log4j affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7285017"},{"id":"IBM:7285039","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a privilege escalation (CVE-2026-18499)","source_url":"https://www.ibm.com/support/pages/node/7285039"},{"id":"IBM:7285041","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a denial of service (CVE-2026-10571)","source_url":"https://www.ibm.com/support/pages/node/7285041"},{"id":"IBM:7285082","date":"2026-08-25","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7285082"},{"id":"RHSA-2026:59379","date":"2026-08-25","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59379"},{"id":"RHSA-2026:59544","date":"2026-08-25","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:59544"},{"id":"USN-8630-5","date":"2026-08-25","title":"USN-8630-5: Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8630-5"},{"id":"USN-8643-4","date":"2026-08-25","title":"USN-8643-4: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8643-4"},{"id":"USN-8658-3","date":"2026-08-25","title":"USN-8658-3: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8658-3"},{"id":"USN-8659-3","date":"2026-08-25","title":"USN-8659-3: Linux kernel (Azure) vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8659-3"},{"id":"USN-8666-2","date":"2026-08-25","title":"USN-8666-2: Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8666-2"},{"id":"USN-8670-2","date":"2026-08-25","title":"USN-8670-2: curl vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8670-2"},{"id":"USN-8675-1","date":"2026-08-25","title":"USN-8675-1: Perl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8675-1"},{"id":"USN-8678-1","date":"2026-08-25","title":"USN-8678-1: OpenSSL vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8678-1"},{"id":"USN-8678-2","date":"2026-08-25","title":"USN-8678-2: OpenSSL, OpenSSL 1.0 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8678-2"},{"id":"USN-8679-1","date":"2026-08-25","title":"USN-8679-1: Vim vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8679-1"},{"id":"USN-8680-1","date":"2026-08-25","title":"USN-8680-1: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8680-1"},{"id":"BSI:WID-SEC-2026-2985","date":"2026-08-25","title":"Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2985"},{"id":"IBM:7284954","date":"2026-08-25","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in ajv (CVE-2025-69873)","source_url":"https://www.ibm.com/support/pages/node/7284954"},{"id":"RHSA-2026:59347","date":"2026-08-25","title":"httpd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59347"},{"id":"BSI:WID-SEC-2026-2886","date":"2026-08-24","title":"GeoServer: Schwachstelle ermöglicht SQL-Injection und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2886"},{"id":"IBM:7284637","date":"2026-08-24","title":"Security Bulletin: Vulnerabilities found in Watson Data Intelligence","source_url":"https://www.ibm.com/support/pages/node/7284637"},{"id":"IBM:7284653","date":"2026-08-24","title":"Security Bulletin: Multiple vulnerabilities affect IBM Sterling Connect:Direct File Agent","source_url":"https://www.ibm.com/support/pages/node/7284653"},{"id":"IBM:7284655","date":"2026-08-24","title":"Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service","source_url":"https://www.ibm.com/support/pages/node/7284655"},{"id":"IBM:7284659","date":"2026-08-24","title":"Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7284659"},{"id":"IBM:7284670","date":"2026-08-24","title":"Security Bulletin: IBM QRadar Suite Software includes components with multiple known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284670"},{"id":"IBM:7284705","date":"2026-08-24","title":"Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service","source_url":"https://www.ibm.com/support/pages/node/7284705"},{"id":"IBM:7284733","date":"2026-08-24","title":"Security Bulletin: Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement","source_url":"https://www.ibm.com/support/pages/node/7284733"},{"id":"IBM:7284745","date":"2026-08-24","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge","source_url":"https://www.ibm.com/support/pages/node/7284745"},{"id":"IBM:7284845","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in NLnet Labs Unbound [CVE-2026-33278]","source_url":"https://www.ibm.com/support/pages/node/7284845"},{"id":"IBM:7284851","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues","source_url":"https://www.ibm.com/support/pages/node/7284851"},{"id":"NCSC-2026-0325","date":"2026-08-24","title":"NCSC-2026-0325 Kwetsbaarheden verholpen in Atlassian producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0325"},{"id":"RHSA-2026:58981","date":"2026-08-24","title":"Red Hat Update Infrastructure 5.3 Technology Preview security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58981"},{"id":"BSI:WID-SEC-2024-1938","date":"2026-08-24","title":"Drupal: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1938"},{"id":"BSI:WID-SEC-2024-3155","date":"2026-08-24","title":"QEMU: Schwachstelle ermöglicht Privilegieneskalation oder DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3155"},{"id":"BSI:WID-SEC-2025-2595","date":"2026-08-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2595"},{"id":"BSI:WID-SEC-2025-2920","date":"2026-08-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2920"},{"id":"BSI:WID-SEC-2026-2225","date":"2026-08-24","title":"Red Hat Enterprise Linux (389-ds-base): Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2225"},{"id":"BSI:WID-SEC-2026-2324","date":"2026-08-24","title":"Microsoft DeveloperTools: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2324"},{"id":"BSI:WID-SEC-2026-2697","date":"2026-08-24","title":"Apache Portable Runtime (APR): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2697"},{"id":"BSI:WID-SEC-2026-2730","date":"2026-08-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2730"},{"id":"BSI:WID-SEC-2026-2731","date":"2026-08-24","title":"GIMP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2731"},{"id":"BSI:WID-SEC-2026-2761","date":"2026-08-24","title":"Microsoft Developer Tools: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2761"},{"id":"BSI:WID-SEC-2026-2868","date":"2026-08-24","title":"Red Hat Enterprise Linux (pcp): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2868"},{"id":"BSI:WID-SEC-2026-2869","date":"2026-08-24","title":"Redis: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2869"},{"id":"BSI:WID-SEC-2026-2908","date":"2026-08-24","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2908"},{"id":"BSI:WID-SEC-2026-2951","date":"2026-08-24","title":"Microsoft Azure, Entra ID und Exchange: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2951"},{"id":"BSI:WID-SEC-2026-2962","date":"2026-08-24","title":"Apache CloudStack: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2962"},{"id":"BSI:WID-SEC-2026-2965","date":"2026-08-24","title":"Langflow OSS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2965"},{"id":"BSI:WID-SEC-2026-2968","date":"2026-08-24","title":"Notepad++: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2968"},{"id":"BSI:WID-SEC-2026-2974","date":"2026-08-24","title":"Rapid7 Velociraptor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2974"},{"id":"GHSA-5X78-73V4-XG6W","date":"2026-08-24","title":"postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service","source_url":"https://github.com/advisories/GHSA-5x78-73v4-xg6w"},{"id":"GHSA-8JJ7-4V57-FRF5","date":"2026-08-24","title":"django CMS: Plugin move endpoint allows cyclic reparenting (DoS)","source_url":"https://github.com/advisories/GHSA-8jj7-4v57-frf5"},{"id":"GHSA-JM48-M3RR-9HGG","date":"2026-08-24","title":"3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation","source_url":"https://github.com/advisories/GHSA-jm48-m3rr-9hgg"},{"id":"GHSA-W2X5-GV52-9CCV","date":"2026-08-24","title":"Sakai Conversations has a Stored XSS Issue","source_url":"https://github.com/advisories/GHSA-w2x5-gv52-9ccv"},{"id":"IBM:7284638","date":"2026-08-24","title":"Security Bulletin: IBM Jazz for Service Management is affected by multiple vulnerabilities in Apache ActiveMQ","source_url":"https://www.ibm.com/support/pages/node/7284638"},{"id":"IBM:7284658","date":"2026-08-24","title":"Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7284658"},{"id":"IBM:7284666","date":"2026-08-24","title":"Security Bulletin: Vulnerability in WebSphere Application Server Liberty affect Cloud Pak System Pattern Type","source_url":"https://www.ibm.com/support/pages/node/7284666"},{"id":"IBM:7284672","date":"2026-08-24","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in fast-uri","source_url":"https://www.ibm.com/support/pages/node/7284672"},{"id":"IBM:7284674","date":"2026-08-24","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/text.","source_url":"https://www.ibm.com/support/pages/node/7284674"},{"id":"IBM:7284841","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-5946]","source_url":"https://www.ibm.com/support/pages/node/7284841"},{"id":"IBM:7284846","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-3039]","source_url":"https://www.ibm.com/support/pages/node/7284846"},{"id":"IBM:7284847","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in PostgreSQL [CVE-2026-6473]","source_url":"https://www.ibm.com/support/pages/node/7284847"},{"id":"IBM:7284849","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a heap overflow in NLnet Labs Unbound [CVE-2026-42944]","source_url":"https://www.ibm.com/support/pages/node/7284849"},{"id":"RHSA-2026:58545","date":"2026-08-24","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58545"},{"id":"RHSA-2026:58553","date":"2026-08-24","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58553"},{"id":"RHSA-2026:58554","date":"2026-08-24","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58554"},{"id":"RHSA-2026:58556","date":"2026-08-24","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58556"},{"id":"RHSA-2026:58562","date":"2026-08-24","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58562"},{"id":"RHSA-2026:58563","date":"2026-08-24","title":"openssl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58563"},{"id":"RHSA-2026:58564","date":"2026-08-24","title":"webkitgtk4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58564"},{"id":"RHSA-2026:58566","date":"2026-08-24","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:58566"},{"id":"RHSA-2026:58567","date":"2026-08-24","title":".NET 9.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:58567"},{"id":"RHSA-2026:58710","date":"2026-08-24","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58710"},{"id":"RHSA-2026:58711","date":"2026-08-24","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58711"},{"id":"RHSA-2026:58713","date":"2026-08-24","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58713"},{"id":"RHSA-2026:58820","date":"2026-08-24","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58820"},{"id":"RHSA-2026:58822","date":"2026-08-24","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58822"},{"id":"RHSA-2026:58834","date":"2026-08-24","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58834"},{"id":"RHSA-2026:58835","date":"2026-08-24","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58835"},{"id":"RHSA-2026:58897","date":"2026-08-24","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58897"},{"id":"RHSA-2026:58898","date":"2026-08-24","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58898"},{"id":"RHSA-2026:58899","date":"2026-08-24","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58899"},{"id":"RHSA-2026:58902","date":"2026-08-24","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58902"},{"id":"RHSA-2026:58953","date":"2026-08-24","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58953"},{"id":"RHSA-2026:58954","date":"2026-08-24","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58954"},{"id":"RHSA-2026:59020","date":"2026-08-24","title":"sqlite security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59020"},{"id":"RHSA-2026:59091","date":"2026-08-24","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59091"},{"id":"RHSA-2026:59097","date":"2026-08-24","title":"gstreamer1-plugins-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59097"},{"id":"RHSA-2026:59133","date":"2026-08-24","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59133"},{"id":"RHSA-2026:59135","date":"2026-08-24","title":"Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:59135"},{"id":"RHSA-2026:59136","date":"2026-08-24","title":"Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:59136"},{"id":"RHSA-2026:59137","date":"2026-08-24","title":"Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:59137"},{"id":"RHSA-2026:59138","date":"2026-08-24","title":"Red Hat AI Inference Server 3.3.6 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:59138"},{"id":"RHSA-2026:59139","date":"2026-08-24","title":"Red Hat AI Inference Server 3.3.6 (ROCm)","source_url":"https://access.redhat.com/errata/RHSA-2026:59139"},{"id":"RHSA-2026:59142","date":"2026-08-24","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59142"},{"id":"RHSA-2026:59143","date":"2026-08-24","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59143"},{"id":"RHSA-2026:59145","date":"2026-08-24","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59145"},{"id":"RHSA-2026:59146","date":"2026-08-24","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59146"},{"id":"RHSA-2026:59147","date":"2026-08-24","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59147"},{"id":"RHSA-2026:59148","date":"2026-08-24","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59148"},{"id":"RHSA-2026:59149","date":"2026-08-24","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59149"},{"id":"RHSA-2026:59152","date":"2026-08-24","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59152"},{"id":"RHSA-2026:59179","date":"2026-08-24","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59179"},{"id":"RHSA-2026:59198","date":"2026-08-24","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59198"},{"id":"RHSA-2026:59216","date":"2026-08-24","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59216"},{"id":"RHSA-2026:59220","date":"2026-08-24","title":"nginx security update","source_url":"https://access.redhat.com/errata/RHSA-2026:59220"},{"id":"BSI:WID-SEC-2026-0680","date":"2026-08-24","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0680"},{"id":"BSI:WID-SEC-2026-1385","date":"2026-08-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1385"},{"id":"BSI:WID-SEC-2026-1908","date":"2026-08-24","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1908"},{"id":"BSI:WID-SEC-2026-2121","date":"2026-08-24","title":"util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2121"},{"id":"BSI:WID-SEC-2026-2712","date":"2026-08-24","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2712"},{"id":"BSI:WID-SEC-2026-2718","date":"2026-08-24","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2718"},{"id":"BSI:WID-SEC-2026-2966","date":"2026-08-24","title":"ESRI Portal für ArcGIS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2966"},{"id":"BSI:WID-SEC-2026-2969","date":"2026-08-24","title":"IBM SPSS Modeler: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2969"},{"id":"BSI:WID-SEC-2026-2971","date":"2026-08-24","title":"Apache CloudStack: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2971"},{"id":"BSI:WID-SEC-2026-2973","date":"2026-08-24","title":"git: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2973"},{"id":"BSI:WID-SEC-2026-2975","date":"2026-08-24","title":"vllm: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2975"},{"id":"BSI:WID-SEC-2026-2978","date":"2026-08-24","title":"Hashicorp Terraform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2978"},{"id":"GHSA-3GJW-F78C-VVPW","date":"2026-08-24","title":"tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service","source_url":"https://github.com/advisories/GHSA-3gjw-f78c-vvpw"},{"id":"GHSA-9284-FJC3-FMMJ","date":"2026-08-24","title":"Sakai Profile Image Deletion has an IDOR","source_url":"https://github.com/advisories/GHSA-9284-fjc3-fmmj"},{"id":"GHSA-FWJF-M4QW-9F2X","date":"2026-08-24","title":"django CMS: Page cache ignores plugin-declared Vary headers (disclosure & poisoning)","source_url":"https://github.com/advisories/GHSA-fwjf-m4qw-9f2x"},{"id":"GHSA-FX4F-MHW4-QM7J","date":"2026-08-24","title":"vibeio-http has a DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths","source_url":"https://github.com/advisories/GHSA-fx4f-mhw4-qm7j"},{"id":"GHSA-RGQC-3X5P-6GWG","date":"2026-08-24","title":"postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service","source_url":"https://github.com/advisories/GHSA-rgqc-3x5p-6gwg"},{"id":"GHSA-VX2M-JPXR-XV7W","date":"2026-08-24","title":"Cloudreve has Broken Access Control - Revoked Share Access Still Allows Signed File URL Generation via Cached context_hint","source_url":"https://github.com/advisories/GHSA-vx2m-jpxr-xv7w"},{"id":"GHSA-W67G-5RQW-F597","date":"2026-08-24","title":"Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key","source_url":"https://github.com/advisories/GHSA-w67g-5rqw-f597"},{"id":"GHSA-W8J7-39HP-8X59","date":"2026-08-24","title":"Cloudreve's remote download file paths can escape the selected destination directory","source_url":"https://github.com/advisories/GHSA-w8j7-39hp-8x59"},{"id":"IBM:7284686","date":"2026-08-24","title":"Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server (August 2026)","source_url":"https://www.ibm.com/support/pages/node/7284686"},{"id":"IBM:7284710","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7284710"},{"id":"IBM:7284712","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a privilege escalation vulnerability (CVE-2026-18499)","source_url":"https://www.ibm.com/support/pages/node/7284712"},{"id":"IBM:7284715","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a privilege escalation vulnerability (CVE-2026-18499)","source_url":"https://www.ibm.com/support/pages/node/7284715"},{"id":"IBM:7284718","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a privilege escalation vulnerability (CVE-2026-18499)","source_url":"https://www.ibm.com/support/pages/node/7284718"},{"id":"IBM:7284719","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability (CVE-2026-10571)","source_url":"https://www.ibm.com/support/pages/node/7284719"},{"id":"IBM:7284721","date":"2026-08-24","title":"Security Bulletin: Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability (CVE-2026-10571)","source_url":"https://www.ibm.com/support/pages/node/7284721"},{"id":"IBM:7284722","date":"2026-08-24","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service vulnerability (CVE-2026-10571)","source_url":"https://www.ibm.com/support/pages/node/7284722"},{"id":"IBM:7284767","date":"2026-08-24","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest","source_url":"https://www.ibm.com/support/pages/node/7284767"},{"id":"IBM:7284848","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to improper encoding in Apache Log4j [CVE-2026-49844]","source_url":"https://www.ibm.com/support/pages/node/7284848"},{"id":"IBM:7284850","date":"2026-08-24","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Insufficiently Protected Credentials in go-git [GHSA-3xc5-wrhm-f963]","source_url":"https://www.ibm.com/support/pages/node/7284850"},{"id":"RHSA-2026:58949","date":"2026-08-24","title":"assertj-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58949"},{"id":"RHSA-2026:58956","date":"2026-08-24","title":"assertj-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58956"},{"id":"RHSA-2026:58957","date":"2026-08-24","title":"assertj-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58957"},{"id":"RHSA-2026:58977","date":"2026-08-24","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58977"},{"id":"RHSA-2026:58978","date":"2026-08-24","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58978"},{"id":"RHSA-2026:58979","date":"2026-08-24","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:58979"},{"id":"RHSA-2026:58982","date":"2026-08-24","title":"grafana security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:58982"},{"id":"USN-8670-1","date":"2026-08-24","title":"USN-8670-1: curl vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8670-1"},{"id":"USN-8671-1","date":"2026-08-24","title":"USN-8671-1: FFmpeg vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8671-1"},{"id":"BSI:WID-SEC-2024-2192","date":"2026-08-24","title":"QEMU: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2192"},{"id":"BSI:WID-SEC-2026-1448","date":"2026-08-24","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1448"},{"id":"GHSA-4PH6-MJV7-3FQ6","date":"2026-08-24","title":"netfoil vulnerable to improper handling of untrusted DoH response data","source_url":"https://github.com/advisories/GHSA-4ph6-mjv7-3fq6"},{"id":"NCSC-2026-0324","date":"2026-08-23","title":"NCSC-2026-0324 Kwetsbaarheid verholpen in Zimbra Collaboration Suite","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0324"},{"id":"IBM:7284117","date":"2026-08-22","title":"Security Bulletin: MaaS360 mobile apps (iOS and Android) are able to bypass authentication by using deep link from the browser.","source_url":"https://www.ibm.com/support/pages/node/7284117"},{"id":"CISCO-SA-HARDENING-CROSSWORK-UZDTU9VH","date":"2026-08-21","title":"Cisco Crosswork Security Hardening Release: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh"},{"id":"GHSA-2943-5XFG-GQ5F","date":"2026-08-21","title":"JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions","source_url":"https://github.com/advisories/GHSA-2943-5xfg-gq5f"},{"id":"GHSA-66MM-25PP-RFFF","date":"2026-08-21","title":"JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions","source_url":"https://github.com/advisories/GHSA-66mm-25pp-rfff"},{"id":"GHSA-8GQ3-VP5J-2GRP","date":"2026-08-21","title":"JSONata: Arbitrary Code Execution via crafted JSONata expressions","source_url":"https://github.com/advisories/GHSA-8gq3-vp5j-2grp"},{"id":"GHSA-HRWP-4HH9-C8R8","date":"2026-08-21","title":"Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI leads to RCE)","source_url":"https://github.com/advisories/GHSA-hrwp-4hh9-c8r8"},{"id":"GHSA-MQJF-5F49-2FJH","date":"2026-08-21","title":"GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers","source_url":"https://github.com/advisories/GHSA-mqjf-5f49-2fjh"},{"id":"GHSA-X2RJ-828P-HX9M","date":"2026-08-21","title":"Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing","source_url":"https://github.com/advisories/GHSA-x2rj-828p-hx9m"},{"id":"IBM:7284379","date":"2026-08-21","title":"Security Bulletin: Multiple vulnerabilities affect IBM License Metric Tool","source_url":"https://www.ibm.com/support/pages/node/7284379"},{"id":"IBM:7284521","date":"2026-08-21","title":"Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284521"},{"id":"IBM:7284534","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to dojo.profile-1.9.7.js (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273)","source_url":"https://www.ibm.com/support/pages/node/7284534"},{"id":"IBM:7284539","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Zlib (CVE-2026-3381)","source_url":"https://www.ibm.com/support/pages/node/7284539"},{"id":"IBM:7284540","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to immutable-4.3.5.tgz (CVE-2026-29063)","source_url":"https://www.ibm.com/support/pages/node/7284540"},{"id":"IBM:7284547","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Handlebars (CVE-2026-33937, CVE-2026-33938, CVE-2026-33939, CVE-2026-33940, CVE-2026-33941)","source_url":"https://www.ibm.com/support/pages/node/7284547"},{"id":"IBM:7284549","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2025-62718)","source_url":"https://www.ibm.com/support/pages/node/7284549"},{"id":"IBM:7284550","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026)","source_url":"https://www.ibm.com/support/pages/node/7284550"},{"id":"IBM:7284565","date":"2026-08-21","title":"Security Bulletin: Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7284565"},{"id":"IBM:7284580","date":"2026-08-21","title":"Security Bulletin: IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [CVE-2026-18527, CVE-2026-17203].","source_url":"https://www.ibm.com/support/pages/node/7284580"},{"id":"NCSC-2026-0321","date":"2026-08-21","title":"NCSC-2026-0321 Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0321"},{"id":"NCSC-2026-0322","date":"2026-08-21","title":"NCSC-2026-0322 Kwetsbaarheden verholpen in Splunk Enterprise door Splunk","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0322"},{"id":"NCSC-2026-0323","date":"2026-08-21","title":"NCSC-2026-0323 Kwetsbaarheden verholpen in Cisco Secure Workload","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0323"},{"id":"BSI:WID-SEC-2026-1804","date":"2026-08-21","title":"BigBlueButton: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1804"},{"id":"BSI:WID-SEC-2026-1849","date":"2026-08-21","title":"Microsoft Windows: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1849"},{"id":"BSI:WID-SEC-2026-2711","date":"2026-08-21","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2711"},{"id":"BSI:WID-SEC-2026-2749","date":"2026-08-21","title":"Red Hat OpenShift (oauth-proxy): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2749"},{"id":"BSI:WID-SEC-2026-2858","date":"2026-08-21","title":"IBM AIX und VIOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2858"},{"id":"BSI:WID-SEC-2026-2954","date":"2026-08-21","title":"libvirt: Schwachstelle ermöglicht Privilegieneskalation und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2954"},{"id":"BSI:WID-SEC-2026-2963","date":"2026-08-21","title":"PTC Windchill und FlexPLM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2963"},{"id":"BSI:WID-SEC-2026-2964","date":"2026-08-21","title":"TP-Link Omada Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2964"},{"id":"GHSA-26W5-6G95-GJ28","date":"2026-08-21","title":"Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation","source_url":"https://github.com/advisories/GHSA-26w5-6g95-gj28"},{"id":"GHSA-2CP2-2R3C-7P7R","date":"2026-08-21","title":"Hydra: hydra.utils.instantiate with untrusted config can lead to code execution","source_url":"https://github.com/advisories/GHSA-2cp2-2r3c-7p7r"},{"id":"GHSA-5H77-88J3-R659","date":"2026-08-21","title":"YOURLS has stored XSS in referrer statistics chart via crafted Referer header","source_url":"https://github.com/advisories/GHSA-5h77-88j3-r659"},{"id":"GHSA-CQMQ-8755-7XVH","date":"2026-08-21","title":"Keystone vulnerable to `graphql.maxTake` bypass with negative `take`","source_url":"https://github.com/advisories/GHSA-cqmq-8755-7xvh"},{"id":"GHSA-JG4P-G6XJ-4QMF","date":"2026-08-21","title":"Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors","source_url":"https://github.com/advisories/GHSA-jg4p-g6xj-4qmf"},{"id":"GHSA-MMFR-PMJX-HW9W","date":"2026-08-21","title":"kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS","source_url":"https://github.com/advisories/GHSA-mmfr-pmjx-hw9w"},{"id":"GHSA-R5PQ-6CHH-J3XP","date":"2026-08-21","title":"Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter","source_url":"https://github.com/advisories/GHSA-r5pq-6chh-j3xp"},{"id":"GHSA-XHJ3-7XW9-VR34","date":"2026-08-21","title":"kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding","source_url":"https://github.com/advisories/GHSA-xhj3-7xw9-vr34"},{"id":"IBM:7284519","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 (CVE-2025-53066, CVE-2025-53057)","source_url":"https://www.ibm.com/support/pages/node/7284519"},{"id":"IBM:7284525","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Jan 2026 (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)","source_url":"https://www.ibm.com/support/pages/node/7284525"},{"id":"IBM:7284527","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639)","source_url":"https://www.ibm.com/support/pages/node/7284527"},{"id":"IBM:7284528","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2025-14914)","source_url":"https://www.ibm.com/support/pages/node/7284528"},{"id":"IBM:7284530","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to qs-6.13.0.tgz (CVE-2026-2391)","source_url":"https://www.ibm.com/support/pages/node/7284530"},{"id":"IBM:7284535","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to a weaknesses related to pdfmake-0.2.10.tgz (CVE-2025-11362)","source_url":"https://www.ibm.com/support/pages/node/7284535"},{"id":"IBM:7284536","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to multer-1.4.2.tgz (CVE-2025-47935, CVE-2026-2359, CVE-2026-3304)","source_url":"https://www.ibm.com/support/pages/node/7284536"},{"id":"IBM:7284537","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to multer-1.4.2.tgz (CVE-2026-3520)","source_url":"https://www.ibm.com/support/pages/node/7284537"},{"id":"IBM:7284542","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to picomatch-2.2.2.tgz (CVE-2026-33671, CVE-2026-33672)","source_url":"https://www.ibm.com/support/pages/node/7284542"},{"id":"IBM:7284546","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to multer-2.0.1.tgz (CVE-2025-7338 ,CVE-2026-2359 ,CVE-2026-3304 ,CVE-2026-3520)","source_url":"https://www.ibm.com/support/pages/node/7284546"},{"id":"IBM:7284548","date":"2026-08-21","title":"Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639, CVE-2026-39865)","source_url":"https://www.ibm.com/support/pages/node/7284548"},{"id":"IBM:7284579","date":"2026-08-21","title":"Security Bulletin: Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284579"},{"id":"IBM:7284593","date":"2026-08-21","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7284593"},{"id":"BSI:WID-SEC-2022-0005","date":"2026-08-21","title":"zlib: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0005"},{"id":"BSI:WID-SEC-2022-0585","date":"2026-08-21","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0585"},{"id":"BSI:WID-SEC-2026-1584","date":"2026-08-21","title":"docker: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1584"},{"id":"BSI:WID-SEC-2026-2031","date":"2026-08-21","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2031"},{"id":"BSI:WID-SEC-2026-2062","date":"2026-08-21","title":"Podman: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2062"},{"id":"BSI:WID-SEC-2026-2104","date":"2026-08-21","title":"Podman: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2104"},{"id":"BSI:WID-SEC-2026-2415","date":"2026-08-21","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2415"},{"id":"BSI:WID-SEC-2026-2947","date":"2026-08-21","title":"Microsoft Windows Dienste: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2947"},{"id":"GHSA-5VF6-JRQR-78FJ","date":"2026-08-21","title":"Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers","source_url":"https://github.com/advisories/GHSA-5vf6-jrqr-78fj"},{"id":"GHSA-8HGV-XC77-JMCR","date":"2026-08-21","title":"Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin","source_url":"https://github.com/advisories/GHSA-8hgv-xc77-jmcr"},{"id":"GHSA-W4MQ-XH27-6XPX","date":"2026-08-21","title":"Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username","source_url":"https://github.com/advisories/GHSA-w4mq-xh27-6xpx"},{"id":"IBM:7284396","date":"2026-08-21","title":"Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM License Metric Tool","source_url":"https://www.ibm.com/support/pages/node/7284396"},{"id":"IBM:7284520","date":"2026-08-21","title":"Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284520"},{"id":"IBM:7284532","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2024-40094)","source_url":"https://www.ibm.com/support/pages/node/7284532"},{"id":"IBM:7284533","date":"2026-08-21","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 (CVE-2024-21235,CVE-2024-21217,CVE-2024-21210,CVE-2024-21208,CVE-2024-10917)","source_url":"https://www.ibm.com/support/pages/node/7284533"},{"id":"IBM:7284589","date":"2026-08-21","title":"Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607]","source_url":"https://www.ibm.com/support/pages/node/7284589"},{"id":"USN-8643-3","date":"2026-08-21","title":"USN-8643-3: Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8643-3"},{"id":"USN-8658-2","date":"2026-08-21","title":"USN-8658-2: Linux kernel (IBM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8658-2"},{"id":"USN-8659-1","date":"2026-08-21","title":"USN-8659-1: Linux kernel vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8659-1"},{"id":"USN-8659-2","date":"2026-08-21","title":"USN-8659-2: Linux kernel (HWE) vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8659-2"},{"id":"USN-8660-1","date":"2026-08-21","title":"USN-8660-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8660-1"},{"id":"USN-8661-2","date":"2026-08-21","title":"USN-8661-2: Linux kernel (Low Latency) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8661-2"},{"id":"USN-8662-2","date":"2026-08-21","title":"USN-8662-2: Linux kernel (FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8662-2"},{"id":"USN-8667-1","date":"2026-08-21","title":"USN-8667-1: Linux kernel (KVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8667-1"},{"id":"USN-8668-1","date":"2026-08-21","title":"USN-8668-1: Linux kernel (GCP) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8668-1"},{"id":"USN-8669-1","date":"2026-08-21","title":"USN-8669-1: Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8669-1"},{"id":"BSI:WID-SEC-2026-2875","date":"2026-08-21","title":"Checkmk: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2875"},{"id":"BSI:WID-SEC-2026-2882","date":"2026-08-20","title":"GitLab: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2882"},{"id":"GHSA-RRWH-6JRQ-WP5V","date":"2026-08-20","title":"Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import","source_url":"https://github.com/advisories/GHSA-rrwh-6jrq-wp5v"},{"id":"GHSA-V667-GC2R-2XM7","date":"2026-08-20","title":"Qinglong has an incomplete fix for CVE-2026-3965: Improper Authentication","source_url":"https://github.com/advisories/GHSA-v667-gc2r-2xm7"},{"id":"IBM:7283128","date":"2026-08-20","title":"Security Bulletin: Multiple vulnerabilities affect IBM® Semeru Runtime","source_url":"https://www.ibm.com/support/pages/node/7283128"},{"id":"IBM:7284285","date":"2026-08-20","title":"Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions","source_url":"https://www.ibm.com/support/pages/node/7284285"},{"id":"IBM:7284350","date":"2026-08-20","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an authentication bypass vulnerability (CVE-2026-14525)","source_url":"https://www.ibm.com/support/pages/node/7284350"},{"id":"IBM:7284351","date":"2026-08-20","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability (CVE-2026-14525)","source_url":"https://www.ibm.com/support/pages/node/7284351"},{"id":"IBM:7284352","date":"2026-08-20","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an authentication bypass vulnerability (CVE-2026-14525)","source_url":"https://www.ibm.com/support/pages/node/7284352"},{"id":"IBM:7284359","date":"2026-08-20","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7284359"},{"id":"NCSC-2026-0319","date":"2026-08-20","title":"NCSC-2026-0319 Kwetsbaarheden verholpen in Apple iOS en iPadOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0319"},{"id":"BSI:WID-SEC-2026-1269","date":"2026-08-20","title":"CyberPanel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1269"},{"id":"BSI:WID-SEC-2026-2939","date":"2026-08-20","title":"ffmpeg: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2939"},{"id":"BSI:WID-SEC-2026-2943","date":"2026-08-20","title":"Drupal Module: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2943"},{"id":"BSI:WID-SEC-2026-2945","date":"2026-08-20","title":"Hashicorp Vault Secrets Operator: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2945"},{"id":"BSI:WID-SEC-2026-2946","date":"2026-08-20","title":"MLflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2946"},{"id":"GHSA-23M2-MGHX-VQMF","date":"2026-08-20","title":"Wagtail: Reflected XSS in dynamic image URL generator view","source_url":"https://github.com/advisories/GHSA-23m2-mghx-vqmf"},{"id":"GHSA-2MC4-J865-9Q4R","date":"2026-08-20","title":"netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages","source_url":"https://github.com/advisories/GHSA-2mc4-j865-9q4r"},{"id":"GHSA-4899-MPCH-38P3","date":"2026-08-20","title":"netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding","source_url":"https://github.com/advisories/GHSA-4899-mpch-38p3"},{"id":"GHSA-533J-2V4Q-MW5H","date":"2026-08-20","title":"LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure","source_url":"https://github.com/advisories/GHSA-533j-2v4q-mw5h"},{"id":"GHSA-7Q96-F8XW-JV5J","date":"2026-08-20","title":"Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database","source_url":"https://github.com/advisories/GHSA-7q96-f8xw-jv5j"},{"id":"GHSA-8CFW-PCWH-V63W","date":"2026-08-20","title":"Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)","source_url":"https://github.com/advisories/GHSA-8cfw-pcwh-v63w"},{"id":"GHSA-8CFX-WX3Q-MH5Q","date":"2026-08-20","title":"netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary","source_url":"https://github.com/advisories/GHSA-8cfx-wx3q-mh5q"},{"id":"GHSA-8XJM-WQRP-2F25","date":"2026-08-20","title":"Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk","source_url":"https://github.com/advisories/GHSA-8xjm-wqrp-2f25"},{"id":"GHSA-F5F4-3HH4-F54M","date":"2026-08-20","title":"Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header","source_url":"https://github.com/advisories/GHSA-f5f4-3hh4-f54m"},{"id":"GHSA-GHVF-QF6H-G8X5","date":"2026-08-20","title":"NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution","source_url":"https://github.com/advisories/GHSA-ghvf-qf6h-g8x5"},{"id":"GHSA-HMQ9-67W8-J5PW","date":"2026-08-20","title":"netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields","source_url":"https://github.com/advisories/GHSA-hmq9-67w8-j5pw"},{"id":"GHSA-MRC5-3MM3-45C5","date":"2026-08-20","title":"Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)","source_url":"https://github.com/advisories/GHSA-mrc5-3mm3-45c5"},{"id":"GHSA-VGMV-8XJC-6RCH","date":"2026-08-20","title":"Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)","source_url":"https://github.com/advisories/GHSA-vgmv-8xjc-6rch"},{"id":"GHSA-VMR9-J6WF-PMH2","date":"2026-08-20","title":"netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service","source_url":"https://github.com/advisories/GHSA-vmr9-j6wf-pmh2"},{"id":"GHSA-XPV2-HRFC-HW62","date":"2026-08-20","title":"Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment","source_url":"https://github.com/advisories/GHSA-xpv2-hrfc-hw62"},{"id":"IBM:7284349","date":"2026-08-20","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM Enterprise Application Runtimes) are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7284349"},{"id":"IBM:7284398","date":"2026-08-20","title":"Security Bulletin: IBM Cyber Fraud includes components with multiple known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284398"},{"id":"NCSC-2026-0317","date":"2026-08-20","title":"NCSC-2026-0317 Kwetsbaarheden verholpen in Apple macOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0317"},{"id":"RHSA-2026:54187","date":"2026-08-20","title":"OpenShift Container Platform 4.13.70 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54187"},{"id":"RHSA-2026:54205","date":"2026-08-20","title":"OpenShift Container Platform 4.12.96 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54205"},{"id":"RHSA-2026:57254","date":"2026-08-20","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:57254"},{"id":"RHSA-2026:57348","date":"2026-08-20","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57348"},{"id":"RHSA-2026:57380","date":"2026-08-20","title":"Red Hat AI Inference 3.4.4 (cpu)","source_url":"https://access.redhat.com/errata/RHSA-2026:57380"},{"id":"RHSA-2026:57387","date":"2026-08-20","title":"Red Hat AI Inference 3.4.4 (spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:57387"},{"id":"RHSA-2026:57389","date":"2026-08-20","title":"Red Hat AI Inference 3.4.4 (cuda)","source_url":"https://access.redhat.com/errata/RHSA-2026:57389"},{"id":"RHSA-2026:57390","date":"2026-08-20","title":"Red Hat AI Inference 3.4.4 (rocm)","source_url":"https://access.redhat.com/errata/RHSA-2026:57390"},{"id":"RHSA-2026:57417","date":"2026-08-20","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57417"},{"id":"RHSA-2026:57462","date":"2026-08-20","title":"curl security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:57462"},{"id":"RHSA-2026:57539","date":"2026-08-20","title":"php:8.3 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:57539"},{"id":"RHSA-2026:57541","date":"2026-08-20","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57541"},{"id":"RHSA-2026:57562","date":"2026-08-20","title":"perl-Date-Manip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57562"},{"id":"RHSA-2026:57574","date":"2026-08-20","title":"php:8.2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:57574"},{"id":"RHSA-2026:57580","date":"2026-08-20","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57580"},{"id":"RHSA-2026:57590","date":"2026-08-20","title":"rh-podman-desktop security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:57590"},{"id":"RHSA-2026:57596","date":"2026-08-20","title":"mrtg security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57596"},{"id":"RHSA-2026:57633","date":"2026-08-20","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57633"},{"id":"RHSA-2026:57637","date":"2026-08-20","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57637"},{"id":"RHSA-2026:57638","date":"2026-08-20","title":"python-urwid security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57638"},{"id":"RHSA-2026:57649","date":"2026-08-20","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57649"},{"id":"RHSA-2026:57741","date":"2026-08-20","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57741"},{"id":"RHSA-2026:57775","date":"2026-08-20","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57775"},{"id":"RHSA-2026:57785","date":"2026-08-20","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57785"},{"id":"BSI:WID-SEC-2026-2941","date":"2026-08-20","title":"Arista EOS und WiFi Access Point: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2941"},{"id":"BSI:WID-SEC-2026-2942","date":"2026-08-20","title":"WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2942"},{"id":"ICSA-26-232-01","date":"2026-08-20","title":"Johnson Controls Simplex Incident Manager","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01"},{"id":"GHSA-2223-F22X-24CQ","date":"2026-08-20","title":"Winter: Local File Inclusion through =include directives in JavaScript asset compilation","source_url":"https://github.com/advisories/GHSA-2223-f22x-24cq"},{"id":"GHSA-3277-H8G9-QJ5F","date":"2026-08-20","title":"Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata","source_url":"https://github.com/advisories/GHSA-3277-h8g9-qj5f"},{"id":"GHSA-3VRH-M9W7-V94F","date":"2026-08-20","title":"Wagtail: Improper restriction handling on Pages admin API","source_url":"https://github.com/advisories/GHSA-3vrh-m9w7-v94f"},{"id":"GHSA-42VX-43VC-X6PR","date":"2026-08-20","title":"Laravel Backpack CRUD: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation","source_url":"https://github.com/advisories/GHSA-42vx-43vc-x6pr"},{"id":"GHSA-4XFR-4P46-GC6P","date":"2026-08-20","title":"django CMS: Clipboard copy IDOR discloses unauthorized plugin content","source_url":"https://github.com/advisories/GHSA-4xfr-4p46-gc6p"},{"id":"GHSA-58FP-MCX6-7QF9","date":"2026-08-20","title":"Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets","source_url":"https://github.com/advisories/GHSA-58fp-mcx6-7qf9"},{"id":"GHSA-5CWR-5JXG-PCF6","date":"2026-08-20","title":"Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles","source_url":"https://github.com/advisories/GHSA-5cwr-5jxg-pcf6"},{"id":"GHSA-6F2P-296R-CC28","date":"2026-08-20","title":"Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution","source_url":"https://github.com/advisories/GHSA-6f2p-296r-cc28"},{"id":"GHSA-6X92-6VX4-5FWR","date":"2026-08-20","title":"django CMS: Broken access control in page *Duplicate* allows reading the content of any page (cross-site / restriction bypass)","source_url":"https://github.com/advisories/GHSA-6x92-6vx4-5fwr"},{"id":"GHSA-8634-MR4J-R72C","date":"2026-08-20","title":"Wagtail: Pages translations can be created without page permissions when using simple_translation","source_url":"https://github.com/advisories/GHSA-8634-mr4j-r72c"},{"id":"GHSA-89V8-RHWQ-HF77","date":"2026-08-20","title":"asteval has a Sandbox Escape via BaseException Subclasses","source_url":"https://github.com/advisories/GHSA-89v8-rhwq-hf77"},{"id":"GHSA-8HW4-7QJR-3WXG","date":"2026-08-20","title":"Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk","source_url":"https://github.com/advisories/GHSA-8hw4-7qjr-3wxg"},{"id":"GHSA-8Q2W-PV9P-MJVC","date":"2026-08-20","title":"Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver","source_url":"https://github.com/advisories/GHSA-8q2w-pv9p-mjvc"},{"id":"GHSA-8QJ2-C6Q4-F399","date":"2026-08-20","title":"django CMS: Missing authorization in `render_object_structure` discloses non-PageContent placeholder structure to low-privileged staff","source_url":"https://github.com/advisories/GHSA-8qj2-c6q4-f399"},{"id":"GHSA-8R62-W5WH-FC5M","date":"2026-08-20","title":"Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)","source_url":"https://github.com/advisories/GHSA-8r62-w5wh-fc5m"},{"id":"GHSA-9FW9-8C49-QCH8","date":"2026-08-20","title":"Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check","source_url":"https://github.com/advisories/GHSA-9fw9-8c49-qch8"},{"id":"GHSA-9W56-46F6-3QHX","date":"2026-08-20","title":"asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter","source_url":"https://github.com/advisories/GHSA-9w56-46f6-3qhx"},{"id":"GHSA-C2XX-CJMH-9Q8F","date":"2026-08-20","title":"Wagtail: Improper restriction handling on descendant collections in Documents and Images API","source_url":"https://github.com/advisories/GHSA-c2xx-cjmh-9q8f"},{"id":"GHSA-F2P5-J6FG-5CXF","date":"2026-08-20","title":"Wagtail: Denial of service via unbounded filter specs in the image preview","source_url":"https://github.com/advisories/GHSA-f2p5-j6fg-5cxf"},{"id":"GHSA-F4JP-RW7W-CCWG","date":"2026-08-20","title":"gettext-converter: Prototype pollution in js2i18next() via crafted translation keys","source_url":"https://github.com/advisories/GHSA-f4jp-rw7w-ccwg"},{"id":"GHSA-FM29-4MQ3-PHG6","date":"2026-08-20","title":"Winter: ImportExportController AJAX handlers bypass granular import/export permission gate","source_url":"https://github.com/advisories/GHSA-fm29-4mq3-phg6"},{"id":"GHSA-H54R-XQ46-QWQM","date":"2026-08-20","title":"Wagtail: Improper restriction handling on Documents and Images chosen endpoints","source_url":"https://github.com/advisories/GHSA-h54r-xq46-qwqm"},{"id":"GHSA-HQ84-X37P-J6Q5","date":"2026-08-20","title":"Winter: Reflected XSS through the search query parameter in the backend Table widget","source_url":"https://github.com/advisories/GHSA-hq84-x37p-j6q5"},{"id":"GHSA-HVQ6-2R72-P2X7","date":"2026-08-20","title":"django CMS: Stored XSS in edit-mode plugin exception rendering","source_url":"https://github.com/advisories/GHSA-hvq6-2r72-p2x7"},{"id":"GHSA-JM5P-837G-RV8G","date":"2026-08-20","title":"Wagtail: Improper restriction handling on Page translation API endpoint","source_url":"https://github.com/advisories/GHSA-jm5p-837g-rv8g"},{"id":"GHSA-MMG4-322V-6JVC","date":"2026-08-20","title":"Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted","source_url":"https://github.com/advisories/GHSA-mmg4-322v-6jvc"},{"id":"GHSA-MPMW-F6H6-3G26","date":"2026-08-20","title":"Winter: My Account preview exposes another backend user's profile by record ID","source_url":"https://github.com/advisories/GHSA-mpmw-f6h6-3g26"},{"id":"GHSA-P2CH-C2C3-4XM5","date":"2026-08-20","title":"Winter: CSRF through AJAX handler names reachable as backend page actions","source_url":"https://github.com/advisories/GHSA-p2ch-c2c3-4xm5"},{"id":"GHSA-PGRF-4654-3GQ8","date":"2026-08-20","title":"netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash","source_url":"https://github.com/advisories/GHSA-pgrf-4654-3gq8"},{"id":"GHSA-Q9C5-PP7M-FM2G","date":"2026-08-20","title":"Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs","source_url":"https://github.com/advisories/GHSA-q9c5-pp7m-fm2g"},{"id":"GHSA-R553-M4FV-5V97","date":"2026-08-20","title":"Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement","source_url":"https://github.com/advisories/GHSA-r553-m4fv-5v97"},{"id":"GHSA-R6P4-GRQ7-XM4M","date":"2026-08-20","title":"Wagtail: Improper permission handling in image preview","source_url":"https://github.com/advisories/GHSA-r6p4-grq7-xm4m"},{"id":"GHSA-VGXM-H9GX-H9W7","date":"2026-08-20","title":"django CMS: Structure endpoint bypasses page-view permission","source_url":"https://github.com/advisories/GHSA-vgxm-h9gx-h9w7"},{"id":"GHSA-X5CX-W6P2-MXF2","date":"2026-08-20","title":"Wagtail: Improper permission handling when copying snippets","source_url":"https://github.com/advisories/GHSA-x5cx-w6p2-mxf2"},{"id":"IBM:7284380","date":"2026-08-20","title":"Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)","source_url":"https://www.ibm.com/support/pages/node/7284380"},{"id":"NCSC-2026-0318","date":"2026-08-20","title":"NCSC-2026-0318 Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318"},{"id":"RHSA-2026:55779","date":"2026-08-20","title":"OpenJDK 11.0.32.1 ELS Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55779"},{"id":"RHSA-2026:55780","date":"2026-08-20","title":"OpenJDK 11.0.32.1 ELS Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55780"},{"id":"RHSA-2026:57383","date":"2026-08-20","title":"Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)","source_url":"https://access.redhat.com/errata/RHSA-2026:57383"},{"id":"RHSA-2026:57451","date":"2026-08-20","title":"cups-filters security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57451"},{"id":"RHSA-2026:57597","date":"2026-08-20","title":"kbd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57597"},{"id":"RHSA-2026:57610","date":"2026-08-20","title":"kbd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57610"},{"id":"RHSA-2026:57641","date":"2026-08-20","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57641"},{"id":"RHSA-2026:57642","date":"2026-08-20","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57642"},{"id":"RHSA-2026:57844","date":"2026-08-20","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57844"},{"id":"USN-8630-4","date":"2026-08-20","title":"USN-8630-4: Linux kernel (AWS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8630-4"},{"id":"USN-8644-2","date":"2026-08-20","title":"USN-8644-2: Linux kernel (GCP) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8644-2"},{"id":"USN-8653-1","date":"2026-08-20","title":"USN-8653-1: PostgreSQL vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8653-1"},{"id":"USN-8654-1","date":"2026-08-20","title":"USN-8654-1: Netty vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8654-1"},{"id":"USN-8661-1","date":"2026-08-20","title":"USN-8661-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8661-1"},{"id":"USN-8662-1","date":"2026-08-20","title":"USN-8662-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8662-1"},{"id":"USN-8663-1","date":"2026-08-20","title":"USN-8663-1: Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8663-1"},{"id":"USN-8664-1","date":"2026-08-20","title":"USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8664-1"},{"id":"USN-8665-1","date":"2026-08-20","title":"USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8665-1"},{"id":"USN-8666-1","date":"2026-08-20","title":"USN-8666-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8666-1"},{"id":"GHSA-7MPF-4465-7FC2","date":"2026-08-20","title":"Winter: Stored XSS through Backend List widget image columns","source_url":"https://github.com/advisories/GHSA-7mpf-4465-7fc2"},{"id":"GHSA-92HV-J533-69WC","date":"2026-08-20","title":"Wagtail: Identification of documents by SHA1 hash","source_url":"https://github.com/advisories/GHSA-92hv-j533-69wc"},{"id":"GHSA-RXHG-VCWW-2MPW","date":"2026-08-20","title":"Fleet: ORDER BY column injection on activity list endpoints","source_url":"https://github.com/advisories/GHSA-rxhg-vcww-2mpw"},{"id":"NCSC-2026-0320","date":"2026-08-20","title":"NCSC-2026-0320 Kwetsbaarheden verholpen in Zabbix","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0320"},{"id":"CERT-EU-SA2026-010","date":"2026-08-19","title":"2026-010 Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway","source_url":"https://cert.europa.eu/publications/security-advisories/2026-010/"},{"id":"CISCO-SA-HARDENING-CSW1-SHSVNDWP","date":"2026-08-19","title":"Cisco Secure Workload Software Security Hardening Release: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP"},{"id":"IBM:7284277","date":"2026-08-19","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7284277"},{"id":"IBM:7284283","date":"2026-08-19","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Samba Cluster Export Services (CES) layer are now addressed in 6.0.1.1 or higher","source_url":"https://www.ibm.com/support/pages/node/7284283"},{"id":"IBM:7284322","date":"2026-08-19","title":"Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)","source_url":"https://www.ibm.com/support/pages/node/7284322"},{"id":"NCSC-2026-0306","date":"2026-08-19","title":"NCSC-2026-0306 Kwetsbaarheden verholpen in Oracle Fusion Middleware","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0306"},{"id":"NCSC-2026-0307","date":"2026-08-19","title":"NCSC-2026-0307 Kwetsbaarheden verholpen in Oracle Database Producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0307"},{"id":"NCSC-2026-0308","date":"2026-08-19","title":"NCSC-2026-0308 Kwetsbaarheden verholpen in Oracle Commerce Platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0308"},{"id":"NCSC-2026-0309","date":"2026-08-19","title":"NCSC-2026-0309 Kwetsbaarheden verholpen in Oracle Communications","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0309"},{"id":"NCSC-2026-0310","date":"2026-08-19","title":"NCSC-2026-0310 Kwetsbaarheden verholpen in Oracle E-Business Suite","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0310"},{"id":"NCSC-2026-0311","date":"2026-08-19","title":"NCSC-2026-0311 Kwetsbaarheden verholpen in Oracle Enterprise Manager","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0311"},{"id":"NCSC-2026-0312","date":"2026-08-19","title":"NCSC-2026-0312 Kwetsbaarheden verholpen in Oracle Financial Services","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0312"},{"id":"NCSC-2026-0313","date":"2026-08-19","title":"NCSC-2026-0313 Kwetsbaarheden verholpen in Oracle Business Intelligence Enterprise Edition en Oracle BI Publisher","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0313"},{"id":"NCSC-2026-0316","date":"2026-08-19","title":"NCSC-2026-0316 Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0316"},{"id":"BSI:WID-SEC-2025-1869","date":"2026-08-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1869"},{"id":"BSI:WID-SEC-2026-2441","date":"2026-08-19","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2441"},{"id":"BSI:WID-SEC-2026-2662","date":"2026-08-19","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2662"},{"id":"BSI:WID-SEC-2026-2872","date":"2026-08-19","title":"Apple Safari, macOS, iOS und iPadOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2872"},{"id":"BSI:WID-SEC-2026-2887","date":"2026-08-19","title":"Oracle Communications: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2887"},{"id":"BSI:WID-SEC-2026-2888","date":"2026-08-19","title":"Oracle Commerce: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2888"},{"id":"BSI:WID-SEC-2026-2889","date":"2026-08-19","title":"Oracle Database Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2889"},{"id":"BSI:WID-SEC-2026-2890","date":"2026-08-19","title":"Oracle Enterprise Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2890"},{"id":"BSI:WID-SEC-2026-2891","date":"2026-08-19","title":"Oracle E-Business Suite: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2891"},{"id":"BSI:WID-SEC-2026-2892","date":"2026-08-19","title":"Oracle Construction and Engineering: Schwachstelle gefährdet Vertraulichkeit und Integrität","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2892"},{"id":"BSI:WID-SEC-2026-2893","date":"2026-08-19","title":"Oracle Hyperion: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2893"},{"id":"BSI:WID-SEC-2026-2894","date":"2026-08-19","title":"Oracle Fusion Middleware: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2894"},{"id":"BSI:WID-SEC-2026-2895","date":"2026-08-19","title":"Oracle Financial Services Applications: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2895"},{"id":"BSI:WID-SEC-2026-2896","date":"2026-08-19","title":"Oracle JD Edwards: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2896"},{"id":"BSI:WID-SEC-2026-2898","date":"2026-08-19","title":"Oracle VM VirtualBox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2898"},{"id":"BSI:WID-SEC-2026-2899","date":"2026-08-19","title":"Oracle Supply Chain: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2899"},{"id":"BSI:WID-SEC-2026-2900","date":"2026-08-19","title":"Oracle Siebel CRM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2900"},{"id":"BSI:WID-SEC-2026-2902","date":"2026-08-19","title":"Oracle PeopleSoft: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2902"},{"id":"BSI:WID-SEC-2026-2903","date":"2026-08-19","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2903"},{"id":"BSI:WID-SEC-2026-2918","date":"2026-08-19","title":"OpenBao: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2918"},{"id":"BSI:WID-SEC-2026-2919","date":"2026-08-19","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2919"},{"id":"BSI:WID-SEC-2026-2923","date":"2026-08-19","title":"Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2923"},{"id":"BSI:WID-SEC-2026-2926","date":"2026-08-19","title":"Joomla: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2926"},{"id":"CISCO-SA-BWORKS-XXE-UWUD7CET","date":"2026-08-19","title":"Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt"},{"id":"GHSA-RXJR-6C9Q-H67X","date":"2026-08-19","title":"logto-tunnel serves files outside --experience-path via path traversal","source_url":"https://github.com/advisories/GHSA-rxjr-6c9q-h67x"},{"id":"GHSA-VWG3-W8W3-PC79","date":"2026-08-19","title":"Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems","source_url":"https://github.com/advisories/GHSA-vwg3-w8w3-pc79"},{"id":"IBM:7284257","date":"2026-08-19","title":"Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent","source_url":"https://www.ibm.com/support/pages/node/7284257"},{"id":"IBM:7284261","date":"2026-08-19","title":"Security Bulletin: IBM BigMemory Max is affected by Jetty vulnerabilities that could allow unauthorized exposure to sensitive data","source_url":"https://www.ibm.com/support/pages/node/7284261"},{"id":"IBM:7284273","date":"2026-08-19","title":"Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion","source_url":"https://www.ibm.com/support/pages/node/7284273"},{"id":"IBM:7284298","date":"2026-08-19","title":"Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty","source_url":"https://www.ibm.com/support/pages/node/7284298"},{"id":"NCSC-2026-0305","date":"2026-08-19","title":"NCSC-2026-0305 Kwetsbaarheden verholpen in Mattermost","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0305"},{"id":"NCSC-2026-0314","date":"2026-08-19","title":"NCSC-2026-0314 Kwetsbaarheden verholpen in Oracle Java SE","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0314"},{"id":"NCSC-2026-0315","date":"2026-08-19","title":"NCSC-2026-0315 Kwetsbaarheden verholpen in Oracle MySQL","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0315"},{"id":"RHSA-2026:54544","date":"2026-08-19","title":"OpenShift Container Platform 4.18.53 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54544"},{"id":"RHSA-2026:54553","date":"2026-08-19","title":"OpenShift Container Platform 4.19.43 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54553"},{"id":"RHSA-2026:54883","date":"2026-08-19","title":"Red Hat build of MicroShift 4.19.43 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54883"},{"id":"RHSA-2026:56573","date":"2026-08-19","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:56573"},{"id":"RHSA-2026:56658","date":"2026-08-19","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56658"},{"id":"RHSA-2026:56772","date":"2026-08-19","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56772"},{"id":"RHSA-2026:56869","date":"2026-08-19","title":"Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56869"},{"id":"RHSA-2026:56936","date":"2026-08-19","title":"mysql:8.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:56936"},{"id":"RHSA-2026:56959","date":"2026-08-19","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56959"},{"id":"RHSA-2026:56963","date":"2026-08-19","title":"gegl04 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56963"},{"id":"RHSA-2026:56970","date":"2026-08-19","title":"perl-Date-Manip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56970"},{"id":"RHSA-2026:56971","date":"2026-08-19","title":"perl-Date-Manip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56971"},{"id":"RHSA-2026:57126","date":"2026-08-19","title":"yggdrasil security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57126"},{"id":"RHSA-2026:57148","date":"2026-08-19","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57148"},{"id":"RHSA-2026:57149","date":"2026-08-19","title":"ansible-core security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57149"},{"id":"RHSA-2026:57174","date":"2026-08-19","title":"postfix security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57174"},{"id":"RHSA-2026:57189","date":"2026-08-19","title":"bind security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57189"},{"id":"RHSA-2026:57191","date":"2026-08-19","title":"Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:57191"},{"id":"BSI:WID-SEC-2026-0030","date":"2026-08-19","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0030"},{"id":"BSI:WID-SEC-2026-0690","date":"2026-08-19","title":"cURL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0690"},{"id":"BSI:WID-SEC-2026-1708","date":"2026-08-19","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1708"},{"id":"BSI:WID-SEC-2026-2901","date":"2026-08-19","title":"Oracle Retail Applications: Schwachstelle gefährdet Integrität","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2901"},{"id":"BSI:WID-SEC-2026-2917","date":"2026-08-19","title":"Citrix Systems Workspace App (MacOS): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2917"},{"id":"BSI:WID-SEC-2026-2921","date":"2026-08-19","title":"RabbitMQ Java Client: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2921"},{"id":"BSI:WID-SEC-2026-2922","date":"2026-08-19","title":"Nvidia Cumulus Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2922"},{"id":"BSI:WID-SEC-2026-2924","date":"2026-08-19","title":"CPython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2924"},{"id":"BSI:WID-SEC-2026-2925","date":"2026-08-19","title":"Axis Axis OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2925"},{"id":"CISCO-SA-CUIC-SQL-INJECT-2QBFWSM5","date":"2026-08-19","title":"Cisco Unified Intelligence Center SQL Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5"},{"id":"CISCO-SA-IE1K-NGXUFF52","date":"2026-08-19","title":"Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-NgXUFF52"},{"id":"CISCO-SA-IE1K-UXQ86LNX","date":"2026-08-19","title":"Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ie1k-uxq86Lnx"},{"id":"CISCO-SA-ROOMOS-BOF-VTMANZGU","date":"2026-08-19","title":"Cisco RoomOS Stack Overflow Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-bof-vTMANZgu"},{"id":"CISCO-SA-UCCE-PCCE-SSRF-TGHHXD","date":"2026-08-19","title":"Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-ssrf-TghHxD"},{"id":"GHSA-7236-3392-C5C6","date":"2026-08-19","title":"BuildKit: Custom frontend could bypass Seccomp/AppArmor","source_url":"https://github.com/advisories/GHSA-7236-3392-c5c6"},{"id":"GHSA-8MQ9-5FW2-5RM4","date":"2026-08-19","title":"Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)","source_url":"https://github.com/advisories/GHSA-8mq9-5fw2-5rm4"},{"id":"GHSA-HJWH-XVFW-QRWJ","date":"2026-08-19","title":"SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses","source_url":"https://github.com/advisories/GHSA-hjwh-xvfw-qrwj"},{"id":"GHSA-RGR9-R7MJ-MF6X","date":"2026-08-19","title":"Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root","source_url":"https://github.com/advisories/GHSA-rgr9-r7mj-mf6x"},{"id":"IBM:7282948","date":"2026-08-19","title":"Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in commons-configuration2-2.10.1 (CVE-2026-45205)","source_url":"https://www.ibm.com/support/pages/node/7282948"},{"id":"IBM:7284170","date":"2026-08-19","title":"Security Bulletin: Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions","source_url":"https://www.ibm.com/support/pages/node/7284170"},{"id":"IBM:7284269","date":"2026-08-19","title":"Security Bulletin: IBM BigMemory Max is affected by Jetty vulnerabilities that could allow attackers to bypass security filters in downstream web applications.","source_url":"https://www.ibm.com/support/pages/node/7284269"},{"id":"IBM:7284271","date":"2026-08-19","title":"Security Bulletin: Multiple Vulnerabilities in watsonx.data","source_url":"https://www.ibm.com/support/pages/node/7284271"},{"id":"IBM:7284282","date":"2026-08-19","title":"Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server Liberty and IBM WebSphere Application Server shipped with IBM WebSphere Remote Server","source_url":"https://www.ibm.com/support/pages/node/7284282"},{"id":"RHSA-2026:55774","date":"2026-08-19","title":"java-1.8.0-openjdk security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55774"},{"id":"RHSA-2026:55776","date":"2026-08-19","title":"OpenJDK 8u504 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55776"},{"id":"RHSA-2026:55777","date":"2026-08-19","title":"OpenJDK 8u504 Windows Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55777"},{"id":"RHSA-2026:55782","date":"2026-08-19","title":"OpenJDK 17.0.20.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55782"},{"id":"RHSA-2026:55783","date":"2026-08-19","title":"OpenJDK 17.0.20.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55783"},{"id":"RHSA-2026:55788","date":"2026-08-19","title":"OpenJDK 21.0.12.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55788"},{"id":"RHSA-2026:55789","date":"2026-08-19","title":"OpenJDK 21.0.12.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55789"},{"id":"RHSA-2026:55799","date":"2026-08-19","title":"OpenJDK 25.0.4.1 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55799"},{"id":"RHSA-2026:56574","date":"2026-08-19","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:56574"},{"id":"RHSA-2026:56954","date":"2026-08-19","title":"libarchive security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56954"},{"id":"RHSA-2026:56965","date":"2026-08-19","title":"libcupsfilters security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56965"},{"id":"RHSA-2026:56966","date":"2026-08-19","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56966"},{"id":"USN-8093-2","date":"2026-08-19","title":"USN-8093-2: libssh vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8093-2"},{"id":"USN-8113-2","date":"2026-08-19","title":"USN-8113-2: LibTIFF vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8113-2"},{"id":"USN-8563-3","date":"2026-08-19","title":"USN-8563-3: nginx vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8563-3"},{"id":"USN-8563-4","date":"2026-08-19","title":"USN-8563-4: nginx regression","source_url":"https://ubuntu.com/security/notices/USN-8563-4"},{"id":"USN-8648-1","date":"2026-08-19","title":"USN-8648-1: Bind vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8648-1"},{"id":"USN-8649-1","date":"2026-08-19","title":"USN-8649-1: libheif vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8649-1"},{"id":"USN-8650-1","date":"2026-08-19","title":"USN-8650-1: Cap'n Proto vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8650-1"},{"id":"USN-8651-1","date":"2026-08-19","title":"USN-8651-1: curl vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8651-1"},{"id":"CISCO-SA-NOTICE-LDQUVX5D","date":"2026-08-19","title":"Cisco Advance Notification for Publication of August 19, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-LDquvx5d"},{"id":"GHSA-72X6-4J93-7W86","date":"2026-08-19","title":"BuildKit has a possible runtime DoS via unbounded group parsing","source_url":"https://github.com/advisories/GHSA-72x6-4j93-7w86"},{"id":"IBM:7284270","date":"2026-08-19","title":"Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection","source_url":"https://www.ibm.com/support/pages/node/7284270"},{"id":"BSI:WID-SEC-2026-2316","date":"2026-08-18","title":"Microsoft Windows Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2316"},{"id":"GHSA-7788-GHFQ-C6MH","date":"2026-08-18","title":"Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints","source_url":"https://github.com/advisories/GHSA-7788-ghfq-c6mh"},{"id":"GHSA-PCW8-M77R-2528","date":"2026-08-18","title":"jmespath.php has CompilerRuntime code injection via unescaped function names","source_url":"https://github.com/advisories/GHSA-pcw8-m77r-2528"},{"id":"GHSA-PR85-W493-9W3X","date":"2026-08-18","title":"resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read","source_url":"https://github.com/advisories/GHSA-pr85-w493-9w3x"},{"id":"GHSA-RCR2-HGGW-43WM","date":"2026-08-18","title":"surfio has an out-of-bounds read","source_url":"https://github.com/advisories/GHSA-rcr2-hggw-43wm"},{"id":"IBM:7284089","date":"2026-08-18","title":"Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty for IBM Operations Analytics - Log Analysis","source_url":"https://www.ibm.com/support/pages/node/7284089"},{"id":"IBM:7284098","date":"2026-08-18","title":"Security Bulletin: Vulnerabilities found in Watson Data Intelligence","source_url":"https://www.ibm.com/support/pages/node/7284098"},{"id":"IBM:7284102","date":"2026-08-18","title":"Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284102"},{"id":"IBM:7284105","date":"2026-08-18","title":"Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7284105"},{"id":"IBM:7284129","date":"2026-08-18","title":"Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates","source_url":"https://www.ibm.com/support/pages/node/7284129"},{"id":"NCSC-2026-0216","date":"2026-08-18","title":"NCSC-2026-0216 Kwetsbaarheden verholpen in Citrix Netscaler ADC en Netscaler Gateway","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216"},{"id":"NCSC-2026-0303","date":"2026-08-18","title":"NCSC-2026-0303 Kwetsbaarheden verholpen in GitLab door GitLab Inc.","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0303"},{"id":"NCSC-2026-0304","date":"2026-08-18","title":"NCSC-2026-0304 ZeroDay Kwetsbaarheid verholpen in GeoTools door OpenGeo","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0304"},{"id":"RHSA-2026:56519","date":"2026-08-18","title":"Red Hat build of Keycloak 26.4.15 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:56519"},{"id":"RHSA-2026:56520","date":"2026-08-18","title":"Red Hat build of Keycloak 26.4.15 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:56520"},{"id":"RHSA-2026:56523","date":"2026-08-18","title":"Red Hat build of Keycloak 26.6.6 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:56523"},{"id":"RHSA-2026:56524","date":"2026-08-18","title":"Red Hat build of Keycloak 26.6.6 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:56524"},{"id":"BSI:WID-SEC-2025-2450","date":"2026-08-18","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2450"},{"id":"BSI:WID-SEC-2026-2012","date":"2026-08-18","title":"HAProxy: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2012"},{"id":"BSI:WID-SEC-2026-2799","date":"2026-08-18","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2799"},{"id":"BSI:WID-SEC-2026-2883","date":"2026-08-18","title":"Wazuh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2883"},{"id":"BSI:WID-SEC-2026-2884","date":"2026-08-18","title":"Citrix Systems ShareFile StorageZones Controller: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2884"},{"id":"GHSA-43GM-9RR3-CX7G","date":"2026-08-18","title":"Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover","source_url":"https://github.com/advisories/GHSA-43gm-9rr3-cx7g"},{"id":"GHSA-59XM-4M8C-G3XJ","date":"2026-08-18","title":"MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall","source_url":"https://github.com/advisories/GHSA-59xm-4m8c-g3xj"},{"id":"GHSA-6C8M-Q6G9-VRW3","date":"2026-08-18","title":"Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API","source_url":"https://github.com/advisories/GHSA-6c8m-q6g9-vrw3"},{"id":"GHSA-7GWW-X7FH-JF9J","date":"2026-08-18","title":"LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page","source_url":"https://github.com/advisories/GHSA-7gww-x7fh-jf9j"},{"id":"GHSA-CFH6-PV5C-38JV","date":"2026-08-18","title":"Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates","source_url":"https://github.com/advisories/GHSA-cfh6-pv5c-38jv"},{"id":"GHSA-HFG8-HC9C-6C3H","date":"2026-08-18","title":"moby/go-archive: Crafted tar archive can write outside the extraction directory","source_url":"https://github.com/advisories/GHSA-hfg8-hc9c-6c3h"},{"id":"GHSA-PXMC-2FFP-8J67","date":"2026-08-18","title":"Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it","source_url":"https://github.com/advisories/GHSA-pxmc-2ffp-8j67"},{"id":"GHSA-QXQ5-QHX6-94QW","date":"2026-08-18","title":"Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch","source_url":"https://github.com/advisories/GHSA-qxq5-qhx6-94qw"},{"id":"GHSA-RGHG-Q7WP-9767","date":"2026-08-18","title":"MONAI vulnerable to OS command injection","source_url":"https://github.com/advisories/GHSA-rghg-q7wp-9767"},{"id":"GHSA-V5RC-CPWC-CFPR","date":"2026-08-18","title":"Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist","source_url":"https://github.com/advisories/GHSA-v5rc-cpwc-cfpr"},{"id":"GHSA-W27M-RMMF-G5W4","date":"2026-08-18","title":"Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration","source_url":"https://github.com/advisories/GHSA-w27m-rmmf-g5w4"},{"id":"GHSA-WG9G-W2J2-8PGR","date":"2026-08-18","title":"MONAI: Unsafe deserialization in NumpyReader allows arbitrary code execution via malicious .npy files","source_url":"https://github.com/advisories/GHSA-wg9g-w2j2-8pgr"},{"id":"GHSA-XPMJ-WJCP-6PWW","date":"2026-08-18","title":"Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs","source_url":"https://github.com/advisories/GHSA-xpmj-wjcp-6pww"},{"id":"IBM:7284107","date":"2026-08-18","title":"Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in jackson-core","source_url":"https://www.ibm.com/support/pages/node/7284107"},{"id":"IBM:7284108","date":"2026-08-18","title":"Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in Micrometer (CVE-2026-40984)","source_url":"https://www.ibm.com/support/pages/node/7284108"},{"id":"IBM:7284125","date":"2026-08-18","title":"Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )","source_url":"https://www.ibm.com/support/pages/node/7284125"},{"id":"IBM:7284130","date":"2026-08-18","title":"Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality due to CVE-2026-47423","source_url":"https://www.ibm.com/support/pages/node/7284130"},{"id":"RHSA-2026:54581","date":"2026-08-18","title":"OpenShift Container Platform 4.20.34 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54581"},{"id":"RHSA-2026:54599","date":"2026-08-18","title":"OpenShift Container Platform 4.21.29 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54599"},{"id":"RHSA-2026:54769","date":"2026-08-18","title":"OpenShift Container Platform 4.22.10 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54769"},{"id":"RHSA-2026:55930","date":"2026-08-18","title":"mod_http2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55930"},{"id":"RHSA-2026:55992","date":"2026-08-18","title":"mod_http2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55992"},{"id":"RHSA-2026:56007","date":"2026-08-18","title":"mysql8.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:56007"},{"id":"RHSA-2026:56029","date":"2026-08-18","title":"pipewire security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56029"},{"id":"RHSA-2026:56047","date":"2026-08-18","title":"redhat-ds:11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56047"},{"id":"RHSA-2026:56048","date":"2026-08-18","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56048"},{"id":"RHSA-2026:56050","date":"2026-08-18","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56050"},{"id":"RHSA-2026:56130","date":"2026-08-18","title":"sg3_utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:56130"},{"id":"RHSA-2026:56143","date":"2026-08-18","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56143"},{"id":"RHSA-2026:56219","date":"2026-08-18","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56219"},{"id":"RHSA-2026:56223","date":"2026-08-18","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56223"},{"id":"RHSA-2026:56224","date":"2026-08-18","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56224"},{"id":"RHSA-2026:56225","date":"2026-08-18","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56225"},{"id":"RHSA-2026:56347","date":"2026-08-18","title":"Migration Toolkit for Applications","source_url":"https://access.redhat.com/errata/RHSA-2026:56347"},{"id":"RHSA-2026:56366","date":"2026-08-18","title":"Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:56366"},{"id":"RHSA-2026:56521","date":"2026-08-18","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56521"},{"id":"BSI:WID-SEC-2026-2098","date":"2026-08-18","title":"nmap: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2098"},{"id":"BSI:WID-SEC-2026-2659","date":"2026-08-18","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2659"},{"id":"BSI:WID-SEC-2026-2881","date":"2026-08-18","title":"RabbitMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2881"},{"id":"BSI:WID-SEC-2026-2885","date":"2026-08-18","title":"Icinga: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2885"},{"id":"ICSA-26-230-01","date":"2026-08-18","title":"CISA Malcolm","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-230-01"},{"id":"ICSA-26-230-02","date":"2026-08-18","title":"Siemens Simcenter Nastran","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-230-02"},{"id":"GHSA-43HJ-FXWJ-49QW","date":"2026-08-18","title":"membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion","source_url":"https://github.com/advisories/GHSA-43hj-fxwj-49qw"},{"id":"GHSA-4H97-P9WQ-CHQJ","date":"2026-08-18","title":"Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False","source_url":"https://github.com/advisories/GHSA-4h97-p9wq-chqj"},{"id":"GHSA-5RW4-4665-CVWF","date":"2026-08-18","title":"Froxlor DomainZones.add allows DNS zone-file RR injection via record/type fields","source_url":"https://github.com/advisories/GHSA-5rw4-4665-cvwf"},{"id":"GHSA-7CJ5-V4PP-V632","date":"2026-08-18","title":"LibreNMS: Stored XSS via graph_descr admin config settings echoed without escaping to all authenticated users","source_url":"https://github.com/advisories/GHSA-7cj5-v4pp-v632"},{"id":"GHSA-F3QQ-49M6-RW8F","date":"2026-08-18","title":"Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)","source_url":"https://github.com/advisories/GHSA-f3qq-49m6-rw8f"},{"id":"GHSA-G7P5-89MH-248H","date":"2026-08-18","title":"Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority","source_url":"https://github.com/advisories/GHSA-g7p5-89mh-248h"},{"id":"GHSA-JF24-8G2H-2WG7","date":"2026-08-18","title":"LibreNMS Vulnerable to Remote Code Execution via AboutController","source_url":"https://github.com/advisories/GHSA-jf24-8g2h-2wg7"},{"id":"GHSA-M5PQ-69XG-VCQ3","date":"2026-08-18","title":"devpi-server may leak database contents","source_url":"https://github.com/advisories/GHSA-m5pq-69xg-vcq3"},{"id":"GHSA-RH9C-RQVG-F7PR","date":"2026-08-18","title":"linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)","source_url":"https://github.com/advisories/GHSA-rh9c-rqvg-f7pr"},{"id":"GHSA-VJF8-9FX6-MV6X","date":"2026-08-18","title":"Triton VM Soundness Vulnerability due to Missing Constraint","source_url":"https://github.com/advisories/GHSA-vjf8-9fx6-mv6x"},{"id":"GHSA-XPR4-8VP6-C87J","date":"2026-08-18","title":"Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection","source_url":"https://github.com/advisories/GHSA-xpr4-8vp6-c87j"},{"id":"IBM:7283963","date":"2026-08-18","title":"Security Bulletin: RMC daemon (part of Reliable Scalable Cluster Technology) is vulnerable to Denial-of-Service attack","source_url":"https://www.ibm.com/support/pages/node/7283963"},{"id":"IBM:7284100","date":"2026-08-18","title":"Security Bulletin: Multiple security vulnerabilities has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool/OMNIbus WebGUI - July 2026 Java CPU","source_url":"https://www.ibm.com/support/pages/node/7284100"},{"id":"IBM:7284109","date":"2026-08-18","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server and is affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7284109"},{"id":"IBM:7284115","date":"2026-08-18","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities due to Apache CXF","source_url":"https://www.ibm.com/support/pages/node/7284115"},{"id":"IBM:7284126","date":"2026-08-18","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM Cloud Pak for Applications) are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7284126"},{"id":"IBM:7284191","date":"2026-08-18","title":"Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM WebSphere Remote Server, are affected by a security bypass vulnerability (CVE-2026-10842)","source_url":"https://www.ibm.com/support/pages/node/7284191"},{"id":"IBM:7284192","date":"2026-08-18","title":"Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-14974, CVE-2026-14515)","source_url":"https://www.ibm.com/support/pages/node/7284192"},{"id":"IBM:7284193","date":"2026-08-18","title":"Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty shipped with IBM WebSphere Remote Server","source_url":"https://www.ibm.com/support/pages/node/7284193"},{"id":"IBM:7284194","date":"2026-08-18","title":"Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-14512, CVE-2026-14528)","source_url":"https://www.ibm.com/support/pages/node/7284194"},{"id":"IBM:7284195","date":"2026-08-18","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by a privilege escalation (CVE-2026-14446)","source_url":"https://www.ibm.com/support/pages/node/7284195"},{"id":"IBM:7284196","date":"2026-08-18","title":"Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM WebSphere Remote Server, are affected by a server-side request forgery (CVE-2026-14529)","source_url":"https://www.ibm.com/support/pages/node/7284196"},{"id":"IBM:7284197","date":"2026-08-18","title":"Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 and IBM Db2 federated server shipped with IBM WebSphere Remote Server","source_url":"https://www.ibm.com/support/pages/node/7284197"},{"id":"RHSA-2026:56131","date":"2026-08-18","title":"pam security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56131"},{"id":"RHSA-2026:56133","date":"2026-08-18","title":"attr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:56133"},{"id":"USN-8629-3","date":"2026-08-18","title":"USN-8629-3: Linux kernel (HWE) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8629-3"},{"id":"USN-8630-3","date":"2026-08-18","title":"USN-8630-3: Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8630-3"},{"id":"USN-8636-2","date":"2026-08-18","title":"USN-8636-2: Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8636-2"},{"id":"USN-8642-1","date":"2026-08-18","title":"USN-8642-1: c3p0 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8642-1"},{"id":"USN-8643-1","date":"2026-08-18","title":"USN-8643-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8643-1"},{"id":"USN-8644-1","date":"2026-08-18","title":"USN-8644-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8644-1"},{"id":"USN-8645-1","date":"2026-08-18","title":"USN-8645-1: Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8645-1"},{"id":"USN-8646-1","date":"2026-08-18","title":"USN-8646-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8646-1"},{"id":"BSI:WID-SEC-2026-2746","date":"2026-08-17","title":"SAP Patch Day August 2026: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2746"},{"id":"BSI:WID-SEC-2026-2865","date":"2026-08-17","title":"vm2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2865"},{"id":"IBM:7283799","date":"2026-08-17","title":"Security Bulletin: IBM Storage Defender - Data Protect critical vulnerabilities resolved in Release Defender 2.2.1/Data Protect 7.4.1","source_url":"https://www.ibm.com/support/pages/node/7283799"},{"id":"IBM:7283994","date":"2026-08-17","title":"Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image","source_url":"https://www.ibm.com/support/pages/node/7283994"},{"id":"RHSA-2026:55810","date":"2026-08-17","title":"Multicluster Global Hub 1.4.8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55810"},{"id":"BSI:WID-SEC-2023-1793","date":"2026-08-17","title":"Oracle PeopleSoft: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1793"},{"id":"BSI:WID-SEC-2026-2863","date":"2026-08-17","title":"Gitea: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2863"},{"id":"GHSA-2JP7-WWPG-3P9W","date":"2026-08-17","title":"Etherpad has stored XSS in HTML export via unescaped attribute-pool values","source_url":"https://github.com/advisories/GHSA-2jp7-wwpg-3p9w"},{"id":"GHSA-2QJ4-MMR9-4V2F","date":"2026-08-17","title":"Netty: Memory Exhaustion in SctpMessageCompletionHandler","source_url":"https://github.com/advisories/GHSA-2qj4-mmr9-4v2f"},{"id":"GHSA-FHGH-WQ4Q-R37X","date":"2026-08-17","title":"uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set","source_url":"https://github.com/advisories/GHSA-fhgh-wq4q-r37x"},{"id":"GHSA-PRG7-HCFM-MFCR","date":"2026-08-17","title":"sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)","source_url":"https://github.com/advisories/GHSA-prg7-hcfm-mfcr"},{"id":"GHSA-PWGV-4X5Q-6M9F","date":"2026-08-17","title":"sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger","source_url":"https://github.com/advisories/GHSA-pwgv-4x5q-6m9f"},{"id":"IBM:7283946","date":"2026-08-17","title":"Security Bulletin: Multiple vulnerabilities in third-party Netty libraries affect the IBM Informix Wire Listener.","source_url":"https://www.ibm.com/support/pages/node/7283946"},{"id":"IBM:7283956","date":"2026-08-17","title":"Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager","source_url":"https://www.ibm.com/support/pages/node/7283956"},{"id":"IBM:7283960","date":"2026-08-17","title":"Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to open62541 (CVE-2026-63035, CVE-2026-63362, CVE-2026-63559, CVE-2026-65423 & CVE-2026-15690)","source_url":"https://www.ibm.com/support/pages/node/7283960"},{"id":"IBM:7283961","date":"2026-08-17","title":"Security Bulletin: IBM Operations Analytics - Log Analysis is affected by an Improper Serialization due to Apache Log4j JSON Template Layout","source_url":"https://www.ibm.com/support/pages/node/7283961"},{"id":"IBM:7283980","date":"2026-08-17","title":"Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub","source_url":"https://www.ibm.com/support/pages/node/7283980"},{"id":"IBM:7284067","date":"2026-08-17","title":"Security Bulletin: Packer vulnerable to arbitrary file write via crafted plugin archive during installation","source_url":"https://www.ibm.com/support/pages/node/7284067"},{"id":"RHSA-2026:55421","date":"2026-08-17","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55421"},{"id":"RHSA-2026:55422","date":"2026-08-17","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55422"},{"id":"RHSA-2026:55425","date":"2026-08-17","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55425"},{"id":"RHSA-2026:55426","date":"2026-08-17","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55426"},{"id":"RHSA-2026:55530","date":"2026-08-17","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55530"},{"id":"RHSA-2026:55532","date":"2026-08-17","title":"redhat-ds:11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55532"},{"id":"RHSA-2026:55541","date":"2026-08-17","title":"nodejs22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55541"},{"id":"RHSA-2026:55560","date":"2026-08-17","title":"pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55560"},{"id":"RHSA-2026:55601","date":"2026-08-17","title":"nodejs:22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55601"},{"id":"RHSA-2026:55603","date":"2026-08-17","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55603"},{"id":"RHSA-2026:55618","date":"2026-08-17","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55618"},{"id":"RHSA-2026:55679","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55679"},{"id":"RHSA-2026:55756","date":"2026-08-17","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55756"},{"id":"RHSA-2026:55757","date":"2026-08-17","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55757"},{"id":"RHSA-2026:55758","date":"2026-08-17","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55758"},{"id":"RHSA-2026:55761","date":"2026-08-17","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55761"},{"id":"RHSA-2026:55763","date":"2026-08-17","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55763"},{"id":"RHSA-2026:55764","date":"2026-08-17","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:55764"},{"id":"RHSA-2026:55765","date":"2026-08-17","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:55765"},{"id":"RHSA-2026:55772","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55772"},{"id":"RHSA-2026:55794","date":"2026-08-17","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55794"},{"id":"RHSA-2026:55801","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55801"},{"id":"RHSA-2026:55803","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55803"},{"id":"RHSA-2026:55837","date":"2026-08-17","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55837"},{"id":"RHSA-2026:55841","date":"2026-08-17","title":"unbound security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55841"},{"id":"RHSA-2026:55855","date":"2026-08-17","title":"libssh security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55855"},{"id":"RHSA-2026:55858","date":"2026-08-17","title":".NET 10.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:55858"},{"id":"RHSA-2026:55861","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55861"},{"id":"RHSA-2026:55862","date":"2026-08-17","title":"haproxy security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55862"},{"id":"RHSA-2026:55865","date":"2026-08-17","title":"gstreamer1-plugins-bad-free and gstreamer1-plugins-ugly-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55865"},{"id":"RHSA-2026:55892","date":"2026-08-17","title":"unbound security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55892"},{"id":"BSI:WID-SEC-2026-2806","date":"2026-08-17","title":"Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2806"},{"id":"BSI:WID-SEC-2026-2848","date":"2026-08-17","title":"Apache Struts: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2848"},{"id":"BSI:WID-SEC-2026-2861","date":"2026-08-17","title":"Budibase: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2861"},{"id":"BSI:WID-SEC-2026-2862","date":"2026-08-17","title":"Red Hat Undertow: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2862"},{"id":"BSI:WID-SEC-2026-2864","date":"2026-08-17","title":"OpenTofu: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2864"},{"id":"BSI:WID-SEC-2026-2867","date":"2026-08-17","title":"RealObjects PDFreactor: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2867"},{"id":"GHSA-8C42-7QJ2-3J46","date":"2026-08-17","title":"Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite","source_url":"https://github.com/advisories/GHSA-8c42-7qj2-3j46"},{"id":"GHSA-92HR-GMR6-H8CP","date":"2026-08-17","title":"Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling","source_url":"https://github.com/advisories/GHSA-92hr-gmr6-h8cp"},{"id":"GHSA-M6JG-WR9M-CG2F","date":"2026-08-17","title":"uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability","source_url":"https://github.com/advisories/GHSA-m6jg-wr9m-cg2f"},{"id":"IBM:7283748","date":"2026-08-17","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling","source_url":"https://www.ibm.com/support/pages/node/7283748"},{"id":"IBM:7283925","date":"2026-08-17","title":"Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - July 2026 CPU affects IBM OpenPages","source_url":"https://www.ibm.com/support/pages/node/7283925"},{"id":"IBM:7283938","date":"2026-08-17","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling (CVE-2026-11541)","source_url":"https://www.ibm.com/support/pages/node/7283938"},{"id":"IBM:7283939","date":"2026-08-17","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283939"},{"id":"IBM:7283940","date":"2026-08-17","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server and is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)","source_url":"https://www.ibm.com/support/pages/node/7283940"},{"id":"IBM:7284068","date":"2026-08-17","title":"Security Bulletin: IBM i is Affected By Denial of Service in Host Servers [CVE-2026-17015]","source_url":"https://www.ibm.com/support/pages/node/7284068"},{"id":"RHSA-2026:55520","date":"2026-08-17","title":"butane security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55520"},{"id":"RHSA-2026:55525","date":"2026-08-17","title":"butane security update","source_url":"https://access.redhat.com/errata/RHSA-2026:55525"},{"id":"USN-8629-2","date":"2026-08-17","title":"USN-8629-2: Linux kernel (AWS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8629-2"},{"id":"USN-8631-4","date":"2026-08-17","title":"USN-8631-4: Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8631-4"},{"id":"USN-8639-1","date":"2026-08-17","title":"USN-8639-1: libpng vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8639-1"},{"id":"USN-8640-1","date":"2026-08-17","title":"USN-8640-1: Engrampa vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8640-1"},{"id":"RHSA-2026:55405","date":"2026-08-16","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55405"},{"id":"IBM:7283858","date":"2026-08-15","title":"Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS","source_url":"https://www.ibm.com/support/pages/node/7283858"},{"id":"IBM:7283893","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16687","source_url":"https://www.ibm.com/support/pages/node/7283893"},{"id":"IBM:7283894","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16835","source_url":"https://www.ibm.com/support/pages/node/7283894"},{"id":"NCSC-2026-0302","date":"2026-08-15","title":"NCSC-2026-0302 Kwetsbaarheden verholpen in SAP Commerce Cloud Data Hub Adapter","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0302"},{"id":"IBM:7283216","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16933","source_url":"https://www.ibm.com/support/pages/node/7283216"},{"id":"IBM:7283217","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16930","source_url":"https://www.ibm.com/support/pages/node/7283217"},{"id":"IBM:7283218","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17429","source_url":"https://www.ibm.com/support/pages/node/7283218"},{"id":"IBM:7283219","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17063","source_url":"https://www.ibm.com/support/pages/node/7283219"},{"id":"IBM:7283220","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17494","source_url":"https://www.ibm.com/support/pages/node/7283220"},{"id":"IBM:7283221","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-19234","source_url":"https://www.ibm.com/support/pages/node/7283221"},{"id":"IBM:7283229","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17091","source_url":"https://www.ibm.com/support/pages/node/7283229"},{"id":"IBM:7283231","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17097","source_url":"https://www.ibm.com/support/pages/node/7283231"},{"id":"IBM:7283232","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-18821","source_url":"https://www.ibm.com/support/pages/node/7283232"},{"id":"IBM:7283234","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17414","source_url":"https://www.ibm.com/support/pages/node/7283234"},{"id":"IBM:7283235","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16707","source_url":"https://www.ibm.com/support/pages/node/7283235"},{"id":"IBM:7283236","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17100","source_url":"https://www.ibm.com/support/pages/node/7283236"},{"id":"IBM:7283237","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16661","source_url":"https://www.ibm.com/support/pages/node/7283237"},{"id":"IBM:7283238","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-18871","source_url":"https://www.ibm.com/support/pages/node/7283238"},{"id":"IBM:7283239","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17093","source_url":"https://www.ibm.com/support/pages/node/7283239"},{"id":"IBM:7283240","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17042","source_url":"https://www.ibm.com/support/pages/node/7283240"},{"id":"IBM:7283891","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-45447","source_url":"https://www.ibm.com/support/pages/node/7283891"},{"id":"IBM:7283892","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194","source_url":"https://www.ibm.com/support/pages/node/7283892"},{"id":"IBM:7283895","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16832","source_url":"https://www.ibm.com/support/pages/node/7283895"},{"id":"IBM:7283897","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-18848","source_url":"https://www.ibm.com/support/pages/node/7283897"},{"id":"IBM:7283898","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16828","source_url":"https://www.ibm.com/support/pages/node/7283898"},{"id":"IBM:7283189","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16724","source_url":"https://www.ibm.com/support/pages/node/7283189"},{"id":"IBM:7283222","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-19321","source_url":"https://www.ibm.com/support/pages/node/7283222"},{"id":"IBM:7283228","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-15961","source_url":"https://www.ibm.com/support/pages/node/7283228"},{"id":"IBM:7283233","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-17028","source_url":"https://www.ibm.com/support/pages/node/7283233"},{"id":"IBM:7283890","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-4936","source_url":"https://www.ibm.com/support/pages/node/7283890"},{"id":"IBM:7283896","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-16938","source_url":"https://www.ibm.com/support/pages/node/7283896"},{"id":"IBM:7283899","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-18681","source_url":"https://www.ibm.com/support/pages/node/7283899"},{"id":"IBM:7283900","date":"2026-08-15","title":"Security Bulletin: This Power System update is being released to address CVE-2026-4937","source_url":"https://www.ibm.com/support/pages/node/7283900"},{"id":"RHSA-2026:55142","date":"2026-08-15","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:55142"},{"id":"RHSA-2026:55180","date":"2026-08-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:55180"},{"id":"IBM:7283821","date":"2026-08-14","title":"Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283821"},{"id":"IBM:7283864","date":"2026-08-14","title":"Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-10051, CVE-2026-6790, CVE-2026-8384, CVE-2026-10050, CVE-2026-59879, CVE-2026-59880)","source_url":"https://www.ibm.com/support/pages/node/7283864"},{"id":"NCSC-2026-0301","date":"2026-08-14","title":"NCSC-2026-0301 Kwetsbaarheden verholpen in IBM i operating system door IBM","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0301"},{"id":"BSI:WID-SEC-2025-0453","date":"2026-08-14","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0453"},{"id":"BSI:WID-SEC-2025-0683","date":"2026-08-14","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0683"},{"id":"BSI:WID-SEC-2025-2436","date":"2026-08-14","title":"Xwayland und X.Org X11: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2436"},{"id":"BSI:WID-SEC-2026-1735","date":"2026-08-14","title":"Synacor Zimbra: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1735"},{"id":"BSI:WID-SEC-2026-2429","date":"2026-08-14","title":"Synacor Zimbra: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2429"},{"id":"BSI:WID-SEC-2026-2790","date":"2026-08-14","title":"Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2790"},{"id":"BSI:WID-SEC-2026-2841","date":"2026-08-14","title":"Elasticsearch: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2841"},{"id":"BSI:WID-SEC-2026-2842","date":"2026-08-14","title":"vllm: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2842"},{"id":"BSI:WID-SEC-2026-2845","date":"2026-08-14","title":"BigBlueButton: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2845"},{"id":"BSI:WID-SEC-2026-2849","date":"2026-08-14","title":"Budibase: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2849"},{"id":"GHSA-29RF-F4VV-PVQ6","date":"2026-08-14","title":"Authorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts","source_url":"https://github.com/advisories/GHSA-29rf-f4vv-pvq6"},{"id":"GHSA-2J9V-P4XJ-CJW2","date":"2026-08-14","title":"Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket","source_url":"https://github.com/advisories/GHSA-2j9v-p4xj-cjw2"},{"id":"GHSA-49MQ-FC6Q-3H46","date":"2026-08-14","title":"Token Optimizer MCP: OS command injection in smart_user via username in get-user-info","source_url":"https://github.com/advisories/GHSA-49mq-fc6q-3h46"},{"id":"GHSA-4X9G-VW65-VVF9","date":"2026-08-14","title":"Grav: Unauthenticated denial of service via unbounded image derivative dimensions","source_url":"https://github.com/advisories/GHSA-4x9g-vw65-vvf9"},{"id":"GHSA-5FPJ-28RV-84R7","date":"2026-08-14","title":"Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist","source_url":"https://github.com/advisories/GHSA-5fpj-28rv-84r7"},{"id":"GHSA-FPMH-VX4H-XC33","date":"2026-08-14","title":"OpenAM Insecure SSO Cookie Initialization","source_url":"https://github.com/advisories/GHSA-fpmh-vx4h-xc33"},{"id":"GHSA-H84G-69H7-MW6V","date":"2026-08-14","title":"mchange-commons-java contains elements susceptible to abuse via JNDI injection and \"deserialization gadgets\"","source_url":"https://github.com/advisories/GHSA-h84g-69h7-mw6v"},{"id":"IBM:7283793","date":"2026-08-14","title":"Security Bulletin: Multiple Vulnerabilities in IBM Bob","source_url":"https://www.ibm.com/support/pages/node/7283793"},{"id":"IBM:7283810","date":"2026-08-14","title":"Security Bulletin: Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow","source_url":"https://www.ibm.com/support/pages/node/7283810"},{"id":"IBM:7283824","date":"2026-08-14","title":"Security Bulletin: The Log Source Management App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283824"},{"id":"RHSA-2026:51031","date":"2026-08-14","title":"OpenShift Virtualization v4.22 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:51031"},{"id":"RHSA-2026:53655","date":"2026-08-14","title":"OpenShift Virtualization v4.13 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53655"},{"id":"RHSA-2026:53671","date":"2026-08-14","title":"OpenShift Virtualization v4.14 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53671"},{"id":"RHSA-2026:53684","date":"2026-08-14","title":"OpenShift Virtualization v4.17 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53684"},{"id":"RHSA-2026:53721","date":"2026-08-14","title":"OpenShift Virtualization v4.16 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53721"},{"id":"RHSA-2026:53728","date":"2026-08-14","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53728"},{"id":"RHSA-2026:53763","date":"2026-08-14","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53763"},{"id":"RHSA-2026:53838","date":"2026-08-14","title":"OpenShift Virtualization v4.18 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53838"},{"id":"BSI:WID-SEC-2024-1418","date":"2026-08-14","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1418"},{"id":"BSI:WID-SEC-2025-0435","date":"2026-08-14","title":"X.Org X11: Mehrere Schwachstellen ermöglichen nicht näher spezifizierte Auswirkungen, möglicherweise Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0435"},{"id":"BSI:WID-SEC-2025-1352","date":"2026-08-14","title":"X.Org X11 und Xwayland: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1352"},{"id":"BSI:WID-SEC-2026-1119","date":"2026-08-14","title":"X.Org X11, Xwayland: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1119"},{"id":"BSI:WID-SEC-2026-1571","date":"2026-08-14","title":"Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1571"},{"id":"BSI:WID-SEC-2026-1626","date":"2026-08-14","title":"Internet Systems Consortium BIND: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1626"},{"id":"BSI:WID-SEC-2026-1771","date":"2026-08-14","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1771"},{"id":"BSI:WID-SEC-2026-1774","date":"2026-08-14","title":"X.Org X11 und Xwayland: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1774"},{"id":"BSI:WID-SEC-2026-2110","date":"2026-08-14","title":"nghttp2: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2110"},{"id":"BSI:WID-SEC-2026-2511","date":"2026-08-14","title":"Netty: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2511"},{"id":"BSI:WID-SEC-2026-2847","date":"2026-08-14","title":"Perl: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2847"},{"id":"BSI:WID-SEC-2026-2851","date":"2026-08-14","title":"PJSIP: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2851"},{"id":"GHSA-76PC-MQXP-3RQ5","date":"2026-08-14","title":"Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints","source_url":"https://github.com/advisories/GHSA-76pc-mqxp-3rq5"},{"id":"GHSA-8RW6-P7M8-63JP","date":"2026-08-14","title":"SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users","source_url":"https://github.com/advisories/GHSA-8rw6-p7m8-63jp"},{"id":"GHSA-9HGC-G3W5-67CM","date":"2026-08-14","title":"ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)","source_url":"https://github.com/advisories/GHSA-9hgc-g3w5-67cm"},{"id":"GHSA-9Q54-F358-3FQF","date":"2026-08-14","title":"s2n-quic has excessive memory allocation","source_url":"https://github.com/advisories/GHSA-9q54-f358-3fqf"},{"id":"GHSA-XGHW-P77P-3R7X","date":"2026-08-14","title":"Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter","source_url":"https://github.com/advisories/GHSA-xghw-p77p-3r7x"},{"id":"IBM:7283742","date":"2026-08-14","title":"IBM Transformation Extender Advanced is affected by IBM WebSphere Application Server Liberty vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283742"},{"id":"IBM:7283746","date":"2026-08-14","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)","source_url":"https://www.ibm.com/support/pages/node/7283746"},{"id":"IBM:7283747","date":"2026-08-14","title":"Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability (CVE-2026-11806)","source_url":"https://www.ibm.com/support/pages/node/7283747"},{"id":"IBM:7283750","date":"2026-08-14","title":"Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)","source_url":"https://www.ibm.com/support/pages/node/7283750"},{"id":"IBM:7283751","date":"2026-08-14","title":"Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283751"},{"id":"IBM:7283820","date":"2026-08-14","title":"Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283820"},{"id":"BSI:WID-SEC-2026-2846","date":"2026-08-14","title":"Podman: Schwachstelle ermöglicht nicht spezifizierten Angriff und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2846"},{"id":"RHSA-2026:54835","date":"2026-08-14","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54835"},{"id":"RHSA-2026:54836","date":"2026-08-14","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54836"},{"id":"RHSA-2026:54869","date":"2026-08-14","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54869"},{"id":"IBM:7283484","date":"2026-08-13","title":"Security Bulletin: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution","source_url":"https://www.ibm.com/support/pages/node/7283484"},{"id":"IBM:7283566","date":"2026-08-13","title":"Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition shipped with IBM Tivoli Monitoring.","source_url":"https://www.ibm.com/support/pages/node/7283566"},{"id":"IBM:7283593","date":"2026-08-13","title":"Security Bulletin:Incorrect Authorization Vulnerability: Unauthenticated Access to CGI Scripts Protected by Directory Rules via script_alias in Erlang OTP (inets modules)","source_url":"https://www.ibm.com/support/pages/node/7283593"},{"id":"IBM:7283607","date":"2026-08-13","title":"Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition","source_url":"https://www.ibm.com/support/pages/node/7283607"},{"id":"IBM:7283631","date":"2026-08-13","title":"Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.","source_url":"https://www.ibm.com/support/pages/node/7283631"},{"id":"IBM:7283637","date":"2026-08-13","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher","source_url":"https://www.ibm.com/support/pages/node/7283637"},{"id":"IBM:7283638","date":"2026-08-13","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.9 or higher and 6.0.1.1 or higher","source_url":"https://www.ibm.com/support/pages/node/7283638"},{"id":"IBM:7283728","date":"2026-08-13","title":"Security Bulletin: Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath","source_url":"https://www.ibm.com/support/pages/node/7283728"},{"id":"NCSC-2026-0300","date":"2026-08-13","title":"NCSC-2026-0300 Kwetsbaarheden verholpen in Fortinet FortiWeb","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0300"},{"id":"RHSA-2026:54577","date":"2026-08-13","title":"Multicluster Global Hub 1.5.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54577"},{"id":"BSI:WID-SEC-2026-1136","date":"2026-08-13","title":"Red Hat OpenShift Container Platform (gRPC-Go): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1136"},{"id":"BSI:WID-SEC-2026-2592","date":"2026-08-13","title":"Red Hat Enterprise Linux (Pillow): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2592"},{"id":"BSI:WID-SEC-2026-2687","date":"2026-08-13","title":"Apple macOS (Sonoma, Sequoia und Tahoe): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2687"},{"id":"BSI:WID-SEC-2026-2801","date":"2026-08-13","title":"IBM InfoSphere Information Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2801"},{"id":"BSI:WID-SEC-2026-2804","date":"2026-08-13","title":"Palo Alto Networks GlobalProtect App: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2804"},{"id":"BSI:WID-SEC-2026-2824","date":"2026-08-13","title":"Kibana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2824"},{"id":"BSI:WID-SEC-2026-2828","date":"2026-08-13","title":"Langflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2828"},{"id":"BSI:WID-SEC-2026-2830","date":"2026-08-13","title":"Absolute Secure Access: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2830"},{"id":"CISCO-SA-CLAMAV-WUUVVD26","date":"2026-08-13","title":"ClamAV Vulnerabilities Affecting Cisco Products: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=ClamAV%20Vulnerabilities%20Affecting%20Cisco%20Products:%20August%202026%26vs_k=1"},{"id":"GHSA-2MHJ-FHVG-V428","date":"2026-08-13","title":"Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name","source_url":"https://github.com/advisories/GHSA-2mhj-fhvg-v428"},{"id":"GHSA-48P8-G2FX-3WWM","date":"2026-08-13","title":"Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)","source_url":"https://github.com/advisories/GHSA-48p8-g2fx-3wwm"},{"id":"GHSA-CXGV-HP74-JJ7R","date":"2026-08-13","title":"Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)","source_url":"https://github.com/advisories/GHSA-cxgv-hp74-jj7r"},{"id":"GHSA-M42H-3232-VPV3","date":"2026-08-13","title":"nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences","source_url":"https://github.com/advisories/GHSA-m42h-3232-vpv3"},{"id":"GHSA-P28V-F755-9QRG","date":"2026-08-13","title":"Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS","source_url":"https://github.com/advisories/GHSA-p28v-f755-9qrg"},{"id":"GHSA-RM43-82J9-R4MJ","date":"2026-08-13","title":"atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read","source_url":"https://github.com/advisories/GHSA-rm43-82j9-r4mj"},{"id":"IBM:7283596","date":"2026-08-13","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7283596"},{"id":"IBM:7283597","date":"2026-08-13","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7283597"},{"id":"IBM:7283601","date":"2026-08-13","title":"Security Bulletin: Security vulnerability has been found in IBM Verify Identity Access Digital Credentials (CVE-2026-16221)","source_url":"https://www.ibm.com/support/pages/node/7283601"},{"id":"IBM:7283616","date":"2026-08-13","title":"Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache Kerby","source_url":"https://www.ibm.com/support/pages/node/7283616"},{"id":"IBM:7283663","date":"2026-08-13","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283663"},{"id":"NCSC-2026-0297","date":"2026-08-13","title":"NCSC-2026-0297 Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0297"},{"id":"NCSC-2026-0298","date":"2026-08-13","title":"NCSC-2026-0298 Kwetsbaarheden verholpen in Autodesk AutoCAD","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0298"},{"id":"NCSC-2026-0299","date":"2026-08-13","title":"NCSC-2026-0299 Kwetsbaarheid verholpen in Fortinet FortiManager","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0299"},{"id":"RHSA-2026:51653","date":"2026-08-13","title":"Red Hat build of Quarkus 3.33.3 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51653"},{"id":"RHSA-2026:53643","date":"2026-08-13","title":"Red Hat build of Quarkus 3.27.5 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53643"},{"id":"RHSA-2026:54482","date":"2026-08-13","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54482"},{"id":"RHSA-2026:54485","date":"2026-08-13","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54485"},{"id":"RHSA-2026:54486","date":"2026-08-13","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54486"},{"id":"RHSA-2026:54487","date":"2026-08-13","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54487"},{"id":"RHSA-2026:54500","date":"2026-08-13","title":"OpenShift Compliance Operator bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54500"},{"id":"RHSA-2026:54509","date":"2026-08-13","title":"bind9.16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54509"},{"id":"RHSA-2026:54510","date":"2026-08-13","title":"bind security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54510"},{"id":"RHSA-2026:54515","date":"2026-08-13","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54515"},{"id":"RHSA-2026:54525","date":"2026-08-13","title":"external secrets operator for Red Hat OpenShift 1.1.1","source_url":"https://access.redhat.com/errata/RHSA-2026:54525"},{"id":"RHSA-2026:54527","date":"2026-08-13","title":"cert-manager Operator for Red Hat OpenShift 1.19.1","source_url":"https://access.redhat.com/errata/RHSA-2026:54527"},{"id":"RHSA-2026:54528","date":"2026-08-13","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54528"},{"id":"RHSA-2026:54531","date":"2026-08-13","title":"cert-manager Operator for Red Hat OpenShift 1.19.1","source_url":"https://access.redhat.com/errata/RHSA-2026:54531"},{"id":"RHSA-2026:54532","date":"2026-08-13","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54532"},{"id":"RHSA-2026:54538","date":"2026-08-13","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54538"},{"id":"RHSA-2026:54539","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54539"},{"id":"RHSA-2026:54540","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54540"},{"id":"RHSA-2026:54541","date":"2026-08-13","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54541"},{"id":"RHSA-2026:54542","date":"2026-08-13","title":".NET 10.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54542"},{"id":"RHSA-2026:54550","date":"2026-08-13","title":".NET 9.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54550"},{"id":"RHSA-2026:54571","date":"2026-08-13","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54571"},{"id":"RHSA-2026:54572","date":"2026-08-13","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54572"},{"id":"RHSA-2026:54574","date":"2026-08-13","title":".NET 8.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54574"},{"id":"RHSA-2026:54575","date":"2026-08-13","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54575"},{"id":"RHSA-2026:54576","date":"2026-08-13","title":"dracut security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54576"},{"id":"RHSA-2026:54590","date":"2026-08-13","title":".NET 9.0 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54590"},{"id":"RHSA-2026:54605","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54605"},{"id":"RHSA-2026:54622","date":"2026-08-13","title":"Red Hat Build of Apache Camel 4.18.3 for Spring Boot release. Type/Severity Security Advisory: Important Topic Red Hat build of Apache Camel 4.18.3 for Spring Boot patch release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54622"},{"id":"RHSA-2026:54624","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54624"},{"id":"RHSA-2026:54634","date":"2026-08-13","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54634"},{"id":"RHSA-2026:54637","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54637"},{"id":"RHSA-2026:54638","date":"2026-08-13","title":"compat-libtiff3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54638"},{"id":"RHSA-2026:54640","date":"2026-08-13","title":"compat-libtiff3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54640"},{"id":"RHSA-2026:54642","date":"2026-08-13","title":"compat-libtiff3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54642"},{"id":"RHSA-2026:54654","date":"2026-08-13","title":"bind security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54654"},{"id":"RHSA-2026:54658","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54658"},{"id":"RHSA-2026:54659","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54659"},{"id":"RHSA-2026:54660","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54660"},{"id":"RHSA-2026:54664","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54664"},{"id":"RHSA-2026:54665","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54665"},{"id":"RHSA-2026:54666","date":"2026-08-13","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54666"},{"id":"RHSA-2026:54667","date":"2026-08-13","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54667"},{"id":"RHSA-2026:54752","date":"2026-08-13","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54752"},{"id":"RHSA-2026:54757","date":"2026-08-13","title":"Red Hat OpenStack Platform 16.2 security advisory","source_url":"https://access.redhat.com/errata/RHSA-2026:54757"},{"id":"RHSA-2026:54760","date":"2026-08-13","title":"A Subscription Management tool for finding and reporting Red Hat product usage","source_url":"https://access.redhat.com/errata/RHSA-2026:54760"},{"id":"RHSA-2026:54773","date":"2026-08-13","title":"Red Hat build of OpenTelemetry 3.10.2 release","source_url":"https://access.redhat.com/errata/RHSA-2026:54773"},{"id":"RHSA-2026:54776","date":"2026-08-13","title":"Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.GA)","source_url":"https://access.redhat.com/errata/RHSA-2026:54776"},{"id":"BSI:WID-SEC-2026-2520","date":"2026-08-13","title":"Red Hat Enterprise Linux (go-billy): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2520"},{"id":"BSI:WID-SEC-2026-2823","date":"2026-08-13","title":"Apache Airflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2823"},{"id":"BSI:WID-SEC-2026-2825","date":"2026-08-13","title":"etcd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2825"},{"id":"BSI:WID-SEC-2026-2826","date":"2026-08-13","title":"Drupal Module: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2826"},{"id":"BSI:WID-SEC-2026-2827","date":"2026-08-13","title":"Foxit PDF Reader: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2827"},{"id":"BSI:WID-SEC-2026-2829","date":"2026-08-13","title":"Red Hat Enterprise Linux (gnome-remote-desktop): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2829"},{"id":"ICSA-26-225-01","date":"2026-08-13","title":"AVEVA Enterprise SCADA","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01"},{"id":"ICSA-26-225-02","date":"2026-08-13","title":"Haiwell IoT Cloud HMI Gateway","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02"},{"id":"ICSA-26-225-03","date":"2026-08-13","title":"Johnson Controls Inc. Airwall","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03"},{"id":"ICSA-26-225-04","date":"2026-08-13","title":"Hitachi Energy APM Edge Product","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-04"},{"id":"ICSA-26-225-05","date":"2026-08-13","title":"ANDRITZ HIPASE-250 and 250 SCALA","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05"},{"id":"ICSA-26-225-07","date":"2026-08-13","title":"Siemens License Server (SLS)","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07"},{"id":"ICSA-26-225-08","date":"2026-08-13","title":"Siemens Desigo DXR and PXC Controllers","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-08"},{"id":"ICSA-26-225-09","date":"2026-08-13","title":"Siemens Siveillance Video","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-09"},{"id":"ICSA-26-225-10","date":"2026-08-13","title":"Siemens Parasolid","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10"},{"id":"ICSA-26-225-11","date":"2026-08-13","title":"Siemens Simcenter Femap","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-11"},{"id":"ICSA-26-225-12","date":"2026-08-13","title":"Siemens Solid Edge","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-12"},{"id":"ICSA-26-225-13","date":"2026-08-13","title":"Siemens LOGO! Soft Comfort","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-13"},{"id":"ICSA-26-225-14","date":"2026-08-13","title":"Johnson Controls Metasys","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-14"},{"id":"GHSA-2JWF-F4XQ-F24H","date":"2026-08-13","title":"ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite","source_url":"https://github.com/advisories/GHSA-2jwf-f4xq-f24h"},{"id":"GHSA-5PQ8-3FFP-7W5M","date":"2026-08-13","title":"hashi-vault-js: Vault token and secret values exposed in thrown errors","source_url":"https://github.com/advisories/GHSA-5pq8-3ffp-7w5m"},{"id":"GHSA-87X5-VMC3-756J","date":"2026-08-13","title":"vLLM: Completion prompt lists fan out into unbounded engine requests","source_url":"https://github.com/advisories/GHSA-87x5-vmc3-756j"},{"id":"GHSA-FJGC-3MJ7-8RG8","date":"2026-08-13","title":"ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header","source_url":"https://github.com/advisories/GHSA-fjgc-3mj7-8rg8"},{"id":"GHSA-H7P7-W5GC-XJ3W","date":"2026-08-13","title":"Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials","source_url":"https://github.com/advisories/GHSA-h7p7-w5gc-xj3w"},{"id":"GHSA-VQFP-P66C-XRP9","date":"2026-08-13","title":"ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token","source_url":"https://github.com/advisories/GHSA-vqfp-p66c-xrp9"},{"id":"IBM:7282638","date":"2026-08-13","title":"Multiple vulnerabilities within WebSphere Application Server and WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.","source_url":"https://www.ibm.com/support/pages/node/7282638"},{"id":"IBM:7283598","date":"2026-08-13","title":"Vulnerability in netty affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283598"},{"id":"IBM:7283600","date":"2026-08-13","title":"Multiple vulnerabilities in IBM DevOps Solution Workbench","source_url":"https://www.ibm.com/support/pages/node/7283600"},{"id":"IBM:7283605","date":"2026-08-13","title":"Vulnerability in fast-uri affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283605"},{"id":"IBM:7283610","date":"2026-08-13","title":"Security Bulletin:Vulnerability in decode-uri affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283610"},{"id":"IBM:7283614","date":"2026-08-13","title":"IBM Engineering Systems Design Rhapsody was affected by Vulnerability in Jackson-core library","source_url":"https://www.ibm.com/support/pages/node/7283614"},{"id":"IBM:7283615","date":"2026-08-13","title":"IBM Quantum Safe Explorer is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283615"},{"id":"NCSC-2026-0296","date":"2026-08-13","title":"NCSC-2026-0296","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0296"},{"id":"RHSA-2026:54481","date":"2026-08-13","title":"python-idna security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54481"},{"id":"RHSA-2026:54484","date":"2026-08-13","title":"python-idna security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54484"},{"id":"RHSA-2026:54512","date":"2026-08-13","title":"gnome-remote-desktop security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54512"},{"id":"RHSA-2026:54650","date":"2026-08-13","title":"nghttp2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54650"},{"id":"RHSA-2026:54662","date":"2026-08-13","title":"nghttp2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54662"},{"id":"USN-8529-2","date":"2026-08-13","title":"USN-8529-2: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8529-2"},{"id":"USN-8530-2","date":"2026-08-13","title":"USN-8530-2: Linux kernel (HWE) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8530-2"},{"id":"USN-8548-2","date":"2026-08-13","title":"USN-8548-2: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8548-2"},{"id":"USN-8630-2","date":"2026-08-13","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8630-2"},{"id":"USN-8631-2","date":"2026-08-13","title":"USN-8631-2: Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8631-2"},{"id":"USN-8631-3","date":"2026-08-13","title":"USN-8631-3: Linux kernel (NVIDIA Tegra IGX) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8631-3"},{"id":"USN-8633-2","date":"2026-08-13","title":"USN-8633-2: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8633-2"},{"id":"USN-8637-1","date":"2026-08-13","title":"USN-8637-1: Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8637-1"},{"id":"USN-8638-1","date":"2026-08-13","title":"USN-8638-1: Axios vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8638-1"},{"id":"BSI:WID-SEC-2026-2722","date":"2026-08-13","title":"cpio: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2722"},{"id":"RHSA-2026:54508","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54508"},{"id":"RHSA-2026:54517","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54517"},{"id":"RHSA-2026:54518","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54518"},{"id":"RHSA-2026:54520","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54520"},{"id":"RHSA-2026:54534","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54534"},{"id":"RHSA-2026:54549","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54549"},{"id":"RHSA-2026:54554","date":"2026-08-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54554"},{"id":"BSI:WID-SEC-2026-2756","date":"2026-08-12","title":"Microsoft Windows Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2756"},{"id":"IBM:7283480","date":"2026-08-12","title":"Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7283480"},{"id":"NCSC-2026-0287","date":"2026-08-12","title":"NCSC-2026-0287 Kwetsbaarheden verholpen in Microsoft Azure","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287"},{"id":"NCSC-2026-0291","date":"2026-08-12","title":"NCSC-2026-0291 Kwetsbaarheden verholpen in Adobe Campaign Classic","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0291"},{"id":"NCSC-2026-0292","date":"2026-08-12","title":"NCSC-2026-0292 Kwetsbaarheden verholpen in Adobe Commerce","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0292"},{"id":"NCSC-2026-0294","date":"2026-08-12","title":"NCSC-2026-0294 Kwetsbaarheden verholpen in Adobe ColdFusion","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0294"},{"id":"RHSA-2026:50758","date":"2026-08-12","title":"OpenShift Container Platform 4.16.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50758"},{"id":"RHSA-2026:54392","date":"2026-08-12","title":"Multicluster Global Hub 1.6.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54392"},{"id":"BSI:WID-SEC-2026-1354","date":"2026-08-12","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1354"},{"id":"BSI:WID-SEC-2026-1470","date":"2026-08-12","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1470"},{"id":"BSI:WID-SEC-2026-2763","date":"2026-08-12","title":"Zoom Video Communications Workplace und Rooms: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2763"},{"id":"BSI:WID-SEC-2026-2792","date":"2026-08-12","title":"Snipe-IT: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2792"},{"id":"BSI:WID-SEC-2026-2794","date":"2026-08-12","title":"MongoDB: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2794"},{"id":"BSI:WID-SEC-2026-2798","date":"2026-08-12","title":"NGINX-UI: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2798"},{"id":"GHSA-3763-QP59-59VF","date":"2026-08-12","title":"nimiq-blockchain: Validity store off by one error","source_url":"https://github.com/advisories/GHSA-3763-qp59-59vf"},{"id":"GHSA-49M4-VP58-WGC9","date":"2026-08-12","title":"MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`","source_url":"https://github.com/advisories/GHSA-49m4-vp58-wgc9"},{"id":"GHSA-H47F-GMJP-M7RR","date":"2026-08-12","title":"compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0","source_url":"https://github.com/advisories/GHSA-h47f-gmjp-m7rr"},{"id":"GHSA-J5JQ-CR68-V2XX","date":"2026-08-12","title":"Winter: Authenticated backend users can bypass Users controller permission checks","source_url":"https://github.com/advisories/GHSA-j5jq-cr68-v2xx"},{"id":"GHSA-JWJP-4649-V8JP","date":"2026-08-12","title":"SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing","source_url":"https://github.com/advisories/GHSA-jwjp-4649-v8jp"},{"id":"GHSA-PFVM-W89X-94JW","date":"2026-08-12","title":"SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)","source_url":"https://github.com/advisories/GHSA-pfvm-w89x-94jw"},{"id":"GHSA-Q939-RPR3-3284","date":"2026-08-12","title":"SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames","source_url":"https://github.com/advisories/GHSA-q939-rpr3-3284"},{"id":"GHSA-V7CF-8GH9-GXMJ","date":"2026-08-12","title":"Winter: Stored XSS through Brand Settings custom styles","source_url":"https://github.com/advisories/GHSA-v7cf-8gh9-gxmj"},{"id":"GHSA-VGP4-2FC4-QFF2","date":"2026-08-12","title":"Winter: Stored XSS through Editor Settings custom styles","source_url":"https://github.com/advisories/GHSA-vgp4-2fc4-qff2"},{"id":"GHSA-W62W-66V9-VVGV","date":"2026-08-12","title":"SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access","source_url":"https://github.com/advisories/GHSA-w62w-66v9-vvgv"},{"id":"IBM:7277422","date":"2026-08-12","title":"Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82.","source_url":"https://www.ibm.com/support/pages/node/7277422"},{"id":"IBM:7281379","date":"2026-08-12","title":"Security Bulletin: Eclipse parsson security vulnerability in FileNet Content Manager reported for BAI-EVENTS-JAVA-SDK","source_url":"https://www.ibm.com/support/pages/node/7281379"},{"id":"IBM:7282000","date":"2026-08-12","title":"Security Bulletin: Jackson databind security vulnerability in FileNet Content Manager reported for ACCE, GraphQL, External-Share","source_url":"https://www.ibm.com/support/pages/node/7282000"},{"id":"IBM:7282824","date":"2026-08-12","title":"Security Bulletin: linkify-it-5.0.1.tgz security vulnerability in Content Cortex(CCx) reported for GenAI ICN Plugin","source_url":"https://www.ibm.com/support/pages/node/7282824"},{"id":"IBM:7283279","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By A Prvilege Escalation Vulnerability [CVE-2026-18509]","source_url":"https://www.ibm.com/support/pages/node/7283279"},{"id":"IBM:7283283","date":"2026-08-12","title":"Security Bulletin: IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime","source_url":"https://www.ibm.com/support/pages/node/7283283"},{"id":"IBM:7283285","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension","source_url":"https://www.ibm.com/support/pages/node/7283285"},{"id":"IBM:7283286","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7283286"},{"id":"IBM:7283291","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol","source_url":"https://www.ibm.com/support/pages/node/7283291"},{"id":"IBM:7283293","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service","source_url":"https://www.ibm.com/support/pages/node/7283293"},{"id":"IBM:7283380","date":"2026-08-12","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in jackson-core jar (CVE-2026-18401, CVE-2026-68494)","source_url":"https://www.ibm.com/support/pages/node/7283380"},{"id":"IBM:7283387","date":"2026-08-12","title":"Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications","source_url":"https://www.ibm.com/support/pages/node/7283387"},{"id":"IBM:7283448","date":"2026-08-12","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7283448"},{"id":"IBM:7283479","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability [CVE-2026-17498]","source_url":"https://www.ibm.com/support/pages/node/7283479"},{"id":"IBM:7283569","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager","source_url":"https://www.ibm.com/support/pages/node/7283569"},{"id":"IBM:7283578","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Host Servers","source_url":"https://www.ibm.com/support/pages/node/7283578"},{"id":"NCSC-2026-0280","date":"2026-08-12","title":"NCSC-2026-0280 Kwetsbaarheid verholpen in macOS Screen Sharing door Apple","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0280"},{"id":"NCSC-2026-0289","date":"2026-08-12","title":"NCSC-2026-0289 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Exchange server","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0289"},{"id":"NCSC-2026-0293","date":"2026-08-12","title":"NCSC-2026-0293 Kwetsbaarheden verholpen in Zoom","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0293"},{"id":"NCSC-2026-0295","date":"2026-08-12","title":"NCSC-2026-0295 Kwetsbaarheid verholpen in Cisco Secure Firewall ASA en FTD software","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0295"},{"id":"RHSA-2026:50681","date":"2026-08-12","title":"OpenShift Container Platform 4.14.71 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50681"},{"id":"RHSA-2026:51007","date":"2026-08-12","title":"OpenShift Container Platform 4.19.42 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51007"},{"id":"RHSA-2026:51008","date":"2026-08-12","title":"OpenShift Container Platform 4.19.42 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:51008"},{"id":"RHSA-2026:51013","date":"2026-08-12","title":"OpenShift Container Platform 4.18.52 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51013"},{"id":"RHSA-2026:51014","date":"2026-08-12","title":"OpenShift Container Platform 4.18.52 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:51014"},{"id":"RHSA-2026:51422","date":"2026-08-12","title":"Red Hat build of MicroShift 4.19.42 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51422"},{"id":"RHSA-2026:53989","date":"2026-08-12","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53989"},{"id":"RHSA-2026:53990","date":"2026-08-12","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53990"},{"id":"RHSA-2026:54142","date":"2026-08-12","title":"mariadb:10.11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54142"},{"id":"RHSA-2026:54168","date":"2026-08-12","title":"rhc-worker-playbook security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54168"},{"id":"RHSA-2026:54180","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54180"},{"id":"RHSA-2026:54181","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54181"},{"id":"RHSA-2026:54182","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54182"},{"id":"RHSA-2026:54184","date":"2026-08-12","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54184"},{"id":"RHSA-2026:54185","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54185"},{"id":"RHSA-2026:54191","date":"2026-08-12","title":"rhc-worker-script security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54191"},{"id":"RHSA-2026:54244","date":"2026-08-12","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54244"},{"id":"RHSA-2026:54248","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54248"},{"id":"RHSA-2026:54249","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54249"},{"id":"RHSA-2026:54254","date":"2026-08-12","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54254"},{"id":"RHSA-2026:54259","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54259"},{"id":"RHSA-2026:54268","date":"2026-08-12","title":"python3.9 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54268"},{"id":"RHSA-2026:54272","date":"2026-08-12","title":"abrt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54272"},{"id":"RHSA-2026:54274","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability Operator v0.8.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54274"},{"id":"RHSA-2026:54283","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability v5.7.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54283"},{"id":"RHSA-2026:54284","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability Operator v0.13.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54284"},{"id":"RHSA-2026:54285","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability Operator v0.7.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54285"},{"id":"RHSA-2026:54286","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability Operator v0.3.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54286"},{"id":"RHSA-2026:54287","date":"2026-08-12","title":"Red Hat OpenShift Workload Availability Operator v0.12.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54287"},{"id":"RHSA-2026:54288","date":"2026-08-12","title":"OpenShift File Integrity Operator bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54288"},{"id":"RHSA-2026:54339","date":"2026-08-12","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54339"},{"id":"RHSA-2026:54343","date":"2026-08-12","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54343"},{"id":"RHSA-2026:54371","date":"2026-08-12","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54371"},{"id":"RHSA-2026:54377","date":"2026-08-12","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54377"},{"id":"RHSA-2026:54387","date":"2026-08-12","title":"Red Hat Update Infrastructure 5.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54387"},{"id":"RHSA-2026:54391","date":"2026-08-12","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54391"},{"id":"RHSA-2026:54393","date":"2026-08-12","title":"ruby:3.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54393"},{"id":"RHSA-2026:54395","date":"2026-08-12","title":"Red Hat Quay 3.17.4","source_url":"https://access.redhat.com/errata/RHSA-2026:54395"},{"id":"RHSA-2026:54400","date":"2026-08-12","title":"VolSync v0.15 security fixes and container updates","source_url":"https://access.redhat.com/errata/RHSA-2026:54400"},{"id":"RHSA-2026:54401","date":"2026-08-12","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54401"},{"id":"RHSA-2026:54416","date":"2026-08-12","title":"ruby:3.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54416"},{"id":"RHSA-2026:54417","date":"2026-08-12","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54417"},{"id":"RHSA-2026:54427","date":"2026-08-12","title":"Red Hat Advanced Cluster Management for Kubernetes v2.15.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54427"},{"id":"RHSA-2026:54432","date":"2026-08-12","title":"multicluster engine for Kubernetes v2.10.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54432"},{"id":"RHSA-2026:54435","date":"2026-08-12","title":"Streams for Apache Kafka 3.2.1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54435"},{"id":"RHSA-2026:54440","date":"2026-08-12","title":"Red Hat Lightspeed (formerly Insights) for Runtimes security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54440"},{"id":"RHSA-2026:54441","date":"2026-08-12","title":"Red Hat Lightspeed (formerly Insights) for Runtimes security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54441"},{"id":"RHSA-2026:54443","date":"2026-08-12","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54443"},{"id":"BSI:WID-SEC-2026-1250","date":"2026-08-12","title":"FreeRDP: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1250"},{"id":"BSI:WID-SEC-2026-1327","date":"2026-08-12","title":"Red Hat JBoss Enterprise Application Platform (bouncycastle): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1327"},{"id":"BSI:WID-SEC-2026-2693","date":"2026-08-12","title":"Red Hat Enterprise Linux AI (libaom): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2693"},{"id":"BSI:WID-SEC-2026-2740","date":"2026-08-12","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2740"},{"id":"BSI:WID-SEC-2026-2793","date":"2026-08-12","title":"CyberPanel: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2793"},{"id":"BSI:WID-SEC-2026-2795","date":"2026-08-12","title":"AMD Prozessor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2795"},{"id":"BSI:WID-SEC-2026-2796","date":"2026-08-12","title":"Microsoft Edge: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2796"},{"id":"BSI:WID-SEC-2026-2797","date":"2026-08-12","title":"Red Hat Enterprise Linux (python-idna): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2797"},{"id":"BSI:WID-SEC-2026-2800","date":"2026-08-12","title":"OPNsense: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2800"},{"id":"ICSA-26-225-06","date":"2026-08-12","title":"Siemens RUGGEDCOM APE1808","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06"},{"id":"GHSA-5C4F-9PQ9-6C77","date":"2026-08-12","title":"Winter: Broken access control in `Cms\\Controllers\\Index` allows cross-template actions and unauthorized asset uploads","source_url":"https://github.com/advisories/GHSA-5c4f-9pq9-6c77"},{"id":"GHSA-6PVM-2VJJ-RX4W","date":"2026-08-12","title":"phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration","source_url":"https://github.com/advisories/GHSA-6pvm-2vjj-rx4w"},{"id":"GHSA-88P2-JJ8W-J8QG","date":"2026-08-12","title":"Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint","source_url":"https://github.com/advisories/GHSA-88p2-jj8w-j8qg"},{"id":"GHSA-GQGW-JGHV-MXWX","date":"2026-08-12","title":"tablib: Stored XSS in the HTML export via unescaped dataset title","source_url":"https://github.com/advisories/GHSA-gqgw-jghv-mxwx"},{"id":"GHSA-JMQM-F8Q4-V7WX","date":"2026-08-12","title":"LibreNMS: Reflected XSS via Proxmox instance/vmid GET parameters injected into document.title JavaScript assignment","source_url":"https://github.com/advisories/GHSA-jmqm-f8q4-v7wx"},{"id":"GHSA-M7JC-G4RC-JMVH","date":"2026-08-12","title":"Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax","source_url":"https://github.com/advisories/GHSA-m7jc-g4rc-jmvh"},{"id":"IBM:7283273","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP [CVE-2026-17438]","source_url":"https://www.ibm.com/support/pages/node/7283273"},{"id":"IBM:7283390","date":"2026-08-12","title":"Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2026-5516)","source_url":"https://www.ibm.com/support/pages/node/7283390"},{"id":"IBM:7283392","date":"2026-08-12","title":"IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7283392"},{"id":"IBM:7283571","date":"2026-08-12","title":"Security Bulletin: IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM [CVE-2026-17078]","source_url":"https://www.ibm.com/support/pages/node/7283571"},{"id":"IBM:7283572","date":"2026-08-12","title":"IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM","source_url":"https://www.ibm.com/support/pages/node/7283572"},{"id":"IBM:7283573","date":"2026-08-12","title":"IBM i is Affected By Multiple Vulnerabilities in NetServer","source_url":"https://www.ibm.com/support/pages/node/7283573"},{"id":"RHSA-2026:54178","date":"2026-08-12","title":"grafana security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54178"},{"id":"RHSA-2026:54210","date":"2026-08-12","title":"dhcpcd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54210"},{"id":"RHSA-2026:54246","date":"2026-08-12","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54246"},{"id":"RHSA-2026:54247","date":"2026-08-12","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54247"},{"id":"RHSA-2026:54290","date":"2026-08-12","title":"python-idna security update","source_url":"https://access.redhat.com/errata/RHSA-2026:54290"},{"id":"USN-8628-1","date":"2026-08-12","title":"USN-8628-1: libgit2 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8628-1"},{"id":"USN-8629-1","date":"2026-08-12","title":"USN-8629-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8629-1"},{"id":"USN-8630-1","date":"2026-08-12","title":"USN-8630-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8630-1"},{"id":"USN-8631-1","date":"2026-08-12","title":"USN-8631-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8631-1"},{"id":"USN-8632-1","date":"2026-08-12","title":"USN-8632-1: follow-redirects vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8632-1"},{"id":"USN-8633-1","date":"2026-08-12","title":"USN-8633-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8633-1"},{"id":"USN-8634-1","date":"2026-08-12","title":"USN-8634-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8634-1"},{"id":"USN-8635-1","date":"2026-08-12","title":"USN-8635-1: Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8635-1"},{"id":"USN-8636-1","date":"2026-08-12","title":"USN-8636-1: Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8636-1"},{"id":"BSI:WID-SEC-2026-1472","date":"2026-08-12","title":"CPython: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1472"},{"id":"BSI:WID-SEC-2026-1965","date":"2026-08-12","title":"Dell PowerEdge: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1965"},{"id":"BSI:WID-SEC-2026-2791","date":"2026-08-12","title":"CUPS: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2791"},{"id":"RHSA-2026:53069","date":"2026-08-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53069"},{"id":"RHSA-2026:54070","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54070"},{"id":"RHSA-2026:54071","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54071"},{"id":"RHSA-2026:54183","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54183"},{"id":"RHSA-2026:54364","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54364"},{"id":"RHSA-2026:54389","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54389"},{"id":"RHSA-2026:54412","date":"2026-08-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:54412"},{"id":"RHSA-2026:54436","date":"2026-08-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:54436"},{"id":"NCSC-2026-0282","date":"2026-08-11","title":"NCSC-2026-0282 Kwetsbaarheden verholpen in Siemens producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0282"},{"id":"NCSC-2026-0284","date":"2026-08-11","title":"NCSC-2026-0284 Kwetsbaarheden verholpen in Microsoft Windows","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284"},{"id":"NCSC-2026-0288","date":"2026-08-11","title":"NCSC-2026-0288 Kwetsbaarheden verholpen in Microsoft Dynamics","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0288"},{"id":"RHSA-2026:53261","date":"2026-08-11","title":"RHOAI 2.25.10 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:53261"},{"id":"RHSA-2026:53262","date":"2026-08-11","title":"RHOAI 3.4.3 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:53262"},{"id":"RHSA-2026:53263","date":"2026-08-11","title":"RHOAI 3.3.6 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:53263"},{"id":"RHSA-2026:53530","date":"2026-08-11","title":"Multicluster Global Hub 1.7.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53530"},{"id":"BSI:WID-SEC-2025-1748","date":"2026-08-11","title":"libarchive: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1748"},{"id":"BSI:WID-SEC-2026-2708","date":"2026-08-11","title":"ClamAV: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2708"},{"id":"BSI:WID-SEC-2026-2750","date":"2026-08-11","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2750"},{"id":"CISCO-SA-ASAFTD-VPN-DOS-DZV4MQFF","date":"2026-08-11","title":"Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF"},{"id":"GHSA-FX4Q-GJRX-2JW6","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability","source_url":"https://github.com/advisories/GHSA-fx4q-gjrx-2jw6"},{"id":"GHSA-GG8C-3338-XW2F","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability","source_url":"https://github.com/advisories/GHSA-gg8c-3338-xw2f"},{"id":"GHSA-VG44-H755-9HW7","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability","source_url":"https://github.com/advisories/GHSA-vg44-h755-9hw7"},{"id":"IBM:7283295","date":"2026-08-11","title":"Security Bulletin: IBM i is Affected By a Denial of Service in HTTP Server [CVE-2026-17272]","source_url":"https://www.ibm.com/support/pages/node/7283295"},{"id":"NCSC-2026-0283","date":"2026-08-11","title":"NCSC-2026-0283 Kwetsbaarheden in Veeam ONE","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0283"},{"id":"NCSC-2026-0285","date":"2026-08-11","title":"NCSC-2026-0285 Kwetsbaarheden verholpen in Microsoft Developer Tools","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285"},{"id":"NCSC-2026-0286","date":"2026-08-11","title":"NCSC-2026-0286 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286"},{"id":"NCSC-2026-0290","date":"2026-08-11","title":"NCSC-2026-0290 Kwetsbaarheid verholpen in Microsoft Power BI server","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0290"},{"id":"RHSA-2026:51022","date":"2026-08-11","title":"OpenShift Container Platform 4.20.33 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51022"},{"id":"RHSA-2026:51025","date":"2026-08-11","title":"OpenShift Container Platform 4.21.28 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51025"},{"id":"RHSA-2026:51036","date":"2026-08-11","title":"OpenShift Container Platform 4.22.9 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51036"},{"id":"RHSA-2026:51038","date":"2026-08-11","title":"OpenShift Container Platform 4.22.9 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51038"},{"id":"RHSA-2026:53298","date":"2026-08-11","title":"nodejs22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53298"},{"id":"RHSA-2026:53329","date":"2026-08-11","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53329"},{"id":"RHSA-2026:53330","date":"2026-08-11","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53330"},{"id":"RHSA-2026:53363","date":"2026-08-11","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53363"},{"id":"RHSA-2026:53364","date":"2026-08-11","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53364"},{"id":"RHSA-2026:53365","date":"2026-08-11","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53365"},{"id":"RHSA-2026:53371","date":"2026-08-11","title":"Insights proxy Container Image","source_url":"https://access.redhat.com/errata/RHSA-2026:53371"},{"id":"RHSA-2026:53374","date":"2026-08-11","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53374"},{"id":"RHSA-2026:53402","date":"2026-08-11","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53402"},{"id":"RHSA-2026:53412","date":"2026-08-11","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53412"},{"id":"RHSA-2026:53413","date":"2026-08-11","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53413"},{"id":"RHSA-2026:53415","date":"2026-08-11","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53415"},{"id":"RHSA-2026:53416","date":"2026-08-11","title":"host-metering security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53416"},{"id":"RHSA-2026:53435","date":"2026-08-11","title":"udisks2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53435"},{"id":"RHSA-2026:53444","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53444"},{"id":"RHSA-2026:53445","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53445"},{"id":"RHSA-2026:53446","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53446"},{"id":"RHSA-2026:53450","date":"2026-08-11","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53450"},{"id":"RHSA-2026:53453","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53453"},{"id":"RHSA-2026:53454","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53454"},{"id":"RHSA-2026:53455","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53455"},{"id":"RHSA-2026:53475","date":"2026-08-11","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53475"},{"id":"RHSA-2026:53520","date":"2026-08-11","title":"Red Hat Quay 3.10.25","source_url":"https://access.redhat.com/errata/RHSA-2026:53520"},{"id":"RHSA-2026:53644","date":"2026-08-11","title":"Red Hat JBoss Enterprise Application Platform 7.4.25 security pdate","source_url":"https://access.redhat.com/errata/RHSA-2026:53644"},{"id":"RHSA-2026:53661","date":"2026-08-11","title":"OpenShift Virtualization v4.17 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53661"},{"id":"RHSA-2026:53676","date":"2026-08-11","title":"OpenShift Virtualization v4.12 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53676"},{"id":"RHSA-2026:53734","date":"2026-08-11","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53734"},{"id":"RHSA-2026:53735","date":"2026-08-11","title":"OpenShift Virtualization v4.13 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53735"},{"id":"RHSA-2026:53736","date":"2026-08-11","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53736"},{"id":"RHSA-2026:53752","date":"2026-08-11","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53752"},{"id":"RHSA-2026:53770","date":"2026-08-11","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53770"},{"id":"RHSA-2026:53773","date":"2026-08-11","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53773"},{"id":"RHSA-2026:53778","date":"2026-08-11","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53778"},{"id":"RHSA-2026:53789","date":"2026-08-11","title":"OpenShift Virtualization v4.14 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53789"},{"id":"RHSA-2026:53799","date":"2026-08-11","title":"OpenShift Virtualization v4.16 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53799"},{"id":"RHSA-2026:53804","date":"2026-08-11","title":"OpenShift Virtualization v4.16 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53804"},{"id":"RHSA-2026:53806","date":"2026-08-11","title":"Red Hat JBoss Enterprise Application Platform 7.4.25 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53806"},{"id":"RHSA-2026:53835","date":"2026-08-11","title":"OpenShift Virtualization v4.18 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53835"},{"id":"RHSA-2026:53840","date":"2026-08-11","title":"OpenShift Virtualization v4.15 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53840"},{"id":"RHSA-2026:53844","date":"2026-08-11","title":"iscsi-initiator-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53844"},{"id":"RHSA-2026:53845","date":"2026-08-11","title":"iscsi-initiator-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:53845"},{"id":"RHSA-2026:53846","date":"2026-08-11","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53846"},{"id":"RHSA-2026:53847","date":"2026-08-11","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53847"},{"id":"RHSA-2026:53848","date":"2026-08-11","title":"isns-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53848"},{"id":"BSI:WID-SEC-2025-0235","date":"2026-08-11","title":"Dovecot: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0235"},{"id":"GHSA-9MR8-PWPW-3J2W","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability","source_url":"https://github.com/advisories/GHSA-9mr8-pwpw-3j2w"},{"id":"GHSA-9MRH-PW7C-9MQM","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability","source_url":"https://github.com/advisories/GHSA-9mrh-pw7c-9mqm"},{"id":"GHSA-C494-M2FQ-59MX","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability","source_url":"https://github.com/advisories/GHSA-c494-m2fq-59mx"},{"id":"GHSA-JQHP-238X-QHGF","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability","source_url":"https://github.com/advisories/GHSA-jqhp-238x-qhgf"},{"id":"GHSA-M93F-WJ8C-RP8P","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability","source_url":"https://github.com/advisories/GHSA-m93f-wj8c-rp8p"},{"id":"GHSA-R6MH-95JW-G7QG","date":"2026-08-11","title":"Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability","source_url":"https://github.com/advisories/GHSA-r6mh-95jw-g7qg"},{"id":"RHSA-2026:53451","date":"2026-08-11","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53451"},{"id":"RHSA-2026:53452","date":"2026-08-11","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:53452"},{"id":"RHSA-2026:53797","date":"2026-08-11","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53797"},{"id":"RHSA-2026:53826","date":"2026-08-11","title":"OpenShift Virtualization v4.15 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:53826"},{"id":"USN-8627-1","date":"2026-08-11","title":"Yelp vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8627-1"},{"id":"IBM:7282670","date":"2026-08-10","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to prototype pollution due to Immutable.js (CVE-2026-29063)","source_url":"https://www.ibm.com/support/pages/node/7282670"},{"id":"IBM:7283056","date":"2026-08-10","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283056"},{"id":"IBM:7283059","date":"2026-08-10","title":"Security Bulletin: IBM Operational Decision Manager for July 2026 - Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7283059"},{"id":"IBM:7283061","date":"2026-08-10","title":"Security Bulletin: IBM Storage Protect Operations Center is affected by a prototype pollution vulnerability (CVE-2026-29063).","source_url":"https://www.ibm.com/support/pages/node/7283061"},{"id":"IBM:7283063","date":"2026-08-10","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7283063"},{"id":"IBM:7283065","date":"2026-08-10","title":"Security Bulletin: Vulnerability in Vim affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283065"},{"id":"IBM:7283069","date":"2026-08-10","title":"Security Bulletin: Vulnerability in zstd affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283069"},{"id":"RHSA-2026:52946","date":"2026-08-10","title":"Multicluster Global Hub 1.8.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52946"},{"id":"BSI:WID-SEC-2026-2460","date":"2026-08-10","title":"Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2460"},{"id":"BSI:WID-SEC-2026-2713","date":"2026-08-10","title":"Sonatype Nexus Repository Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2713"},{"id":"BSI:WID-SEC-2026-2716","date":"2026-08-10","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2716"},{"id":"IBM:7283055","date":"2026-08-10","title":"Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.","source_url":"https://www.ibm.com/support/pages/node/7283055"},{"id":"IBM:7283066","date":"2026-08-10","title":"Security Bulletin: Vulnerability in Go JOSE affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283066"},{"id":"IBM:7283067","date":"2026-08-10","title":"Security Bulletin: Vulnerability in Sudo affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283067"},{"id":"IBM:7283068","date":"2026-08-10","title":"Security Bulletin: Vulnerability in rsync affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7283068"},{"id":"RHSA-2026:52389","date":"2026-08-10","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52389"},{"id":"RHSA-2026:52390","date":"2026-08-10","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52390"},{"id":"RHSA-2026:52391","date":"2026-08-10","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52391"},{"id":"RHSA-2026:52392","date":"2026-08-10","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52392"},{"id":"RHSA-2026:52394","date":"2026-08-10","title":"nodejs-nodemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52394"},{"id":"RHSA-2026:52395","date":"2026-08-10","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52395"},{"id":"RHSA-2026:52396","date":"2026-08-10","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52396"},{"id":"RHSA-2026:52397","date":"2026-08-10","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52397"},{"id":"RHSA-2026:52398","date":"2026-08-10","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52398"},{"id":"RHSA-2026:52399","date":"2026-08-10","title":"nodejs:22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52399"},{"id":"RHSA-2026:52400","date":"2026-08-10","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52400"},{"id":"RHSA-2026:52551","date":"2026-08-10","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52551"},{"id":"RHSA-2026:52649","date":"2026-08-10","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52649"},{"id":"RHSA-2026:52667","date":"2026-08-10","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:52667"},{"id":"RHSA-2026:52764","date":"2026-08-10","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:52764"},{"id":"RHSA-2026:52768","date":"2026-08-10","title":"Red Hat Developer Hub 1.9.8 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:52768"},{"id":"RHSA-2026:52772","date":"2026-08-10","title":"perl-DBI:1.641 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52772"},{"id":"RHSA-2026:52826","date":"2026-08-10","title":"ignition security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52826"},{"id":"RHSA-2026:52829","date":"2026-08-10","title":"RHEL AI 3.4 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:52829"},{"id":"RHSA-2026:52831","date":"2026-08-10","title":"RHEL AI 3.3 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:52831"},{"id":"RHSA-2026:52832","date":"2026-08-10","title":"RHELAI 3.0 Backport fixes for CVE-2026-64835 and CVE-2026-58049","source_url":"https://access.redhat.com/errata/RHSA-2026:52832"},{"id":"RHSA-2026:52833","date":"2026-08-10","title":"RHELAI 3.2 Backport fixes for CVE-2026-64835 and CVE-2026-58049","source_url":"https://access.redhat.com/errata/RHSA-2026:52833"},{"id":"RHSA-2026:52841","date":"2026-08-10","title":"nodejs-nodemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52841"},{"id":"RHSA-2026:52848","date":"2026-08-10","title":"mariadb:10.11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52848"},{"id":"RHSA-2026:52857","date":"2026-08-10","title":"Red Hat OpenShift GitOps v1.19.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52857"},{"id":"RHSA-2026:52910","date":"2026-08-10","title":"Red Hat OpenShift GitOps v1.20.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52910"},{"id":"RHSA-2026:52928","date":"2026-08-10","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52928"},{"id":"RHSA-2026:52929","date":"2026-08-10","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52929"},{"id":"RHSA-2026:52930","date":"2026-08-10","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52930"},{"id":"RHSA-2026:52948","date":"2026-08-10","title":"java-21-ibm-semeru-certified-jdk security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52948"},{"id":"RHSA-2026:52949","date":"2026-08-10","title":"java-1.8.0-ibm security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52949"},{"id":"RHSA-2026:52968","date":"2026-08-10","title":"Red Hat Quay 3.12.21","source_url":"https://access.redhat.com/errata/RHSA-2026:52968"},{"id":"RHSA-2026:52978","date":"2026-08-10","title":"postgresql-jdbc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52978"},{"id":"BSI:WID-SEC-2026-2714","date":"2026-08-10","title":"SonicWall Global VPN Client: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2714"},{"id":"BSI:WID-SEC-2026-2717","date":"2026-08-10","title":"Perl: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2717"},{"id":"BSI:WID-SEC-2026-2720","date":"2026-08-10","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2720"},{"id":"BSI:WID-SEC-2026-2721","date":"2026-08-10","title":"GNU Emacs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2721"},{"id":"IBM:7283137","date":"2026-08-10","title":"Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)","source_url":"https://www.ibm.com/support/pages/node/7283137"},{"id":"RHSA-2026:52393","date":"2026-08-10","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52393"},{"id":"RHSA-2026:52674","date":"2026-08-10","title":"libarchive security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52674"},{"id":"RHSA-2026:52675","date":"2026-08-10","title":"libarchive security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52675"},{"id":"RHSA-2026:52761","date":"2026-08-10","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52761"},{"id":"RHSA-2026:52765","date":"2026-08-10","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52765"},{"id":"RHSA-2026:52950","date":"2026-08-10","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52950"},{"id":"RHSA-2026:52951","date":"2026-08-10","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52951"},{"id":"RHSA-2026:52952","date":"2026-08-10","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52952"},{"id":"RHSA-2026:52953","date":"2026-08-10","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:52953"},{"id":"USN-8592-1","date":"2026-08-10","title":"ImageMagick vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8592-1"},{"id":"USN-8626-1","date":"2026-08-10","title":"systemd vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8626-1"},{"id":"RHSA-2026:52414","date":"2026-08-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:52414"},{"id":"RHSA-2026:52834","date":"2026-08-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:52834"},{"id":"RHSA-2026:52912","date":"2026-08-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:52912"},{"id":"RHSA-2026:52990","date":"2026-08-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:52990"},{"id":"RHSA-2026:42986","date":"2026-08-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42986"},{"id":"GHSA-RG76-677X-56Q9","date":"2026-08-07","title":"crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain","source_url":"https://github.com/advisories/GHSA-rg76-677x-56q9"},{"id":"NCSC-2026-0279","date":"2026-08-07","title":"NCSC-2026-0279 Kwetsbaarheden verholpen in Cisco IOS XE Software","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0279"},{"id":"BSI:WID-SEC-2026-2543","date":"2026-08-07","title":"Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2543"},{"id":"BSI:WID-SEC-2026-2695","date":"2026-08-07","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2695"},{"id":"BSI:WID-SEC-2026-2699","date":"2026-08-07","title":"Wazuh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2699"},{"id":"BSI:WID-SEC-2026-2701","date":"2026-08-07","title":"WordPress: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2701"},{"id":"BSI:WID-SEC-2026-2702","date":"2026-08-07","title":"Arista VeloCloud Orchestrator: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Root-Rechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2702"},{"id":"BSI:WID-SEC-2026-2703","date":"2026-08-07","title":"Flowise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2703"},{"id":"GHSA-WCX4-WPFV-MC5C","date":"2026-08-07","title":"jsii-diff: Command Injection via npm: package argument","source_url":"https://github.com/advisories/GHSA-wcx4-wpfv-mc5c"},{"id":"IBM:7279461","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser (CVE-2026-10534)","source_url":"https://www.ibm.com/support/pages/node/7279461"},{"id":"IBM:7282856","date":"2026-08-07","title":"Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7282856"},{"id":"IBM:7282872","date":"2026-08-07","title":"Security Bulletin: IBM WebSphere eXtreme Scale is affected by multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7282872"},{"id":"IBM:7282946","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in Corosync 3.1.9 (CVE-2026-35091, CVE-2026-35092)","source_url":"https://www.ibm.com/support/pages/node/7282946"},{"id":"IBM:7282947","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in Netty open source libraries.","source_url":"https://www.ibm.com/support/pages/node/7282947"},{"id":"IBM:7282949","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® is vulnerable to privilege escalation with a specially crafted query (CVE-2026-10543)","source_url":"https://www.ibm.com/support/pages/node/7282949"},{"id":"NCSC-2026-0275","date":"2026-08-07","title":"NCSC-2026-0275 Kwetsbaarheden verholpen in N-able N-central","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0275"},{"id":"RHSA-2026:51603","date":"2026-08-07","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51603"},{"id":"RHSA-2026:51604","date":"2026-08-07","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51604"},{"id":"RHSA-2026:51746","date":"2026-08-07","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51746"},{"id":"RHSA-2026:9848","date":"2026-08-07","title":"multicluster engine for Kubernetes v2.6.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:9848"},{"id":"BSI:WID-SEC-2023-0207","date":"2026-08-07","title":"Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0207"},{"id":"BSI:WID-SEC-2025-1350","date":"2026-08-07","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1350"},{"id":"BSI:WID-SEC-2025-2724","date":"2026-08-07","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2724"},{"id":"BSI:WID-SEC-2026-0817","date":"2026-08-07","title":"GNU libc: Mehrere Schwachstellen ermöglichen Manipulation von DNS Antworten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0817"},{"id":"BSI:WID-SEC-2026-0918","date":"2026-08-07","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0918"},{"id":"BSI:WID-SEC-2026-2682","date":"2026-08-07","title":"Apache CXF: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2682"},{"id":"BSI:WID-SEC-2026-2698","date":"2026-08-07","title":"jsoup: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2698"},{"id":"BSI:WID-SEC-2026-2704","date":"2026-08-07","title":"Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2704"},{"id":"BSI:WID-SEC-2026-2705","date":"2026-08-07","title":"Autodesk AutoCAD und Civil 3D: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2705"},{"id":"ICSA-26-219-01","date":"2026-08-07","title":"CPDLC over ATN-B1 Vulnerabilities","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-219-01"},{"id":"CISCO-SA-SDWAN-INFODIS-SPUJBDCE","date":"2026-08-07","title":"Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-SPuJBDCe"},{"id":"GHSA-54FX-42GC-7VW4","date":"2026-08-07","title":"Hono: Algorithmic Complexity DoS in Language Middleware","source_url":"https://github.com/advisories/GHSA-54fx-42gc-7vw4"},{"id":"GHSA-7WMF-PW8J-MC78","date":"2026-08-07","title":"CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()","source_url":"https://github.com/advisories/GHSA-7wmf-pw8j-mc78"},{"id":"GHSA-9HJ4-R449-HFVC","date":"2026-08-07","title":"Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams","source_url":"https://github.com/advisories/GHSA-9hj4-r449-hfvc"},{"id":"GHSA-9RJG-X2P2-H68H","date":"2026-08-07","title":"API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)","source_url":"https://github.com/advisories/GHSA-9rjg-x2p2-h68h"},{"id":"GHSA-C9W5-RWH3-7PM9","date":"2026-08-07","title":"CodeIgniter: SQL injection in Query Builder deleteBatch() when used with where() conditions","source_url":"https://github.com/advisories/GHSA-c9w5-rwh3-7pm9"},{"id":"GHSA-F23P-VX2J-J53R","date":"2026-08-07","title":"Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure","source_url":"https://github.com/advisories/GHSA-f23p-vx2j-j53r"},{"id":"GHSA-FP3F-MC75-235C","date":"2026-08-07","title":"pypdf: Possible large memory usage for large /ToUnicode streams","source_url":"https://github.com/advisories/GHSA-fp3f-mc75-235c"},{"id":"GHSA-GM37-52C6-37MW","date":"2026-08-07","title":"pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors","source_url":"https://github.com/advisories/GHSA-gm37-52c6-37mw"},{"id":"GHSA-HHMC-Q9HP-R662","date":"2026-08-07","title":"CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames","source_url":"https://github.com/advisories/GHSA-hhmc-q9hp-r662"},{"id":"GHSA-MMJ4-63M4-R6H5","date":"2026-08-07","title":"CodeIgniter: Uploaded file extension validation bypass in `is_image` and `mime_in` rules","source_url":"https://github.com/advisories/GHSA-mmj4-63m4-r6h5"},{"id":"GHSA-P9JM-Q85P-7MCP","date":"2026-08-07","title":"Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state","source_url":"https://github.com/advisories/GHSA-p9jm-q85p-7mcp"},{"id":"IBM:7279478","date":"2026-08-07","title":"Security Bulletin: Multiple vulnerabilities in IBM Semeru affects IBM® Db2® (April 2026 CPU)","source_url":"https://www.ibm.com/support/pages/node/7279478"},{"id":"IBM:7282854","date":"2026-08-07","title":"Security Bulletin: Resolved multiple XSS vulnerabilities in DOMPurify (CVE-2026-49978, CVE-2026-65898, CVE-2026-66010, and others)","source_url":"https://www.ibm.com/support/pages/node/7282854"},{"id":"IBM:7282855","date":"2026-08-07","title":"Security Bulletin: Resolved multiple XSS vulnerabilities in DOMPurify (CVE-2026-49978, CVE-2026-65898, CVE-2026-66010, and others)","source_url":"https://www.ibm.com/support/pages/node/7282855"},{"id":"IBM:7282951","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. (CVE-2026-16480)","source_url":"https://www.ibm.com/support/pages/node/7282951"},{"id":"IBM:7282952","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)","source_url":"https://www.ibm.com/support/pages/node/7282952"},{"id":"BSI:WID-SEC-2026-2696","date":"2026-08-07","title":"IBM DataPower Gateway: Schwachstelle ermöglicht Manipulation von Daten und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2696"},{"id":"GHSA-79QM-7RJ5-M7R9","date":"2026-08-07","title":"Hono: Proxy Helper does not remove response headers listed in the `Connection` header","source_url":"https://github.com/advisories/GHSA-79qm-7rj5-m7r9"},{"id":"IBM:7282953","date":"2026-08-07","title":"Security Bulletin: IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak (CVE-2026-18096)","source_url":"https://www.ibm.com/support/pages/node/7282953"},{"id":"RHSA-2026:50807","date":"2026-08-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50807"},{"id":"RHSA-2026:51861","date":"2026-08-07","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:51861"},{"id":"NCSC-2026-0277","date":"2026-08-06","title":"NCSC-2026-0277 Kwetsbaarheden verholpen in Cisco Catalyst SD-WAN","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0277"},{"id":"NCSC-2026-0278","date":"2026-08-06","title":"NCSC-2026-0278 Kwetsbaarheden verholpen in Adobe Campaign Classic","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0278"},{"id":"BSI:WID-SEC-2026-2638","date":"2026-08-06","title":"IBM QRadar SIEM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2638"},{"id":"BSI:WID-SEC-2026-2684","date":"2026-08-06","title":"Cacti: Schwachstelle ermöglicht SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2684"},{"id":"RHSA-2026:47729","date":"2026-08-06","title":"OpenShift Container Platform 4.17.56 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:47729"},{"id":"RHSA-2026:50963","date":"2026-08-06","title":"postfix security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50963"},{"id":"RHSA-2026:50964","date":"2026-08-06","title":"postfix security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50964"},{"id":"RHSA-2026:50978","date":"2026-08-06","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50978"},{"id":"RHSA-2026:50979","date":"2026-08-06","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50979"},{"id":"RHSA-2026:51028","date":"2026-08-06","title":"OpenShift Virtualization v4.22 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:51028"},{"id":"RHSA-2026:51033","date":"2026-08-06","title":"Red Hat OpenShift API for Data Protection","source_url":"https://access.redhat.com/errata/RHSA-2026:51033"},{"id":"RHSA-2026:51034","date":"2026-08-06","title":"postfix security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51034"},{"id":"RHSA-2026:51057","date":"2026-08-06","title":"OpenShift Source To Image 1.6.3","source_url":"https://access.redhat.com/errata/RHSA-2026:51057"},{"id":"RHSA-2026:51058","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51058"},{"id":"RHSA-2026:51059","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51059"},{"id":"RHSA-2026:51060","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51060"},{"id":"RHSA-2026:51061","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51061"},{"id":"RHSA-2026:51062","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51062"},{"id":"RHSA-2026:51063","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51063"},{"id":"RHSA-2026:51064","date":"2026-08-06","title":"pipewire security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51064"},{"id":"RHSA-2026:51066","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51066"},{"id":"RHSA-2026:51067","date":"2026-08-06","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51067"},{"id":"RHSA-2026:51075","date":"2026-08-06","title":"gpsd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51075"},{"id":"RHSA-2026:51079","date":"2026-08-06","title":"RHTAS 1.0.2 - GA Release Of the Policy Controller Operator","source_url":"https://access.redhat.com/errata/RHSA-2026:51079"},{"id":"RHSA-2026:51084","date":"2026-08-06","title":"RHTAS 1.0.2 - GA Release Of the Policy Controller Operator","source_url":"https://access.redhat.com/errata/RHSA-2026:51084"},{"id":"RHSA-2026:51100","date":"2026-08-06","title":"RHEL AI 3.3 RPM runtime CVE fix - aom","source_url":"https://access.redhat.com/errata/RHSA-2026:51100"},{"id":"RHSA-2026:51105","date":"2026-08-06","title":"LibRaw security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51105"},{"id":"RHSA-2026:51112","date":"2026-08-06","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51112"},{"id":"RHSA-2026:51146","date":"2026-08-06","title":"RHEL AI 3.4 RPM runtime CVE fix - aom","source_url":"https://access.redhat.com/errata/RHSA-2026:51146"},{"id":"RHSA-2026:51153","date":"2026-08-06","title":"gpsd-minimal security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51153"},{"id":"RHSA-2026:51162","date":"2026-08-06","title":"Red Hat Ansible Automation Platform 2.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51162"},{"id":"RHSA-2026:51175","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51175"},{"id":"RHSA-2026:51176","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51176"},{"id":"RHSA-2026:51177","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51177"},{"id":"RHSA-2026:51180","date":"2026-08-06","title":"Backport fixes for CVE-2026-64835 and CVE-2026-58049","source_url":"https://access.redhat.com/errata/RHSA-2026:51180"},{"id":"RHSA-2026:51181","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51181"},{"id":"RHSA-2026:51182","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51182"},{"id":"RHSA-2026:51183","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51183"},{"id":"RHSA-2026:51184","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51184"},{"id":"RHSA-2026:51185","date":"2026-08-06","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51185"},{"id":"RHSA-2026:51187","date":"2026-08-06","title":"yggdrasil security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51187"},{"id":"RHSA-2026:51194","date":"2026-08-06","title":"Technical preview of the satellite/iop-vmaas-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51194"},{"id":"RHSA-2026:51196","date":"2026-08-06","title":"General availability of the satellite/iop-host-inventory-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51196"},{"id":"RHSA-2026:51197","date":"2026-08-06","title":"Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51197"},{"id":"RHSA-2026:51199","date":"2026-08-06","title":"General availability of the satellite/iop-advisor-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51199"},{"id":"RHSA-2026:51200","date":"2026-08-06","title":"General availability of the satellite/iop-remediations-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51200"},{"id":"RHSA-2026:51206","date":"2026-08-06","title":"General availability of the satellite/iop-advisor-backend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51206"},{"id":"RHSA-2026:51219","date":"2026-08-06","title":"satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:51219"},{"id":"RHSA-2026:51288","date":"2026-08-06","title":"container-tools:rhel8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51288"},{"id":"RHSA-2026:51339","date":"2026-08-06","title":"libyang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51339"},{"id":"RHSA-2026:51341","date":"2026-08-06","title":"Technical preview of the satellite/iop-vmaas-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51341"},{"id":"RHSA-2026:51342","date":"2026-08-06","title":"General availability of the satellite/iop-advisor-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51342"},{"id":"RHSA-2026:51348","date":"2026-08-06","title":"Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51348"},{"id":"RHSA-2026:51349","date":"2026-08-06","title":"General availability of the satellite/iop-host-inventory-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51349"},{"id":"RHSA-2026:51351","date":"2026-08-06","title":"libyang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51351"},{"id":"RHSA-2026:51357","date":"2026-08-06","title":"satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:51357"},{"id":"RHSA-2026:51368","date":"2026-08-06","title":"libyang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51368"},{"id":"RHSA-2026:51436","date":"2026-08-06","title":"postfix security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51436"},{"id":"BSI:WID-SEC-2026-1894","date":"2026-08-06","title":"Keycloak (admin-ui-ext): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1894"},{"id":"BSI:WID-SEC-2026-1963","date":"2026-08-06","title":"FreeRDP: Schwachstelle ermöglicht Codeausführung und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1963"},{"id":"BSI:WID-SEC-2026-2685","date":"2026-08-06","title":"Nextcloud: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2685"},{"id":"ICSA-26-218-01","date":"2026-08-06","title":"ABB Ability Zenon","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-01"},{"id":"ICSA-26-218-02","date":"2026-08-06","title":"Johnson Controls Inc. TL280","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-02"},{"id":"RHSA-2026:51035","date":"2026-08-06","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51035"},{"id":"RHSA-2026:51045","date":"2026-08-06","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51045"},{"id":"RHSA-2026:51134","date":"2026-08-06","title":"systemd security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51134"},{"id":"RHSA-2026:51152","date":"2026-08-06","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51152"},{"id":"RHSA-2026:51157","date":"2026-08-06","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:51157"},{"id":"RHSA-2026:51195","date":"2026-08-06","title":"General availability of the satellite/iop-host-inventory-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51195"},{"id":"RHSA-2026:51277","date":"2026-08-06","title":"systemd security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51277"},{"id":"RHSA-2026:51295","date":"2026-08-06","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:51295"},{"id":"RHSA-2026:51347","date":"2026-08-06","title":"General availability of the satellite/iop-host-inventory-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51347"},{"id":"RHSA-2026:51356","date":"2026-08-06","title":"General availability of the satellite/iop-advisor-backend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:51356"},{"id":"BSI:WID-SEC-2026-2671","date":"2026-08-06","title":"SonicWall SonicOS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2671"},{"id":"RHSA-2026:50956","date":"2026-08-06","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50956"},{"id":"RHSA-2026:50969","date":"2026-08-06","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50969"},{"id":"RHSA-2026:51065","date":"2026-08-06","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:51065"},{"id":"CISCO-SA-HARDENING-IOSXE-V8NMUMZJ","date":"2026-08-05","title":"Cisco IOS XE Software Security Hardening Release: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ"},{"id":"CISCO-SA-HARDENING-SDWAN-FALCR3K","date":"2026-08-05","title":"Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K"},{"id":"RHSA-2026:48657","date":"2026-08-05","title":"OpenShift Container Platform 4.19.41 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48657"},{"id":"RHSA-2026:48699","date":"2026-08-05","title":"OpenShift Container Platform 4.18.51 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48699"},{"id":"RHSA-2026:50816","date":"2026-08-05","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50816"},{"id":"BSI:WID-SEC-2026-1038","date":"2026-08-05","title":"Apache Tomcat und Tomcat Native: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1038"},{"id":"BSI:WID-SEC-2026-1160","date":"2026-08-05","title":"Red Hat Enterprise Linux und Satellite (satellite/iop-remediations-rhel9 container image): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1160"},{"id":"BSI:WID-SEC-2026-2589","date":"2026-08-05","title":"Flowise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2589"},{"id":"BSI:WID-SEC-2026-2641","date":"2026-08-05","title":"Zammad: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2641"},{"id":"CISCO-SA-CIMC-ARG-INJECT-UPSHDMFU","date":"2026-08-05","title":"Cisco Integrated Management Controller Argument Injection Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU"},{"id":"CISCO-SA-IOS-XMCP-THBAR34T","date":"2026-08-05","title":"Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xmcp-thbAr34t"},{"id":"CISCO-SA-IOSXE-BING-MGHRFAKD","date":"2026-08-05","title":"Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-bing-MGHrFAkd"},{"id":"CISCO-SA-IOSXE-SNMP-DOS-ZAQNM4MD","date":"2026-08-05","title":"Cisco IOS XE Software SNMP Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD"},{"id":"IBM:7282582","date":"2026-08-05","title":"Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty are affected by a security bypass vulnerability (CVE-2026-10842)","source_url":"https://www.ibm.com/support/pages/node/7282582"},{"id":"IBM:7282646","date":"2026-08-05","title":"Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling","source_url":"https://www.ibm.com/support/pages/node/7282646"},{"id":"IBM:7282647","date":"2026-08-05","title":"Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement","source_url":"https://www.ibm.com/support/pages/node/7282647"},{"id":"IBM:7282648","date":"2026-08-05","title":"Security Bulletin: Langflow is affected by weaknesses in secret handling and sensitive configuration access","source_url":"https://www.ibm.com/support/pages/node/7282648"},{"id":"NCSC-2026-0276","date":"2026-08-05","title":"NCSC-2026-0276 Kwetsbaarheden verholpen in Veeam Service Provider Console","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0276"},{"id":"RHSA-2026:50538","date":"2026-08-05","title":"mod_http2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50538"},{"id":"RHSA-2026:50572","date":"2026-08-05","title":"mod_http2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50572"},{"id":"RHSA-2026:50653","date":"2026-08-05","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50653"},{"id":"RHSA-2026:50654","date":"2026-08-05","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50654"},{"id":"RHSA-2026:50655","date":"2026-08-05","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50655"},{"id":"RHSA-2026:50718","date":"2026-08-05","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50718"},{"id":"RHSA-2026:50728","date":"2026-08-05","title":"ruby:3.3 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50728"},{"id":"RHSA-2026:50747","date":"2026-08-05","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50747"},{"id":"RHSA-2026:50770","date":"2026-08-05","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50770"},{"id":"RHSA-2026:50771","date":"2026-08-05","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50771"},{"id":"RHSA-2026:50774","date":"2026-08-05","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50774"},{"id":"RHSA-2026:50778","date":"2026-08-05","title":"ruby security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50778"},{"id":"RHSA-2026:50779","date":"2026-08-05","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50779"},{"id":"RHSA-2026:50811","date":"2026-08-05","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50811"},{"id":"RHSA-2026:50817","date":"2026-08-05","title":"gimp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50817"},{"id":"RHSA-2026:50839","date":"2026-08-05","title":"Red Hat Ansible Automation Platform 2.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50839"},{"id":"RHSA-2026:50843","date":"2026-08-05","title":"Logging for Red Hat OpenShift - 6.0.16","source_url":"https://access.redhat.com/errata/RHSA-2026:50843"},{"id":"RHSA-2026:50846","date":"2026-08-05","title":"Red Hat build of Keycloak 26.4.14 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50846"},{"id":"RHSA-2026:50847","date":"2026-08-05","title":"Red Hat build of Keycloak 26.4.14 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50847"},{"id":"RHSA-2026:50848","date":"2026-08-05","title":"Red Hat build of Keycloak 26.6.5 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50848"},{"id":"RHSA-2026:50849","date":"2026-08-05","title":"Red Hat build of Keycloak 26.6.5 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50849"},{"id":"RHSA-2026:50850","date":"2026-08-05","title":"Red Hat Ansible Automation Platform 2.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50850"},{"id":"RHSA-2026:50863","date":"2026-08-05","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50863"},{"id":"RHSA-2026:50869","date":"2026-08-05","title":"RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50869"},{"id":"RHSA-2026:50871","date":"2026-08-05","title":"RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50871"},{"id":"RHSA-2026:50873","date":"2026-08-05","title":"RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50873"},{"id":"RHSA-2026:50874","date":"2026-08-05","title":"RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50874"},{"id":"RHSA-2026:50888","date":"2026-08-05","title":"RHTAS 1.4.3 - CLI Stack Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50888"},{"id":"RHSA-2026:50894","date":"2026-08-05","title":"RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:50894"},{"id":"RHSA-2026:50904","date":"2026-08-05","title":"RHTAS 1.4 - GA Release of Model Transparency 1.0.3","source_url":"https://access.redhat.com/errata/RHSA-2026:50904"},{"id":"RHSA-2026:50910","date":"2026-08-05","title":"RHTAS 1.4.3 - Tech Preview Release Of the Go based Model Transparency CLI","source_url":"https://access.redhat.com/errata/RHSA-2026:50910"},{"id":"RHSA-2026:50911","date":"2026-08-05","title":"RHTAS 1.4.3 - Tech Preview Release Of the Model Validation Operator","source_url":"https://access.redhat.com/errata/RHSA-2026:50911"},{"id":"RHSA-2026:50931","date":"2026-08-05","title":"Red Hat Quay 3.9.25","source_url":"https://access.redhat.com/errata/RHSA-2026:50931"},{"id":"BSI:WID-SEC-2026-2536","date":"2026-08-05","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2536"},{"id":"BSI:WID-SEC-2026-2567","date":"2026-08-05","title":"Checkmk: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2567"},{"id":"BSI:WID-SEC-2026-2654","date":"2026-08-05","title":"vim (vms_fixfilename): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2654"},{"id":"BSI:WID-SEC-2026-2655","date":"2026-08-05","title":"Mozilla Firefox für Android: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2655"},{"id":"CISCO-SA-CIMC-XSS-7EHBFXBP","date":"2026-08-05","title":"Cisco Integrated Management Controller Cross-Site Scripting Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp"},{"id":"CISCO-SA-NOTICE-L4XFJG8S","date":"2026-08-05","title":"Cisco Advance Notification for Publication of August 5, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-L4XfJg8S"},{"id":"CISCO-SA-ROOMOS-INFODISC-QBXJFMWM","date":"2026-08-05","title":"Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-qBXjfmWm"},{"id":"CISCO-SA-TS-AGENT-FW-BYPASS-MYBTMREV","date":"2026-08-05","title":"Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ts-agent-fw-bypass-MYBTMrev"},{"id":"CISCO-SA-WEBUI-DOS-QDC7QX3","date":"2026-08-05","title":"Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-dos-qdc7qx3"},{"id":"CISCO-SA-XE-WEBUI-DOS-PTAODAWW","date":"2026-08-05","title":"Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-PtAODAWW"},{"id":"RHSA-2026:49951","date":"2026-08-05","title":"Red Hat JBoss Web Server 7.0.1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49951"},{"id":"RHSA-2026:49952","date":"2026-08-05","title":"Red Hat JBoss Web Server 7.0.1 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49952"},{"id":"RHSA-2026:50688","date":"2026-08-05","title":"gstreamer1-plugins-ugly-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50688"},{"id":"RHSA-2026:50691","date":"2026-08-05","title":"gstreamer1-plugins-ugly-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50691"},{"id":"RHSA-2026:50729","date":"2026-08-05","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50729"},{"id":"RHSA-2026:50769","date":"2026-08-05","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50769"},{"id":"RHSA-2026:50772","date":"2026-08-05","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50772"},{"id":"RHSA-2026:50808","date":"2026-08-05","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50808"},{"id":"RHSA-2026:50826","date":"2026-08-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50826"},{"id":"RHSA-2026:50854","date":"2026-08-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50854"},{"id":"IBM:7282500","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by a server-side request forgery vulnerability (CVE-2026-14529)","source_url":"https://www.ibm.com/support/pages/node/7282500"},{"id":"IBM:7282501","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a privilege escalation (CVE-2026-14446)","source_url":"https://www.ibm.com/support/pages/node/7282501"},{"id":"IBM:7282503","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by an unsafe deserialization and exposure of sensitive information (CVE-2026-14512, CVE-2026-14528)","source_url":"https://www.ibm.com/support/pages/node/7282503"},{"id":"IBM:7282517","date":"2026-08-04","title":"Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System","source_url":"https://www.ibm.com/support/pages/node/7282517"},{"id":"IBM:7282567","date":"2026-08-04","title":"Security Bulletin: Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7282567"},{"id":"RHSA-2026:48670","date":"2026-08-04","title":"OpenShift Container Platform 4.21.27 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48670"},{"id":"RHSA-2026:48676","date":"2026-08-04","title":"OpenShift Container Platform 4.20.32 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48676"},{"id":"RHSA-2026:48693","date":"2026-08-04","title":"OpenShift Container Platform 4.22.8 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48693"},{"id":"BSI:WID-SEC-2026-2455","date":"2026-08-04","title":"Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2455"},{"id":"BSI:WID-SEC-2026-2643","date":"2026-08-04","title":"Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2643"},{"id":"GHSA-XPP7-93X6-V29M","date":"2026-08-04","title":"XSS in Ghost's ActivityPub client","source_url":"https://github.com/advisories/GHSA-xpp7-93x6-v29m"},{"id":"IBM:7282446","date":"2026-08-04","title":"Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU","source_url":"https://www.ibm.com/support/pages/node/7282446"},{"id":"IBM:7282449","date":"2026-08-04","title":"Security Bulletin: Vulnerabilities in jackson-databind may affect IBM APM Linux KVM Agent for Virtual Environments.","source_url":"https://www.ibm.com/support/pages/node/7282449"},{"id":"IBM:7282504","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a cross-site request forgery (CVE-2026-14980, CVE-2026-2482)","source_url":"https://www.ibm.com/support/pages/node/7282504"},{"id":"IBM:7282512","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)","source_url":"https://www.ibm.com/support/pages/node/7282512"},{"id":"IBM:7282518","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service (CVE-2026-16192)","source_url":"https://www.ibm.com/support/pages/node/7282518"},{"id":"IBM:7282519","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)","source_url":"https://www.ibm.com/support/pages/node/7282519"},{"id":"IBM:7282524","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability (CVE-2026-15057)","source_url":"https://www.ibm.com/support/pages/node/7282524"},{"id":"IBM:7282530","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Cloud Pak for Applications, are affected by a security bypass vulnerability (CVE-2026-10842)","source_url":"https://www.ibm.com/support/pages/node/7282530"},{"id":"IBM:7282540","date":"2026-08-04","title":"Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability with HTTP/2 (CVE-2026-11897)","source_url":"https://www.ibm.com/support/pages/node/7282540"},{"id":"RHSA-2026:49909","date":"2026-08-04","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49909"},{"id":"RHSA-2026:49911","date":"2026-08-04","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49911"},{"id":"RHSA-2026:49921","date":"2026-08-04","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49921"},{"id":"RHSA-2026:49922","date":"2026-08-04","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49922"},{"id":"RHSA-2026:49944","date":"2026-08-04","title":"container-tools:rhel8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49944"},{"id":"RHSA-2026:50064","date":"2026-08-04","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50064"},{"id":"RHSA-2026:50065","date":"2026-08-04","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50065"},{"id":"RHSA-2026:50085","date":"2026-08-04","title":"Red Hat JBoss Enterprise Application Platform 8.1.7.1 XP 6.0.5.1 release","source_url":"https://access.redhat.com/errata/RHSA-2026:50085"},{"id":"RHSA-2026:50100","date":"2026-08-04","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50100"},{"id":"RHSA-2026:50108","date":"2026-08-04","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50108"},{"id":"RHSA-2026:50109","date":"2026-08-04","title":"sssd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50109"},{"id":"RHSA-2026:50116","date":"2026-08-04","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50116"},{"id":"RHSA-2026:50117","date":"2026-08-04","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50117"},{"id":"RHSA-2026:50119","date":"2026-08-04","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50119"},{"id":"RHSA-2026:50141","date":"2026-08-04","title":"sg3_utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50141"},{"id":"RHSA-2026:50142","date":"2026-08-04","title":"sg3_utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50142"},{"id":"RHSA-2026:50205","date":"2026-08-04","title":"Red Hat build of OpenTelemetry 3.10.1 release","source_url":"https://access.redhat.com/errata/RHSA-2026:50205"},{"id":"RHSA-2026:50221","date":"2026-08-04","title":"Satellite 6.19.3 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50221"},{"id":"RHSA-2026:50222","date":"2026-08-04","title":"Satellite 6.17.10 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50222"},{"id":"RHSA-2026:50223","date":"2026-08-04","title":"Satellite 6.16.12 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50223"},{"id":"RHSA-2026:50262","date":"2026-08-04","title":"perl:5.32 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50262"},{"id":"RHSA-2026:50263","date":"2026-08-04","title":"Satellite 6.18.8 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50263"},{"id":"RHSA-2026:50300","date":"2026-08-04","title":"Migration Toolkit for Applications","source_url":"https://access.redhat.com/errata/RHSA-2026:50300"},{"id":"RHSA-2026:50317","date":"2026-08-04","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50317"},{"id":"RHSA-2026:50318","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50318"},{"id":"RHSA-2026:50319","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50319"},{"id":"RHSA-2026:50336","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50336"},{"id":"RHSA-2026:50340","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.7 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50340"},{"id":"RHSA-2026:50344","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50344"},{"id":"RHSA-2026:50357","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50357"},{"id":"RHSA-2026:50479","date":"2026-08-04","title":"Red Hat Ansible Automation Platform 2.6 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50479"},{"id":"BSI:WID-SEC-2026-1372","date":"2026-08-04","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1372"},{"id":"BSI:WID-SEC-2026-1450","date":"2026-08-04","title":"IBM App Connect Enterprise (Axios): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1450"},{"id":"ICSA-26-216-01","date":"2026-08-04","title":"Acrisure KARR BT and DR-100","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-216-01"},{"id":"GHSA-2GX6-7GX2-WWCF","date":"2026-08-04","title":"Ghost: Cross-Site Scripting in Universal Import","source_url":"https://github.com/advisories/GHSA-2gx6-7gx2-wwcf"},{"id":"GHSA-4WX2-7GVJ-QFQ3","date":"2026-08-04","title":"Ghost: Archived Offers can be Redeemed","source_url":"https://github.com/advisories/GHSA-4wx2-7gvj-qfq3"},{"id":"GHSA-6XHV-RXHV-PWM4","date":"2026-08-04","title":"Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata","source_url":"https://github.com/advisories/GHSA-6xhv-rxhv-pwm4"},{"id":"GHSA-73CQ-MCGH-379C","date":"2026-08-04","title":"Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing","source_url":"https://github.com/advisories/GHSA-73cq-mcgh-379c"},{"id":"GHSA-7MPP-R37J-X5WH","date":"2026-08-04","title":"Ghost: Session Fixation in Ghost Admin","source_url":"https://github.com/advisories/GHSA-7mpp-r37j-x5wh"},{"id":"GHSA-944X-PM95-3JPR","date":"2026-08-04","title":"Ghost: File Upload Content-Type Spoofing","source_url":"https://github.com/advisories/GHSA-944x-pm95-3jpr"},{"id":"GHSA-CH52-PX8Q-F22J","date":"2026-08-04","title":"Ghost: Server-side request forgery via DNS rebinding in external request handling","source_url":"https://github.com/advisories/GHSA-ch52-px8q-f22j"},{"id":"GHSA-CHGM-3698-JM42","date":"2026-08-04","title":"Ghost: Member existence leak via magic link sign-in response","source_url":"https://github.com/advisories/GHSA-chgm-3698-jm42"},{"id":"GHSA-CJ62-HVV2-2Q5H","date":"2026-08-04","title":"Ghost: Database Backup Path Traversal","source_url":"https://github.com/advisories/GHSA-cj62-hvv2-2q5h"},{"id":"GHSA-CJC9-Q5GF-327P","date":"2026-08-04","title":"Ghost: Theme Upload Path Traversal","source_url":"https://github.com/advisories/GHSA-cjc9-q5gf-327p"},{"id":"GHSA-G366-23FW-GGP6","date":"2026-08-04","title":"Ghost: Mobiledoc image-size fetch SSRF","source_url":"https://github.com/advisories/GHSA-g366-23fw-ggp6"},{"id":"GHSA-GCVV-72Q8-9V76","date":"2026-08-04","title":"Ghost: Server-Side Request Forgery in Image Fetching","source_url":"https://github.com/advisories/GHSA-gcvv-72q8-9v76"},{"id":"GHSA-H6X2-583H-X99R","date":"2026-08-04","title":"DNS Rebinding SSRF Bypass","source_url":"https://github.com/advisories/GHSA-h6x2-583h-x99r"},{"id":"GHSA-JM22-3W23-5Q7W","date":"2026-08-04","title":"Ghost: Blind Password Hash Disclosure in Ghost Admin API","source_url":"https://github.com/advisories/GHSA-jm22-3w23-5q7w"},{"id":"GHSA-WVP2-4QQP-4H3R","date":"2026-08-04","title":"Ghost: Private IP filtering bypass to make server-side requests to internal services","source_url":"https://github.com/advisories/GHSA-wvp2-4qqp-4h3r"},{"id":"GHSA-XM43-3M56-W3WF","date":"2026-08-04","title":"Ghost: Paid gift memberships obtainable at minimal cost via the donations feature","source_url":"https://github.com/advisories/GHSA-xm43-3m56-w3wf"},{"id":"RHSA-2026:49910","date":"2026-08-04","title":"systemd security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49910"},{"id":"RHSA-2026:49927","date":"2026-08-04","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49927"},{"id":"RHSA-2026:50050","date":"2026-08-04","title":"systemd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50050"},{"id":"RHSA-2026:50051","date":"2026-08-04","title":"systemd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50051"},{"id":"RHSA-2026:50077","date":"2026-08-04","title":"systemd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50077"},{"id":"RHSA-2026:50144","date":"2026-08-04","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50144"},{"id":"RHSA-2026:50147","date":"2026-08-04","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:50147"},{"id":"RHSA-2026:49914","date":"2026-08-04","title":"php8.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49914"},{"id":"RHSA-2026:50070","date":"2026-08-04","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50070"},{"id":"RHSA-2026:50079","date":"2026-08-04","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50079"},{"id":"RHSA-2026:50281","date":"2026-08-04","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50281"},{"id":"RHSA-2026:50287","date":"2026-08-04","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50287"},{"id":"RHSA-2026:50290","date":"2026-08-04","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:50290"},{"id":"RHSA-2026:50525","date":"2026-08-04","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:50525"},{"id":"CISCO-SA-ONPREM-FMC-AUTHBYPASS-5JPP45V2","date":"2026-08-03","title":"Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2"},{"id":"IBM:7282334","date":"2026-08-03","title":"Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Prototype Pollution","source_url":"https://www.ibm.com/support/pages/node/7282334"},{"id":"IBM:7282347","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7282347"},{"id":"IBM:7282351","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Torch - 2.3.1+cu121 which is vulnerable to CVE-2025-32434","source_url":"https://www.ibm.com/support/pages/node/7282351"},{"id":"IBM:7282355","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7282355"},{"id":"IBM:7282434","date":"2026-08-03","title":"Security Bulletin: Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7282434"},{"id":"NCSC-2026-0268","date":"2026-08-03","title":"NCSC-2026-0268 Kwetsbaarheid verholpen in SQLite door SQLite Consortium (ingetrokken)","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0268"},{"id":"RHSA-2026:49606","date":"2026-08-03","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49606"},{"id":"RHSA-2026:49758","date":"2026-08-03","title":"perl-GD security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49758"},{"id":"BSI:WID-SEC-2026-1744","date":"2026-08-03","title":"MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1744"},{"id":"BSI:WID-SEC-2026-2240","date":"2026-08-03","title":"X.Org X11 und Xwayland: Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2240"},{"id":"BSI:WID-SEC-2026-2413","date":"2026-08-03","title":"FreeRDP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2413"},{"id":"BSI:WID-SEC-2026-2421","date":"2026-08-03","title":"rsyslog: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2421"},{"id":"BSI:WID-SEC-2026-2452","date":"2026-08-03","title":"Red Hat Ansible Automation Platform (node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, DOMPurify): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2452"},{"id":"BSI:WID-SEC-2026-2553","date":"2026-08-03","title":"Red Hat Enterprise Linux (librest, pipewire): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2553"},{"id":"BSI:WID-SEC-2026-2604","date":"2026-08-03","title":"SQLite: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2604"},{"id":"BSI:WID-SEC-2026-2611","date":"2026-08-03","title":"cPanel cPanel/WHM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2611"},{"id":"BSI:WID-SEC-2026-2612","date":"2026-08-03","title":"Gitea: Schwachstelle ermöglicht Offenlegung von Informationen und Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2612"},{"id":"BSI:WID-SEC-2026-2613","date":"2026-08-03","title":"pgAdmin: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2613"},{"id":"BSI:WID-SEC-2026-2617","date":"2026-08-03","title":"Microsoft Azure Cosmos DB: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2617"},{"id":"BSI:WID-SEC-2026-2618","date":"2026-08-03","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2618"},{"id":"BSI:WID-SEC-2026-2619","date":"2026-08-03","title":"IBM Langflow Desktop: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2619"},{"id":"BSI:WID-SEC-2026-2620","date":"2026-08-03","title":"Wazuh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2620"},{"id":"BSI:WID-SEC-2026-2622","date":"2026-08-03","title":"Bouncy Castle: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2622"},{"id":"CISCO-SA-FMC-STATIC-CRED-BET3CJH","date":"2026-08-03","title":"Cisco Secure Firewall Management Center Software Static Credential Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh"},{"id":"IBM:7282335","date":"2026-08-03","title":"Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Prototype Pollution","source_url":"https://www.ibm.com/support/pages/node/7282335"},{"id":"IBM:7282348","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses form-data which is vulnerable to CVE-2026-12143","source_url":"https://www.ibm.com/support/pages/node/7282348"},{"id":"IBM:7282349","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149","source_url":"https://www.ibm.com/support/pages/node/7282349"},{"id":"IBM:7282350","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920, CVE-2026-4372","source_url":"https://www.ibm.com/support/pages/node/7282350"},{"id":"IBM:7282352","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pacote which is vulnerable to CVE-2026-9496","source_url":"https://www.ibm.com/support/pages/node/7282352"},{"id":"IBM:7282353","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7282353"},{"id":"IBM:7282358","date":"2026-08-03","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses undici which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-9679","source_url":"https://www.ibm.com/support/pages/node/7282358"},{"id":"IBM:7282362","date":"2026-08-03","title":"Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret","source_url":"https://www.ibm.com/support/pages/node/7282362"},{"id":"IBM:7282372","date":"2026-08-03","title":"Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a vulnerability in Cassandra 4.0","source_url":"https://www.ibm.com/support/pages/node/7282372"},{"id":"IBM:7282373","date":"2026-08-03","title":"Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a vulnerability in Cassandra Reaper 4.0","source_url":"https://www.ibm.com/support/pages/node/7282373"},{"id":"IBM:7282381","date":"2026-08-03","title":"Security Bulletin: Due to the use of jackson-databind, IBM EntireX is vulnerable to multiple vulnerabilities.","source_url":"https://www.ibm.com/support/pages/node/7282381"},{"id":"IBM:7282421","date":"2026-08-03","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway","source_url":"https://www.ibm.com/support/pages/node/7282421"},{"id":"RHSA-2026:49508","date":"2026-08-03","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49508"},{"id":"RHSA-2026:49509","date":"2026-08-03","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49509"},{"id":"RHSA-2026:49511","date":"2026-08-03","title":"frr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49511"},{"id":"RHSA-2026:49512","date":"2026-08-03","title":"mingw-glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49512"},{"id":"RHSA-2026:49513","date":"2026-08-03","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49513"},{"id":"RHSA-2026:49514","date":"2026-08-03","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49514"},{"id":"RHSA-2026:49515","date":"2026-08-03","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49515"},{"id":"RHSA-2026:49516","date":"2026-08-03","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49516"},{"id":"RHSA-2026:49517","date":"2026-08-03","title":"gstreamer-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49517"},{"id":"RHSA-2026:49519","date":"2026-08-03","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49519"},{"id":"RHSA-2026:49520","date":"2026-08-03","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49520"},{"id":"RHSA-2026:49521","date":"2026-08-03","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49521"},{"id":"RHSA-2026:49522","date":"2026-08-03","title":"mariadb10.11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49522"},{"id":"RHSA-2026:49523","date":"2026-08-03","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49523"},{"id":"RHSA-2026:49524","date":"2026-08-03","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49524"},{"id":"RHSA-2026:49525","date":"2026-08-03","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49525"},{"id":"RHSA-2026:49526","date":"2026-08-03","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49526"},{"id":"RHSA-2026:49527","date":"2026-08-03","title":"frr security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49527"},{"id":"RHSA-2026:49600","date":"2026-08-03","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49600"},{"id":"RHSA-2026:49602","date":"2026-08-03","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49602"},{"id":"RHSA-2026:49603","date":"2026-08-03","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49603"},{"id":"RHSA-2026:49604","date":"2026-08-03","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49604"},{"id":"RHSA-2026:49605","date":"2026-08-03","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49605"},{"id":"RHSA-2026:49607","date":"2026-08-03","title":"frr10 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49607"},{"id":"RHSA-2026:49608","date":"2026-08-03","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49608"},{"id":"RHSA-2026:49612","date":"2026-08-03","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49612"},{"id":"RHSA-2026:49621","date":"2026-08-03","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49621"},{"id":"RHSA-2026:49642","date":"2026-08-03","title":"Red Hat Developer Hub 1.10.3 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:49642"},{"id":"RHSA-2026:49666","date":"2026-08-03","title":"libyang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49666"},{"id":"RHSA-2026:49671","date":"2026-08-03","title":"libtiff security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49671"},{"id":"RHSA-2026:49680","date":"2026-08-03","title":"Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:49680"},{"id":"RHSA-2026:49681","date":"2026-08-03","title":"Kiali 2.17.12 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:49681"},{"id":"RHSA-2026:49687","date":"2026-08-03","title":"Kiali 2.4.21 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:49687"},{"id":"RHSA-2026:49689","date":"2026-08-03","title":"Kiali 2.11.15 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:49689"},{"id":"RHSA-2026:49700","date":"2026-08-03","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49700"},{"id":"RHSA-2026:49701","date":"2026-08-03","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49701"},{"id":"RHSA-2026:49702","date":"2026-08-03","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49702"},{"id":"RHSA-2026:49703","date":"2026-08-03","title":"delve security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:49703"},{"id":"RHSA-2026:49705","date":"2026-08-03","title":"Red Hat OpenShift Service Mesh 3.0.14","source_url":"https://access.redhat.com/errata/RHSA-2026:49705"},{"id":"RHSA-2026:49712","date":"2026-08-03","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49712"},{"id":"RHSA-2026:49715","date":"2026-08-03","title":"RHEL AI 3.5 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:49715"},{"id":"RHSA-2026:49716","date":"2026-08-03","title":"RHEL AI 3.4 RPM runtime CVE fix - thrift","source_url":"https://access.redhat.com/errata/RHSA-2026:49716"},{"id":"RHSA-2026:49729","date":"2026-08-03","title":"Red Hat OpenShift Service Mesh 3.1.11","source_url":"https://access.redhat.com/errata/RHSA-2026:49729"},{"id":"RHSA-2026:49735","date":"2026-08-03","title":"Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4","source_url":"https://access.redhat.com/errata/RHSA-2026:49735"},{"id":"RHSA-2026:49744","date":"2026-08-03","title":"Red Hat OpenShift Service Mesh 3.2.8","source_url":"https://access.redhat.com/errata/RHSA-2026:49744"},{"id":"RHSA-2026:49765","date":"2026-08-03","title":"Red Hat OpenShift Service Mesh 3.3.6","source_url":"https://access.redhat.com/errata/RHSA-2026:49765"},{"id":"RHSA-2026:49770","date":"2026-08-03","title":"Red Hat OpenShift Service Mesh 3.4.1","source_url":"https://access.redhat.com/errata/RHSA-2026:49770"},{"id":"RHSA-2026:49836","date":"2026-08-03","title":"ldns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49836"},{"id":"BSI:WID-SEC-2026-0484","date":"2026-08-03","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0484"},{"id":"BSI:WID-SEC-2026-0995","date":"2026-08-03","title":"OpenSSL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0995"},{"id":"BSI:WID-SEC-2026-1597","date":"2026-08-03","title":"MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1597"},{"id":"BSI:WID-SEC-2026-1919","date":"2026-08-03","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1919"},{"id":"BSI:WID-SEC-2026-2310","date":"2026-08-03","title":"Apache Tomcat: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2310"},{"id":"BSI:WID-SEC-2026-2340","date":"2026-08-03","title":"Mozilla Firefox: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2340"},{"id":"BSI:WID-SEC-2026-2378","date":"2026-08-03","title":"X.Org X11 Server (libXfont2): Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2378"},{"id":"BSI:WID-SEC-2026-2581","date":"2026-08-03","title":"MELDUNG ZURÜCKGEZOGEN","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2581"},{"id":"BSI:WID-SEC-2026-2615","date":"2026-08-03","title":"Apache HttpComponents: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2615"},{"id":"BSI:WID-SEC-2026-2616","date":"2026-08-03","title":"GIMP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2616"},{"id":"BSI:WID-SEC-2026-2621","date":"2026-08-03","title":"N-able N-Central: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2621"},{"id":"IBM:7282361","date":"2026-08-03","title":"Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7282361"},{"id":"RHSA-2026:49667","date":"2026-08-03","title":"p11-kit security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49667"},{"id":"RHSA-2026:49668","date":"2026-08-03","title":"p11-kit security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49668"},{"id":"RHSA-2026:49775","date":"2026-08-03","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49775"},{"id":"BSI:WID-SEC-2026-2287","date":"2026-08-03","title":"Contao: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2287"},{"id":"BSI:WID-SEC-2026-2519","date":"2026-08-03","title":"Checkmk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2519"},{"id":"RHSA-2026:49661","date":"2026-08-03","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49661"},{"id":"RHSA-2026:49714","date":"2026-08-03","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49714"},{"id":"RHSA-2026:49767","date":"2026-08-03","title":"RHTAS 1.4.3 - CLI Stack Release","source_url":"https://access.redhat.com/errata/RHSA-2026:49767"},{"id":"IBM:7282322","date":"2026-08-02","title":"Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in log4j core (CVE-2026-34477, CVE-2026-34478)","source_url":"https://www.ibm.com/support/pages/node/7282322"},{"id":"GHSA-6VCH-Q96H-7GC3","date":"2026-08-01","title":"etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline","source_url":"https://github.com/advisories/GHSA-6vch-q96h-7gc3"},{"id":"IBM:7282147","date":"2026-08-01","title":"Security Bulletin: Langflow is affected by security vulnerabilities in Model Context Protocol features","source_url":"https://www.ibm.com/support/pages/node/7282147"},{"id":"IBM:7282299","date":"2026-08-01","title":"Security Bulletin: There is a vulnerability in netty-handler-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-44249)","source_url":"https://www.ibm.com/support/pages/node/7282299"},{"id":"RHSA-2026:49212","date":"2026-08-01","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49212"},{"id":"GHSA-34RH-WP3J-6CXC","date":"2026-08-01","title":"Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute","source_url":"https://github.com/advisories/GHSA-34rh-wp3j-6cxc"},{"id":"GHSA-C5PX-58J2-7FQP","date":"2026-08-01","title":"gemini-bridge vulnerable to arbitrary local file read via consult_gemini_with_files inline mode","source_url":"https://github.com/advisories/GHSA-c5px-58j2-7fqp"},{"id":"GHSA-G65V-27R3-5P6M","date":"2026-08-01","title":"guard-livereload has a directory traversal vulnerability","source_url":"https://github.com/advisories/GHSA-g65v-27r3-5p6m"},{"id":"GHSA-JHH7-832H-F8HV","date":"2026-08-01","title":"WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)","source_url":"https://github.com/advisories/GHSA-jhh7-832h-f8hv"},{"id":"GHSA-PJP7-Q6WP-97QX","date":"2026-08-01","title":"core-geonetwork has an Open Redirect Bypass","source_url":"https://github.com/advisories/GHSA-pjp7-q6wp-97qx"},{"id":"GHSA-VVP7-H4FJ-M28W","date":"2026-08-01","title":"FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files","source_url":"https://github.com/advisories/GHSA-vvp7-h4fj-m28w"},{"id":"GHSA-WG4G-WM44-CH5J","date":"2026-08-01","title":"Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message","source_url":"https://github.com/advisories/GHSA-wg4g-wm44-ch5j"},{"id":"IBM:7282298","date":"2026-08-01","title":"Security Bulletin: There is a vulnerability in IBM WebSphere Application Server used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-14915)","source_url":"https://www.ibm.com/support/pages/node/7282298"},{"id":"IBM:7282300","date":"2026-08-01","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to server-side request forgery due to IBM WebSphere Application Server Liberty (CVE-2026-1561)","source_url":"https://www.ibm.com/support/pages/node/7282300"},{"id":"IBM:7282301","date":"2026-08-01","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to privilege escalation due to IBM WebSphere Application Server Liberty (CVE-2025-14915)","source_url":"https://www.ibm.com/support/pages/node/7282301"},{"id":"IBM:7282302","date":"2026-08-01","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are affected by weaker than expected security in IBM WebSphere Application Server Liberty (CVE-2025-14917)","source_url":"https://www.ibm.com/support/pages/node/7282302"},{"id":"IBM:7282303","date":"2026-08-01","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to weaker than expected security controls in IBM WebSphere Application Server Liberty (CVE-2025-14923)","source_url":"https://www.ibm.com/support/pages/node/7282303"},{"id":"RHSA-2026:49360","date":"2026-08-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49360"},{"id":"RHSA-2026:49361","date":"2026-08-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49361"},{"id":"RHSA-2026:49387","date":"2026-08-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49387"},{"id":"RHSA-2026:49401","date":"2026-08-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49401"},{"id":"GHSA-6H5J-32CF-4253","date":"2026-07-31","title":"Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass","source_url":"https://github.com/advisories/GHSA-6h5j-32cf-4253"},{"id":"IBM:7282097","date":"2026-07-31","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for July 2026","source_url":"https://www.ibm.com/support/pages/node/7282097"},{"id":"IBM:7282192","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Server is affected by multiple vulnerability in the netty-codec-http library that could allow an attacker to exploit integer overflow conditions when processing chunked HTTP requests(CVE-2026-42581, C…","source_url":"https://www.ibm.com/support/pages/node/7282192"},{"id":"IBM:7282279","date":"2026-07-31","title":"Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-49268)","source_url":"https://www.ibm.com/support/pages/node/7282279"},{"id":"IBM:7282287","date":"2026-07-31","title":"Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization","source_url":"https://www.ibm.com/support/pages/node/7282287"},{"id":"NCSC-2026-0273","date":"2026-07-31","title":"NCSC-2026-0273 Kwetsbaarheden verholpen in Adobe Campaign Classic","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0273"},{"id":"NCSC-2026-0274","date":"2026-07-31","title":"NCSC-2026-0274 Kwetsbaarheid verholpen in SolarWinds Web Help Desk","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0274"},{"id":"BSI:WID-SEC-2025-1144","date":"2026-07-31","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1144"},{"id":"BSI:WID-SEC-2026-0324","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0324"},{"id":"BSI:WID-SEC-2026-1233","date":"2026-07-31","title":"PackageKit: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1233"},{"id":"BSI:WID-SEC-2026-1531","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1531"},{"id":"BSI:WID-SEC-2026-2366","date":"2026-07-31","title":"IBM Langflow Desktop: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2366"},{"id":"BSI:WID-SEC-2026-2533","date":"2026-07-31","title":"Erlang/OTP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2533"},{"id":"BSI:WID-SEC-2026-2549","date":"2026-07-31","title":"Samba: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2549"},{"id":"BSI:WID-SEC-2026-2564","date":"2026-07-31","title":"IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2564"},{"id":"BSI:WID-SEC-2026-2568","date":"2026-07-31","title":"Xen: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2568"},{"id":"BSI:WID-SEC-2026-2569","date":"2026-07-31","title":"VMware Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2569"},{"id":"BSI:WID-SEC-2026-2574","date":"2026-07-31","title":"Ruby on Rails: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2574"},{"id":"BSI:WID-SEC-2026-2580","date":"2026-07-31","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2580"},{"id":"BSI:WID-SEC-2026-2598","date":"2026-07-31","title":"PHP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2598"},{"id":"BSI:WID-SEC-2026-2600","date":"2026-07-31","title":"Rancher: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2600"},{"id":"BSI:WID-SEC-2026-2601","date":"2026-07-31","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2601"},{"id":"BSI:WID-SEC-2026-2607","date":"2026-07-31","title":"Gladinet CentreStack: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2607"},{"id":"GHSA-CJ54-HPCC-GJ6H","date":"2026-07-31","title":"Thumbor has path traversal via post-validation URL decoding bypass in file_loader","source_url":"https://github.com/advisories/GHSA-cj54-hpcc-gj6h"},{"id":"GHSA-MX5J-MP4F-G8JG","date":"2026-07-31","title":"Savon::Model evaluates WSDL operation names as Ruby source","source_url":"https://github.com/advisories/GHSA-mx5j-mp4f-g8jg"},{"id":"GHSA-PHJ3-59PF-CP83","date":"2026-07-31","title":"Thumbor proportion filter allows unbounded post-transform resize leading to remote DoS","source_url":"https://github.com/advisories/GHSA-phj3-59pf-cp83"},{"id":"GHSA-RXCW-MC6F-6HR3","date":"2026-07-31","title":"Jodit Editor: Mutation XSS in jodit clean-html via a MathML/style rawtext carrier","source_url":"https://github.com/advisories/GHSA-rxcw-mc6f-6hr3"},{"id":"GHSA-WF43-FPP3-CF65","date":"2026-07-31","title":"@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag","source_url":"https://github.com/advisories/GHSA-wf43-fpp3-cf65"},{"id":"IBM:7282080","date":"2026-07-31","title":"Security Bulletin: Sterling Order Management System Software, (On prem)","source_url":"https://www.ibm.com/support/pages/node/7282080"},{"id":"IBM:7282128","date":"2026-07-31","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules","source_url":"https://www.ibm.com/support/pages/node/7282128"},{"id":"IBM:7282129","date":"2026-07-31","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to linkify-it and httpcore5 (CVE-2026-59887, CVE-2026-54428 & CVE-2026-54399)","source_url":"https://www.ibm.com/support/pages/node/7282129"},{"id":"IBM:7282136","date":"2026-07-31","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera Enterprise Webapps","source_url":"https://www.ibm.com/support/pages/node/7282136"},{"id":"IBM:7282146","date":"2026-07-31","title":"Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition","source_url":"https://www.ibm.com/support/pages/node/7282146"},{"id":"IBM:7282148","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Client is vulnerable to cross-site request forgery token leakage due to Angular (CVE-2025-66035)","source_url":"https://www.ibm.com/support/pages/node/7282148"},{"id":"IBM:7282152","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are vulnerable to denial of service due to jose4j (CVE-2024-29371)","source_url":"https://www.ibm.com/support/pages/node/7282152"},{"id":"IBM:7282182","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Operations Center is affected by a vulnerability in IBM WebSphere Application Server Liberty that may allow a remote attacker to trigger denial-of-service conditions. (CVE-2026-3621, CWE-269)","source_url":"https://www.ibm.com/support/pages/node/7282182"},{"id":"IBM:7282183","date":"2026-07-31","title":"Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-14974, CVE-2026-14515)","source_url":"https://www.ibm.com/support/pages/node/7282183"},{"id":"IBM:7282184","date":"2026-07-31","title":"Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-16184)","source_url":"https://www.ibm.com/support/pages/node/7282184"},{"id":"IBM:7282185","date":"2026-07-31","title":"Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server (CVE-2025-36384, CVE-2025-58056, CVE-2024-47072).","source_url":"https://www.ibm.com/support/pages/node/7282185"},{"id":"IBM:7282186","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse Jersey-client library that could cause critical SSL/TLS security configurations issues (CVE-2025-12383).","source_url":"https://www.ibm.com/support/pages/node/7282186"},{"id":"IBM:7282195","date":"2026-07-31","title":"Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.","source_url":"https://www.ibm.com/support/pages/node/7282195"},{"id":"IBM:7282197","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse http2-common library that could cause resource exhaustion (CVE-2025-5115).","source_url":"https://www.ibm.com/support/pages/node/7282197"},{"id":"IBM:7282296","date":"2026-07-31","title":"Security Bulletin: Security vulnerability has been found in IBM Application Gateway Operator","source_url":"https://www.ibm.com/support/pages/node/7282296"},{"id":"NCSC-2026-0272","date":"2026-07-31","title":"NCSC-2026-0272 Kwetsbaarheden verholpen in JFrog Artifactory","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0272"},{"id":"RHSA-2026:49033","date":"2026-07-31","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49033"},{"id":"RHSA-2026:49213","date":"2026-07-31","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49213"},{"id":"RHSA-2026:49214","date":"2026-07-31","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:49214"},{"id":"BSI:WID-SEC-2024-1008","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1008"},{"id":"BSI:WID-SEC-2024-1188","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1188"},{"id":"BSI:WID-SEC-2024-1197","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1197"},{"id":"BSI:WID-SEC-2024-1259","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifischen Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1259"},{"id":"BSI:WID-SEC-2024-1722","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1722"},{"id":"BSI:WID-SEC-2024-1939","date":"2026-07-31","title":"Linux Kernel (ntfs3): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1939"},{"id":"BSI:WID-SEC-2024-2173","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2173"},{"id":"BSI:WID-SEC-2024-3251","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3251"},{"id":"BSI:WID-SEC-2024-3762","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3762"},{"id":"BSI:WID-SEC-2025-0047","date":"2026-07-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0047"},{"id":"BSI:WID-SEC-2025-0944","date":"2026-07-31","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0944"},{"id":"BSI:WID-SEC-2025-2129","date":"2026-07-31","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2129"},{"id":"BSI:WID-SEC-2025-2449","date":"2026-07-31","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2449"},{"id":"BSI:WID-SEC-2025-2871","date":"2026-07-31","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2871"},{"id":"BSI:WID-SEC-2026-0802","date":"2026-07-31","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0802"},{"id":"BSI:WID-SEC-2026-0882","date":"2026-07-31","title":"GIMP: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0882"},{"id":"BSI:WID-SEC-2026-1926","date":"2026-07-31","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1926"},{"id":"BSI:WID-SEC-2026-2026","date":"2026-07-31","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2026"},{"id":"BSI:WID-SEC-2026-2228","date":"2026-07-31","title":"Red Hat Enterprise Linux (freeipmi): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2228"},{"id":"BSI:WID-SEC-2026-2466","date":"2026-07-31","title":"IBM WebSphere Application Server Liberty: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2466"},{"id":"BSI:WID-SEC-2026-2488","date":"2026-07-31","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2488"},{"id":"BSI:WID-SEC-2026-2521","date":"2026-07-31","title":"ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2521"},{"id":"BSI:WID-SEC-2026-2578","date":"2026-07-31","title":"ImageMagick: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2578"},{"id":"BSI:WID-SEC-2026-2597","date":"2026-07-31","title":"WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2597"},{"id":"BSI:WID-SEC-2026-2599","date":"2026-07-31","title":"Redis: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2599"},{"id":"BSI:WID-SEC-2026-2602","date":"2026-07-31","title":"docker: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2602"},{"id":"BSI:WID-SEC-2026-2605","date":"2026-07-31","title":"OpenVPN: Schwachstelle ermöglicht DoS und die Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2605"},{"id":"BSI:WID-SEC-2026-2608","date":"2026-07-31","title":"Apache Tika: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2608"},{"id":"GHSA-45QG-252V-3F7P","date":"2026-07-31","title":"Jodit has cross-site scripting (XSS) via <script> nested in SVG that bypasses clean-html sanitization","source_url":"https://github.com/advisories/GHSA-45qg-252v-3f7p"},{"id":"GHSA-5957-5C94-3V7W","date":"2026-07-31","title":"Jodit has prototype pollution via Jodit.configure() / ConfigMerge","source_url":"https://github.com/advisories/GHSA-5957-5c94-3v7w"},{"id":"GHSA-6X26-6R6F-M537","date":"2026-07-31","title":"Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot","source_url":"https://github.com/advisories/GHSA-6x26-6r6f-m537"},{"id":"GHSA-J839-GQQ4-GF9J","date":"2026-07-31","title":"Jodit has incomplete javascript: scheme normalization in sanitizeHTMLElement href check that allows link XSS","source_url":"https://github.com/advisories/GHSA-j839-gqq4-gf9j"},{"id":"GHSA-MW3H-QJXJ-6XG9","date":"2026-07-31","title":"Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature","source_url":"https://github.com/advisories/GHSA-mw3h-qjxj-6xg9"},{"id":"GHSA-PJXJ-PCHX-4C3M","date":"2026-07-31","title":"ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow","source_url":"https://github.com/advisories/GHSA-pjxj-pchx-4c3m"},{"id":"GHSA-VCCV-CMXP-4J9H","date":"2026-07-31","title":"sanitize-html has incomplete URI scheme validation in that allows javascript: URIs through action, formaction, data, poster, and background attributes","source_url":"https://github.com/advisories/GHSA-vccv-cmxp-4j9h"},{"id":"IBM:7282156","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Client and Virtual Environments are affected by multiple vulnerabilities in IBM SDK, Java Technology Edition (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-2…","source_url":"https://www.ibm.com/support/pages/node/7282156"},{"id":"IBM:7282190","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Apache POI library that could lead to denial-of-service when processing specially crafted archive files (CVE-2019-12415).","source_url":"https://www.ibm.com/support/pages/node/7282190"},{"id":"IBM:7282191","date":"2026-07-31","title":"Security Bulletin: IBM Storage Protect Operations Center is affected by a vulnerability in IBM WebSphere Application Server Liberty that may allow inadequate validation and processing of maliciously crafted input. (CVE-2026-4410, CWE-400)","source_url":"https://www.ibm.com/support/pages/node/7282191"},{"id":"USN-8620-3","date":"2026-07-31","title":"Linux kernel (Intel IoTG) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8620-3"},{"id":"USN-8620-4","date":"2026-07-31","title":"Linux kernel (Intel IoTG) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8620-4"},{"id":"BSI:WID-SEC-2026-2603","date":"2026-07-31","title":"Apache Superset: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2603"},{"id":"GHSA-34PJ-2622-JVXQ","date":"2026-07-31","title":"@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header","source_url":"https://github.com/advisories/GHSA-34pj-2622-jvxq"},{"id":"GHSA-WQQC-JJCQ-VFXM","date":"2026-07-31","title":"sigstore-go fails to check signature timestamps against a signing key's validity period","source_url":"https://github.com/advisories/GHSA-wqqc-jjcq-vfxm"},{"id":"RHSA-2026:49317","date":"2026-07-31","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:49317"},{"id":"GHSA-HF3J-86P7-MFW8","date":"2026-07-30","title":"AWS Amplify Studio UI Component Properties Has an Input Validation Issue","source_url":"https://github.com/advisories/GHSA-hf3j-86p7-mfw8"},{"id":"GHSA-JX74-CQJV-2C67","date":"2026-07-30","title":"Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration","source_url":"https://github.com/advisories/GHSA-jx74-cqjv-2c67"},{"id":"GHSA-XR9X-R78C-5HRM","date":"2026-07-30","title":"Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing","source_url":"https://github.com/advisories/GHSA-xr9x-r78c-5hrm"},{"id":"IBM:7281406","date":"2026-07-30","title":"Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps","source_url":"https://www.ibm.com/support/pages/node/7281406"},{"id":"IBM:7281913","date":"2026-07-30","title":"Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7281913"},{"id":"BSI:WID-SEC-2025-1417","date":"2026-07-30","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1417"},{"id":"BSI:WID-SEC-2026-0345","date":"2026-07-30","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0345"},{"id":"BSI:WID-SEC-2026-0548","date":"2026-07-30","title":"Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0548"},{"id":"BSI:WID-SEC-2026-1544","date":"2026-07-30","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1544"},{"id":"GHSA-C9HR-64H3-GXPC","date":"2026-07-30","title":"Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation","source_url":"https://github.com/advisories/GHSA-c9hr-64h3-gxpc"},{"id":"GHSA-CG4G-M8JX-VJV2","date":"2026-07-30","title":"dssrf has an SSRF bypass with remove_at_symbol_in_string","source_url":"https://github.com/advisories/GHSA-cg4g-m8jx-vjv2"},{"id":"GHSA-PGWH-4JJ4-QM8V","date":"2026-07-30","title":"Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)","source_url":"https://github.com/advisories/GHSA-pgwh-4jj4-qm8v"},{"id":"GHSA-QQ9Q-XGM3-XV9G","date":"2026-07-30","title":"Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url","source_url":"https://github.com/advisories/GHSA-qq9q-xgm3-xv9g"},{"id":"IBM:7281904","date":"2026-07-30","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by a DoS vulnerability","source_url":"https://www.ibm.com/support/pages/node/7281904"},{"id":"IBM:7281905","date":"2026-07-30","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7281905"},{"id":"NCSC-2026-0270","date":"2026-07-30","title":"NCSC-2026-0270 Kwetsbaarheden verholpen in GitLab door GitLab Inc.","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0270"},{"id":"NCSC-2026-0271","date":"2026-07-30","title":"NCSC-2026-0271 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall Management Center","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0271"},{"id":"RHSA-2026:43225","date":"2026-07-30","title":"OpenShift Container Platform 4.15.67 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43225"},{"id":"RHSA-2026:43226","date":"2026-07-30","title":"OpenShift Container Platform 4.15.67 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43226"},{"id":"RHSA-2026:43227","date":"2026-07-30","title":"OpenShift Container Platform 4.15.67 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43227"},{"id":"RHSA-2026:43252","date":"2026-07-30","title":"OpenShift Container Platform 4.14.70 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43252"},{"id":"RHSA-2026:43253","date":"2026-07-30","title":"OpenShift Container Platform 4.14.70 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43253"},{"id":"RHSA-2026:43331","date":"2026-07-30","title":"OpenShift Container Platform 4.16.67 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43331"},{"id":"RHSA-2026:47172","date":"2026-07-30","title":"Red Hat build of Quarkus 3.33.2.SP3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47172"},{"id":"RHSA-2026:48386","date":"2026-07-30","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48386"},{"id":"RHSA-2026:48585","date":"2026-07-30","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48585"},{"id":"RHSA-2026:48586","date":"2026-07-30","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48586"},{"id":"RHSA-2026:48603","date":"2026-07-30","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48603"},{"id":"RHSA-2026:48604","date":"2026-07-30","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48604"},{"id":"RHSA-2026:48605","date":"2026-07-30","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48605"},{"id":"RHSA-2026:48606","date":"2026-07-30","title":"hplip security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48606"},{"id":"RHSA-2026:48615","date":"2026-07-30","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48615"},{"id":"RHSA-2026:48703","date":"2026-07-30","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48703"},{"id":"RHSA-2026:48759","date":"2026-07-30","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48759"},{"id":"RHSA-2026:48760","date":"2026-07-30","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48760"},{"id":"RHSA-2026:48790","date":"2026-07-30","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48790"},{"id":"RHSA-2026:48845","date":"2026-07-30","title":"OpenJDK 25.0.4 Security Update for Windows Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:48845"},{"id":"RHSA-2026:48865","date":"2026-07-30","title":"abrt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48865"},{"id":"RHSA-2026:48866","date":"2026-07-30","title":"abrt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48866"},{"id":"RHSA-2026:48872","date":"2026-07-30","title":"RHACS 4.9.10 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:48872"},{"id":"RHSA-2026:48891","date":"2026-07-30","title":"RHACS 4.11.2 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:48891"},{"id":"RHSA-2026:48913","date":"2026-07-30","title":"RHACS 4.10.6 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:48913"},{"id":"RHSA-2026:48933","date":"2026-07-30","title":"Red Hat Quay 3.15.7","source_url":"https://access.redhat.com/errata/RHSA-2026:48933"},{"id":"RHSA-2026:48959","date":"2026-07-30","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48959"},{"id":"RHSA-2026:48960","date":"2026-07-30","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48960"},{"id":"RHSA-2026:48961","date":"2026-07-30","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48961"},{"id":"BSI:WID-SEC-2026-1950","date":"2026-07-30","title":"Red Hat OpenShift Container Platform (kubelet, cri-o, kube-apiserver): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1950"},{"id":"BSI:WID-SEC-2026-2040","date":"2026-07-30","title":"Red Hat OpenShift Container Platform (Router): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2040"},{"id":"BSI:WID-SEC-2026-2088","date":"2026-07-30","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2088"},{"id":"BSI:WID-SEC-2026-2115","date":"2026-07-30","title":"vim: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2115"},{"id":"BSI:WID-SEC-2026-2221","date":"2026-07-30","title":"OpenSSH: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2221"},{"id":"ICSA-26-211-01","date":"2026-07-30","title":"MikroTik RouterOS","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01"},{"id":"ICSA-26-211-02","date":"2026-07-30","title":"Johnson Controls OpenBlue Employee","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02"},{"id":"ICSA-26-211-03","date":"2026-07-30","title":"Toptech Systems RCU II+ and Multiload II+","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03"},{"id":"ICSA-26-211-04","date":"2026-07-30","title":"Schneider Electric IGSS","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04"},{"id":"ICSA-26-211-05","date":"2026-07-30","title":"Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Module","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-05"},{"id":"ICSA-26-211-06","date":"2026-07-30","title":"NASA Core Flight System (cFS) Health & Safety (HS) Application","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06"},{"id":"ICSA-26-211-07","date":"2026-07-30","title":"Mitsubishi Electric CC-Link IE TSN Communication Protocol","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-07"},{"id":"ICSA-26-211-08","date":"2026-07-30","title":"o6 Automation open62541","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"},{"id":"ICSA-26-211-09","date":"2026-07-30","title":"Watchfire Controller Software","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09"},{"id":"ICSA-26-211-10","date":"2026-07-30","title":"MZ Automation GmbH libiec61850","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10"},{"id":"ICSA-26-211-11","date":"2026-07-30","title":"MZ Automation lib60870","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11"},{"id":"RHSA-2026:48811","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48811"},{"id":"RHSA-2026:48813","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48813"},{"id":"RHSA-2026:48814","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48814"},{"id":"RHSA-2026:48815","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48815"},{"id":"RHSA-2026:48816","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48816"},{"id":"RHSA-2026:48817","date":"2026-07-30","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48817"},{"id":"RHSA-2026:48826","date":"2026-07-30","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48826"},{"id":"USN-8625-1","date":"2026-07-30","title":"OpenSSL vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8625-1"},{"id":"GHSA-4MRV-5P47-P938","date":"2026-07-30","title":"MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure","source_url":"https://github.com/advisories/GHSA-4mrv-5p47-p938"},{"id":"RHSA-2026:48482","date":"2026-07-30","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48482"},{"id":"RHSA-2026:48537","date":"2026-07-30","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48537"},{"id":"RHSA-2026:48758","date":"2026-07-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48758"},{"id":"RHSA-2026:48771","date":"2026-07-30","title":"RHTAS 1.4.3 - CLI Stack Release","source_url":"https://access.redhat.com/errata/RHSA-2026:48771"},{"id":"RHSA-2026:48780","date":"2026-07-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48780"},{"id":"RHSA-2026:48788","date":"2026-07-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48788"},{"id":"RHSA-2026:48799","date":"2026-07-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48799"},{"id":"IBM:7281743","date":"2026-07-29","title":"Security Bulletin: Multiple vulnerabilities impact AIX due to CURL libcurl (CVE-2026-10536, CVE-2026-11856, CVE-2026-8286, CVE-2026-8458, CVE-2026-8924, CVE-2026-8927, CVE-2026-8932, CVE-2026-9547).","source_url":"https://www.ibm.com/support/pages/node/7281743"},{"id":"NCSC-2026-0269","date":"2026-07-29","title":"NCSC-2026-0269 Kwetsbaarheden verholpen in VMware producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269"},{"id":"RHSA-2026:47735","date":"2026-07-29","title":"multicluster engine for Kubernetes v2.8.9 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47735"},{"id":"RHSA-2026:47949","date":"2026-07-29","title":"multicluster engine for Kubernetes v2.6.13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47949"},{"id":"RHSA-2026:47953","date":"2026-07-29","title":"multicluster engine for Kubernetes v2.9.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47953"},{"id":"RHSA-2026:47974","date":"2026-07-29","title":"multicluster engine for Kubernetes v2.11.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47974"},{"id":"RHSA-2026:48284","date":"2026-07-29","title":"multicluster engine for Kubernetes v2.17.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48284"},{"id":"GHSA-7H3G-4W2F-FJ2F","date":"2026-07-29","title":"proot-distro has a Container Isolation Bypass via Crafted Restore Archive","source_url":"https://github.com/advisories/GHSA-7h3g-4w2f-fj2f"},{"id":"GHSA-9XQ3-3FQG-4VG7","date":"2026-07-29","title":"`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive","source_url":"https://github.com/advisories/GHSA-9xq3-3fqg-4vg7"},{"id":"GHSA-FH2F-XFXC-Q9CC","date":"2026-07-29","title":"openhole-server vulnerable to path traversal via URL-decoded request path","source_url":"https://github.com/advisories/GHSA-fh2f-xfxc-q9cc"},{"id":"GHSA-VJ5C-M527-MPFF","date":"2026-07-29","title":"Style Dictionary - Prototype Pollution in convertTokenData utility function","source_url":"https://github.com/advisories/GHSA-vj5c-m527-mpff"},{"id":"RHSA-2026:44230","date":"2026-07-29","title":"OpenShift Container Platform 4.18.50 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44230"},{"id":"RHSA-2026:44231","date":"2026-07-29","title":"OpenShift Container Platform 4.19.40 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44231"},{"id":"RHSA-2026:44233","date":"2026-07-29","title":"OpenShift Container Platform 4.18.50 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44233"},{"id":"RHSA-2026:44235","date":"2026-07-29","title":"OpenShift Container Platform 4.19.40 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44235"},{"id":"RHSA-2026:47189","date":"2026-07-29","title":"Red Hat build of Quarkus 3.27.4.SP3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47189"},{"id":"RHSA-2026:47632","date":"2026-07-29","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47632"},{"id":"RHSA-2026:47633","date":"2026-07-29","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47633"},{"id":"RHSA-2026:47714","date":"2026-07-29","title":"grafana security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47714"},{"id":"RHSA-2026:47717","date":"2026-07-29","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47717"},{"id":"RHSA-2026:47718","date":"2026-07-29","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47718"},{"id":"RHSA-2026:47719","date":"2026-07-29","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47719"},{"id":"RHSA-2026:47721","date":"2026-07-29","title":"grafana-pcp security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47721"},{"id":"RHSA-2026:47722","date":"2026-07-29","title":"grafana security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47722"},{"id":"RHSA-2026:47731","date":"2026-07-29","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47731"},{"id":"RHSA-2026:47737","date":"2026-07-29","title":"Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47737"},{"id":"RHSA-2026:47757","date":"2026-07-29","title":"openssh security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47757"},{"id":"RHSA-2026:47952","date":"2026-07-29","title":"Logging for Red Hat OpenShift - 6.2.12","source_url":"https://access.redhat.com/errata/RHSA-2026:47952"},{"id":"RHSA-2026:47981","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47981"},{"id":"RHSA-2026:47983","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47983"},{"id":"RHSA-2026:47984","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47984"},{"id":"RHSA-2026:47997","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47997"},{"id":"RHSA-2026:47998","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47998"},{"id":"RHSA-2026:48016","date":"2026-07-29","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48016"},{"id":"RHSA-2026:48032","date":"2026-07-29","title":"nodejs-nodemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48032"},{"id":"RHSA-2026:48033","date":"2026-07-29","title":"nodejs22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48033"},{"id":"RHSA-2026:48034","date":"2026-07-29","title":"nodejs24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48034"},{"id":"RHSA-2026:48085","date":"2026-07-29","title":"Red Hat Quay 3.18.0","source_url":"https://access.redhat.com/errata/RHSA-2026:48085"},{"id":"RHSA-2026:48095","date":"2026-07-29","title":"RHCS 10.8 bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48095"},{"id":"RHSA-2026:48118","date":"2026-07-29","title":"Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP3)","source_url":"https://access.redhat.com/errata/RHSA-2026:48118"},{"id":"RHSA-2026:48124","date":"2026-07-29","title":"Red Hat OpenShift Dev Spaces 3.29.1 Release.","source_url":"https://access.redhat.com/errata/RHSA-2026:48124"},{"id":"RHSA-2026:48126","date":"2026-07-29","title":"Red Hat Developer Hub 1.10.3 Plugin Catalog GA plugins release.","source_url":"https://access.redhat.com/errata/RHSA-2026:48126"},{"id":"RHSA-2026:48151","date":"2026-07-29","title":"Red Hat build of Cryostat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48151"},{"id":"RHSA-2026:48171","date":"2026-07-29","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48171"},{"id":"RHSA-2026:48222","date":"2026-07-29","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48222"},{"id":"RHSA-2026:48225","date":"2026-07-29","title":"perl:5.32 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:48225"},{"id":"GHSA-2XMW-F8J8-WFXC","date":"2026-07-29","title":"Pagy I18n locale option is not validated before being used in a file path","source_url":"https://github.com/advisories/GHSA-2xmw-f8j8-wfxc"},{"id":"GHSA-6XX4-9WP6-65P7","date":"2026-07-29","title":"skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source","source_url":"https://github.com/advisories/GHSA-6xx4-9wp6-65p7"},{"id":"GHSA-964W-F6GJ-5236","date":"2026-07-29","title":"goshs has ACL Bypass & Path Traversal","source_url":"https://github.com/advisories/GHSA-964w-f6gj-5236"},{"id":"GHSA-XGR6-PQJV-3PF8","date":"2026-07-29","title":"Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page","source_url":"https://github.com/advisories/GHSA-xgr6-pqjv-3pf8"},{"id":"USN-8615-2","date":"2026-07-29","title":"Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8615-2"},{"id":"USN-8620-2","date":"2026-07-29","title":"Linux kernel (Azure FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8620-2"},{"id":"USN-8622-1","date":"2026-07-29","title":"Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8622-1"},{"id":"USN-8623-1","date":"2026-07-29","title":"Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8623-1"},{"id":"USN-8624-1","date":"2026-07-29","title":"Sinatra vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8624-1"},{"id":"GHSA-8HM4-R66F-29WR","date":"2026-07-29","title":"Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync","source_url":"https://github.com/advisories/GHSA-8hm4-r66f-29wr"},{"id":"GHSA-996F-334J-67G7","date":"2026-07-29","title":"Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS","source_url":"https://github.com/advisories/GHSA-996f-334j-67g7"},{"id":"RHSA-2026:47749","date":"2026-07-29","title":"php:8.2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47749"},{"id":"RHSA-2026:47750","date":"2026-07-29","title":"php:7.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47750"},{"id":"RHSA-2026:47768","date":"2026-07-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47768"},{"id":"RHSA-2026:47889","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47889"},{"id":"RHSA-2026:47891","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47891"},{"id":"RHSA-2026:47892","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47892"},{"id":"RHSA-2026:47896","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47896"},{"id":"RHSA-2026:47915","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47915"},{"id":"RHSA-2026:47926","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47926"},{"id":"RHSA-2026:47930","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47930"},{"id":"RHSA-2026:47932","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47932"},{"id":"RHSA-2026:48197","date":"2026-07-29","title":"php:8.3 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48197"},{"id":"RHSA-2026:48238","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48238"},{"id":"RHSA-2026:48241","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48241"},{"id":"RHSA-2026:48246","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48246"},{"id":"RHSA-2026:48253","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48253"},{"id":"RHSA-2026:48273","date":"2026-07-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48273"},{"id":"RHSA-2026:48278","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48278"},{"id":"RHSA-2026:48279","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48279"},{"id":"RHSA-2026:48305","date":"2026-07-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:48305"},{"id":"RHSA-2026:48306","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48306"},{"id":"RHSA-2026:48320","date":"2026-07-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:48320"},{"id":"IBM:7281662","date":"2026-07-28","title":"Security Bulletin: terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode","source_url":"https://www.ibm.com/support/pages/node/7281662"},{"id":"NCSC-2026-0267","date":"2026-07-28","title":"NCSC-2026-0267 Kwetsbaarheden verholpen in Apple MacOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0267"},{"id":"RHSA-2026:44232","date":"2026-07-28","title":"OpenShift Container Platform 4.22.7 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44232"},{"id":"RHSA-2026:47388","date":"2026-07-28","title":"multicluster engine for Kubernetes v2.10.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47388"},{"id":"BSI:WID-SEC-2026-1199","date":"2026-07-28","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1199"},{"id":"BSI:WID-SEC-2026-1488","date":"2026-07-28","title":"Microsoft Developer Tools: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1488"},{"id":"BSI:WID-SEC-2026-1934","date":"2026-07-28","title":"Red Hat OpenShift Service Mesh: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1934"},{"id":"BSI:WID-SEC-2026-2102","date":"2026-07-28","title":"Linux Kernel: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2102"},{"id":"BSI:WID-SEC-2026-2551","date":"2026-07-28","title":"Apache Airflow FAB provider: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2551"},{"id":"IBM:7281660","date":"2026-07-28","title":"Security Bulletin: terraform-mcp-server vulnerable to server side request forgery leading to token exposure","source_url":"https://www.ibm.com/support/pages/node/7281660"},{"id":"IBM:7281661","date":"2026-07-28","title":"Security Bulletin: terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user","source_url":"https://www.ibm.com/support/pages/node/7281661"},{"id":"NCSC-2026-0266","date":"2026-07-28","title":"NCSC-2026-0266 Kwetsbaarheden verholpen in Apple iOS en iPadOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0266"},{"id":"RHSA-2026:44237","date":"2026-07-28","title":"OpenShift Container Platform 4.22.7 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44237"},{"id":"RHSA-2026:44239","date":"2026-07-28","title":"OpenShift Container Platform 4.22.7 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:44239"},{"id":"RHSA-2026:44259","date":"2026-07-28","title":"OpenShift Container Platform 4.20.31 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44259"},{"id":"RHSA-2026:44262","date":"2026-07-28","title":"OpenShift Container Platform 4.21.26 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44262"},{"id":"RHSA-2026:44263","date":"2026-07-28","title":"OpenShift Container Platform 4.20.31 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44263"},{"id":"RHSA-2026:44264","date":"2026-07-28","title":"OpenShift Container Platform 4.20.31 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:44264"},{"id":"RHSA-2026:44267","date":"2026-07-28","title":"OpenShift Container Platform 4.21.26 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44267"},{"id":"RHSA-2026:44268","date":"2026-07-28","title":"OpenShift Container Platform 4.21.26 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:44268"},{"id":"RHSA-2026:46990","date":"2026-07-28","title":"sssd security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:46990"},{"id":"RHSA-2026:47010","date":"2026-07-28","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47010"},{"id":"RHSA-2026:47011","date":"2026-07-28","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47011"},{"id":"RHSA-2026:47017","date":"2026-07-28","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47017"},{"id":"RHSA-2026:47032","date":"2026-07-28","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47032"},{"id":"RHSA-2026:47046","date":"2026-07-28","title":"httpd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47046"},{"id":"RHSA-2026:47051","date":"2026-07-28","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47051"},{"id":"RHSA-2026:47052","date":"2026-07-28","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47052"},{"id":"RHSA-2026:47057","date":"2026-07-28","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47057"},{"id":"RHSA-2026:47058","date":"2026-07-28","title":"nodejs:22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47058"},{"id":"RHSA-2026:47060","date":"2026-07-28","title":"nodejs:24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47060"},{"id":"RHSA-2026:47069","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47069"},{"id":"RHSA-2026:47070","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47070"},{"id":"RHSA-2026:47071","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47071"},{"id":"RHSA-2026:47075","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47075"},{"id":"RHSA-2026:47076","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47076"},{"id":"RHSA-2026:47082","date":"2026-07-28","title":"pipewire security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47082"},{"id":"RHSA-2026:47083","date":"2026-07-28","title":"pipewire security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47083"},{"id":"RHSA-2026:47084","date":"2026-07-28","title":"libXfont2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47084"},{"id":"RHSA-2026:47085","date":"2026-07-28","title":"rest security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47085"},{"id":"RHSA-2026:47090","date":"2026-07-28","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47090"},{"id":"RHSA-2026:47104","date":"2026-07-28","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47104"},{"id":"RHSA-2026:47105","date":"2026-07-28","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47105"},{"id":"RHSA-2026:47149","date":"2026-07-28","title":"Multicluster Global Hub 1.7.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47149"},{"id":"RHSA-2026:47173","date":"2026-07-28","title":"Red Hat OpenShift for Windows Containers 10.22.1 product release","source_url":"https://access.redhat.com/errata/RHSA-2026:47173"},{"id":"RHSA-2026:47174","date":"2026-07-28","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47174"},{"id":"RHSA-2026:47176","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47176"},{"id":"RHSA-2026:47177","date":"2026-07-28","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47177"},{"id":"RHSA-2026:47178","date":"2026-07-28","title":"yelp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47178"},{"id":"RHSA-2026:47179","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47179"},{"id":"RHSA-2026:47180","date":"2026-07-28","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47180"},{"id":"RHSA-2026:47183","date":"2026-07-28","title":"compat-libtiff3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47183"},{"id":"RHSA-2026:47184","date":"2026-07-28","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47184"},{"id":"RHSA-2026:47201","date":"2026-07-28","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47201"},{"id":"RHSA-2026:47248","date":"2026-07-28","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47248"},{"id":"RHSA-2026:47451","date":"2026-07-28","title":"Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47451"},{"id":"BSI:WID-SEC-2026-1298","date":"2026-07-28","title":"Red Hat Enterprise Linux (LibRaw): Mehrere Schwachstellen ermöglichen Codeausführung oder DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1298"},{"id":"BSI:WID-SEC-2026-2083","date":"2026-07-28","title":"jq: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2083"},{"id":"BSI:WID-SEC-2026-2099","date":"2026-07-28","title":"libssh2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2099"},{"id":"BSI:WID-SEC-2026-2100","date":"2026-07-28","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2100"},{"id":"BSI:WID-SEC-2026-2550","date":"2026-07-28","title":"Bouncy Castle: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2550"},{"id":"ICSA-26-209-01","date":"2026-07-28","title":"Siemens Desigo CC","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-01"},{"id":"ICSA-26-209-02","date":"2026-07-28","title":"Siemens Mendix Runtime","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-02"},{"id":"ICSA-26-209-03","date":"2026-07-28","title":"Siemens SIMATIC S7-PLCSIM Advanced","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03"},{"id":"ICSA-26-209-04","date":"2026-07-28","title":"Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04"},{"id":"ICSA-26-209-05","date":"2026-07-28","title":"MikroTik RouterOS and Cloud Hosted Router","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05"},{"id":"ICSA-26-209-06","date":"2026-07-28","title":"igloohome Smart Lock Mobile Application","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06"},{"id":"ICSA-26-209-07","date":"2026-07-28","title":"ABB KNX Update Tool","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-07"},{"id":"IBM:7281644","date":"2026-07-28","title":"Security Bulletin: IBM Maximo Application Suite uses python_dotenv-1.0.1-py3-none-any.whl which is vulnerable to CVE-2026-28684.","source_url":"https://www.ibm.com/support/pages/node/7281644"},{"id":"RHSA-2026:47096","date":"2026-07-28","title":"compat-openssl10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47096"},{"id":"RHSA-2026:47117","date":"2026-07-28","title":"libgcrypt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47117"},{"id":"RHSA-2026:47126","date":"2026-07-28","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47126"},{"id":"RHSA-2026:47129","date":"2026-07-28","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:47129"},{"id":"USN-8547-2","date":"2026-07-28","title":"Linux kernel (Azure FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8547-2"},{"id":"USN-8561-2","date":"2026-07-28","title":"FreeRDP regression","source_url":"https://ubuntu.com/security/notices/USN-8561-2"},{"id":"USN-8570-2","date":"2026-07-28","title":"Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8570-2"},{"id":"USN-8574-3","date":"2026-07-28","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8574-3"},{"id":"USN-8595-3","date":"2026-07-28","title":"Linux kernel (AWS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8595-3"},{"id":"USN-8615-1","date":"2026-07-28","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8615-1"},{"id":"USN-8616-1","date":"2026-07-28","title":"Linux kernel (IBM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8616-1"},{"id":"USN-8617-1","date":"2026-07-28","title":"Linux kernel (KVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8617-1"},{"id":"USN-8618-1","date":"2026-07-28","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8618-1"},{"id":"USN-8619-1","date":"2026-07-28","title":"Linux kernel (HWE) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8619-1"},{"id":"USN-8620-1","date":"2026-07-28","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8620-1"},{"id":"USN-8621-1","date":"2026-07-28","title":"Samba vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8621-1"},{"id":"RHSA-2026:47009","date":"2026-07-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47009"},{"id":"RHSA-2026:47072","date":"2026-07-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47072"},{"id":"RHSA-2026:47171","date":"2026-07-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47171"},{"id":"RHSA-2026:47200","date":"2026-07-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47200"},{"id":"RHSA-2026:47231","date":"2026-07-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47231"},{"id":"RHSA-2026:47236","date":"2026-07-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:47236"},{"id":"RHSA-2026:47614","date":"2026-07-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47614"},{"id":"RHSA-2026:47618","date":"2026-07-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47618"},{"id":"RHSA-2026:47619","date":"2026-07-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:47619"},{"id":"NCSC-2026-0265","date":"2026-07-27","title":"NCSC-2026-0265 Kwetsbaarheden verholpen in SolarWinds Serv-U","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0265"},{"id":"RHSA-2026:46382","date":"2026-07-27","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46382"},{"id":"RHSA-2026:46387","date":"2026-07-27","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46387"},{"id":"RHSA-2026:46389","date":"2026-07-27","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46389"},{"id":"RHSA-2026:46885","date":"2026-07-27","title":"multicluster engine for Kubernetes v2.10.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46885"},{"id":"BSI:WID-SEC-2026-0443","date":"2026-07-27","title":"Apache Tomcat und Tomcat Native: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0443"},{"id":"BSI:WID-SEC-2026-1641","date":"2026-07-27","title":"Evince: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1641"},{"id":"BSI:WID-SEC-2026-2011","date":"2026-07-27","title":"ffmpeg: Schwachstelle ermöglicht Codeausführung und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2011"},{"id":"BSI:WID-SEC-2026-2476","date":"2026-07-27","title":"Google Cloud Platform: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2476"},{"id":"BSI:WID-SEC-2026-2497","date":"2026-07-27","title":"Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2497"},{"id":"BSI:WID-SEC-2026-2502","date":"2026-07-27","title":"Microsoft Azure, Copilot, Exchange, Surface: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2502"},{"id":"IBM:7281368","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-webmvc jar","source_url":"https://www.ibm.com/support/pages/node/7281368"},{"id":"IBM:7281369","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-security-core jar (CVE-2026-40988, CVE-2026-41694)","source_url":"https://www.ibm.com/support/pages/node/7281369"},{"id":"IBM:7281370","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-hateoas jar (CVE-2026-41006, CVE-2026-41007)","source_url":"https://www.ibm.com/support/pages/node/7281370"},{"id":"IBM:7281371","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-expression jar","source_url":"https://www.ibm.com/support/pages/node/7281371"},{"id":"IBM:7281373","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-data-commons jar","source_url":"https://www.ibm.com/support/pages/node/7281373"},{"id":"IBM:7281374","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in spring-core jar (CVE-2026-41848)","source_url":"https://www.ibm.com/support/pages/node/7281374"},{"id":"IBM:7281375","date":"2026-07-27","title":"Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in activemq-all jar","source_url":"https://www.ibm.com/support/pages/node/7281375"},{"id":"RHSA-2026:46377","date":"2026-07-27","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46377"},{"id":"RHSA-2026:46379","date":"2026-07-27","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46379"},{"id":"RHSA-2026:46380","date":"2026-07-27","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46380"},{"id":"RHSA-2026:46381","date":"2026-07-27","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46381"},{"id":"RHSA-2026:46383","date":"2026-07-27","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46383"},{"id":"RHSA-2026:46391","date":"2026-07-27","title":"grafana security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:46391"},{"id":"RHSA-2026:46393","date":"2026-07-27","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46393"},{"id":"RHSA-2026:46394","date":"2026-07-27","title":"go-fdo-client security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46394"},{"id":"RHSA-2026:46395","date":"2026-07-27","title":"go-fdo-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46395"},{"id":"RHSA-2026:46396","date":"2026-07-27","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46396"},{"id":"RHSA-2026:46397","date":"2026-07-27","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46397"},{"id":"RHSA-2026:46398","date":"2026-07-27","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46398"},{"id":"RHSA-2026:46456","date":"2026-07-27","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46456"},{"id":"RHSA-2026:46460","date":"2026-07-27","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46460"},{"id":"RHSA-2026:46467","date":"2026-07-27","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46467"},{"id":"RHSA-2026:46473","date":"2026-07-27","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46473"},{"id":"RHSA-2026:46539","date":"2026-07-27","title":"OpenShift Virtualization v4.14 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:46539"},{"id":"RHSA-2026:46558","date":"2026-07-27","title":"OpenShift Virtualization v4.17 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:46558"},{"id":"RHSA-2026:46598","date":"2026-07-27","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:46598"},{"id":"RHSA-2026:46623","date":"2026-07-27","title":"OpenShift Virtualization v4.12 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:46623"},{"id":"RHSA-2026:46685","date":"2026-07-27","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:46685"},{"id":"RHSA-2026:46836","date":"2026-07-27","title":"A Subscription Management tool for finding and reporting Red Hat product usage","source_url":"https://access.redhat.com/errata/RHSA-2026:46836"},{"id":"RHSA-2026:46903","date":"2026-07-27","title":"Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46903"},{"id":"RHSA-2026:46951","date":"2026-07-27","title":"kpatch-patch security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46951"},{"id":"RHSA-2026:46956","date":"2026-07-27","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:46956"},{"id":"RHSA-2026:46986","date":"2026-07-27","title":"libreswan security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46986"},{"id":"BSI:WID-SEC-2026-0253","date":"2026-07-27","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0253"},{"id":"BSI:WID-SEC-2026-2494","date":"2026-07-27","title":"Exim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2494"},{"id":"RHSA-2026:46461","date":"2026-07-27","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:46461"},{"id":"IBM:7281439","date":"2026-07-27","title":"Security Bulletin: Security Vulnerability in Spring Framework affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38820)","source_url":"https://www.ibm.com/support/pages/node/7281439"},{"id":"RHSA-2026:46515","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46515"},{"id":"RHSA-2026:46535","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46535"},{"id":"RHSA-2026:46808","date":"2026-07-27","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:46808"},{"id":"RHSA-2026:46927","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46927"},{"id":"RHSA-2026:46931","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46931"},{"id":"RHSA-2026:46953","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46953"},{"id":"RHSA-2026:46955","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46955"},{"id":"RHSA-2026:46960","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46960"},{"id":"RHSA-2026:46974","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46974"},{"id":"RHSA-2026:46987","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46987"},{"id":"RHSA-2026:46988","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46988"},{"id":"RHSA-2026:46989","date":"2026-07-27","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:46989"},{"id":"RHSA-2026:46012","date":"2026-07-26","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:46012"},{"id":"RHSA-2026:46197","date":"2026-07-26","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:46197"},{"id":"GHSA-J6G5-3HH3-PGW8","date":"2026-07-25","title":"AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()","source_url":"https://github.com/advisories/GHSA-j6g5-3hh3-pgw8"},{"id":"IBM:7281191","date":"2026-07-25","title":"Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.","source_url":"https://www.ibm.com/support/pages/node/7281191"},{"id":"GHSA-3R53-75J5-3G7J","date":"2026-07-25","title":"Quasar: Prototype pollution in the extend() utility","source_url":"https://github.com/advisories/GHSA-3r53-75j5-3g7j"},{"id":"GHSA-6XJ8-QV9J-XCJQ","date":"2026-07-25","title":"Oh My Posh: Arbitrary command execution via template injection in the path segment","source_url":"https://github.com/advisories/GHSA-6xj8-qv9j-xcjq"},{"id":"GHSA-8Q49-2H5H-434X","date":"2026-07-25","title":"FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller","source_url":"https://github.com/advisories/GHSA-8q49-2h5h-434x"},{"id":"GHSA-FP43-VJ7G-PG92","date":"2026-07-25","title":"OmniFaces: Forged combined-resource IDs and related output/push boundaries","source_url":"https://github.com/advisories/GHSA-fp43-vj7g-pg92"},{"id":"GHSA-FWJX-9P69-H25H","date":"2026-07-25","title":"Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data","source_url":"https://github.com/advisories/GHSA-fwjx-9p69-h25h"},{"id":"GHSA-GM3R-Q2WP-HW87","date":"2026-07-25","title":"Shescape: Quadratic-time denial of service in the flag-protection","source_url":"https://github.com/advisories/GHSA-gm3r-q2wp-hw87"},{"id":"GHSA-HMJ8-5XMH-5573","date":"2026-07-25","title":"libp2p: yamux connection DoS via oversized data frame","source_url":"https://github.com/advisories/GHSA-hmj8-5xmh-5573"},{"id":"GHSA-JPCW-4WR7-C3VQ","date":"2026-07-25","title":"kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema","source_url":"https://github.com/advisories/GHSA-jpcw-4wr7-c3vq"},{"id":"GHSA-JVXP-QMX7-GJPX","date":"2026-07-25","title":"Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service","source_url":"https://github.com/advisories/GHSA-jvxp-qmx7-gjpx"},{"id":"GHSA-XG4H-6GFC-H4M8","date":"2026-07-25","title":"etcd: Watch API authorization bypass via open-ended range requests","source_url":"https://github.com/advisories/GHSA-xg4h-6gfc-h4m8"},{"id":"RHSA-2026:45779","date":"2026-07-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45779"},{"id":"RHSA-2026:45780","date":"2026-07-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45780"},{"id":"RHSA-2026:45783","date":"2026-07-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45783"},{"id":"RHSA-2026:45784","date":"2026-07-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45784"},{"id":"RHSA-2026:45785","date":"2026-07-25","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:45785"},{"id":"IBM:7281067","date":"2026-07-24","title":"Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.","source_url":"https://www.ibm.com/support/pages/node/7281067"},{"id":"IBM:7281071","date":"2026-07-24","title":"Security Bulletin: IBM DevOps Loop has multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7281071"},{"id":"NCSC-2026-0263","date":"2026-07-24","title":"NCSC-2026-0263 Kwetsbaarheid verholpen in ManageEngine ADAudit Plus van ZohoCorp","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0263"},{"id":"NCSC-2026-0264","date":"2026-07-24","title":"NCSC-2026-0264 Kwetsbaarheden verholpen in Check Point Security Management producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0264"},{"id":"BSI:WID-SEC-2023-0583","date":"2026-07-24","title":"Apache HTTP Server: Mehrere Schwachstellen ermöglichen HTTP Response Splitting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0583"},{"id":"BSI:WID-SEC-2024-1504","date":"2026-07-24","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1504"},{"id":"BSI:WID-SEC-2025-2430","date":"2026-07-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2430"},{"id":"BSI:WID-SEC-2026-1357","date":"2026-07-24","title":"OpenCTI: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1357"},{"id":"BSI:WID-SEC-2026-1430","date":"2026-07-24","title":"Linux Kernel (Dirty Frag): Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1430"},{"id":"BSI:WID-SEC-2026-1555","date":"2026-07-24","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1555"},{"id":"BSI:WID-SEC-2026-2347","date":"2026-07-24","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2347"},{"id":"BSI:WID-SEC-2026-2454","date":"2026-07-24","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2454"},{"id":"BSI:WID-SEC-2026-2504","date":"2026-07-24","title":"JetBrains TeamCity: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2504"},{"id":"BSI:WID-SEC-2026-2505","date":"2026-07-24","title":"JetBrains IntelliJ IDEA: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2505"},{"id":"BSI:WID-SEC-2026-2507","date":"2026-07-24","title":"JetBrains WebStorm: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2507"},{"id":"BSI:WID-SEC-2026-2508","date":"2026-07-24","title":"cPanel cPanel/WHM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2508"},{"id":"BSI:WID-SEC-2026-2509","date":"2026-07-24","title":"CyberPanel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2509"},{"id":"IBM:7281117","date":"2026-07-24","title":"Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44496)","source_url":"https://www.ibm.com/support/pages/node/7281117"},{"id":"RHSA-2026:45114","date":"2026-07-24","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:45114"},{"id":"RHSA-2026:45115","date":"2026-07-24","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:45115"},{"id":"RHSA-2026:45116","date":"2026-07-24","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:45116"},{"id":"RHSA-2026:45192","date":"2026-07-24","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45192"},{"id":"BSI:WID-SEC-2024-0801","date":"2026-07-24","title":"Apache HTTP Server: Mehrere Schwachstellen ermöglichen Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0801"},{"id":"BSI:WID-SEC-2026-1294","date":"2026-07-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1294"},{"id":"BSI:WID-SEC-2026-1684","date":"2026-07-24","title":"Linux Kernel (Bluetooth): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1684"},{"id":"BSI:WID-SEC-2026-2506","date":"2026-07-24","title":"RabbitMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2506"},{"id":"BSI:WID-SEC-2026-2512","date":"2026-07-24","title":"Progress Software MOVEit Transfer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2512"},{"id":"USN-8575-3","date":"2026-07-24","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8575-3"},{"id":"USN-8595-2","date":"2026-07-24","title":"Linux kernel (AWS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8595-2"},{"id":"USN-8603-1","date":"2026-07-24","title":"Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8603-1"},{"id":"USN-8604-1","date":"2026-07-24","title":"Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8604-1"},{"id":"USN-8605-1","date":"2026-07-24","title":"Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8605-1"},{"id":"USN-8606-1","date":"2026-07-24","title":"Linux kernel (Azure) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8606-1"},{"id":"USN-8607-1","date":"2026-07-24","title":"Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8607-1"},{"id":"USN-8608-1","date":"2026-07-24","title":"Linux kernel (Azure FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8608-1"},{"id":"USN-8609-1","date":"2026-07-24","title":"Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8609-1"},{"id":"RHSA-2026:45128","date":"2026-07-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45128"},{"id":"RHSA-2026:45327","date":"2026-07-24","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:45327"},{"id":"RHSA-2026:45341","date":"2026-07-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:45341"},{"id":"RHSA-2026:45360","date":"2026-07-24","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:45360"},{"id":"RHSA-2026:45381","date":"2026-07-24","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:45381"},{"id":"BSI:WID-SEC-2026-2317","date":"2026-07-23","title":"Microsoft Office Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2317"},{"id":"CERT-EU-SA2026-009","date":"2026-07-23","title":"2026-009 Critical Vulnerabilities in Microsoft SharePoint","source_url":"https://cert.europa.eu/publications/security-advisories/2026-009/"},{"id":"BSI:WID-SEC-2026-1052","date":"2026-07-23","title":"Red Hat Enterprise Linux (Cockpit): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1052"},{"id":"BSI:WID-SEC-2026-1691","date":"2026-07-23","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1691"},{"id":"BSI:WID-SEC-2026-2428","date":"2026-07-23","title":"libssh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2428"},{"id":"BSI:WID-SEC-2026-2437","date":"2026-07-23","title":"Oracle Communications: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2437"},{"id":"BSI:WID-SEC-2026-2444","date":"2026-07-23","title":"Oracle Fusion Middleware: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2444"},{"id":"BSI:WID-SEC-2026-2486","date":"2026-07-23","title":"Mitel MiCollab: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2486"},{"id":"BSI:WID-SEC-2026-2487","date":"2026-07-23","title":"MongoDB: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2487"},{"id":"BSI:WID-SEC-2026-2489","date":"2026-07-23","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2489"},{"id":"BSI:WID-SEC-2026-2493","date":"2026-07-23","title":"pg_partman: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2493"},{"id":"RHSA-2026:40021","date":"2026-07-23","title":"OpenShift Container Platform 4.13.69 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40021"},{"id":"RHSA-2026:40022","date":"2026-07-23","title":"OpenShift Container Platform 4.13.69 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40022"},{"id":"RHSA-2026:40023","date":"2026-07-23","title":"OpenShift Container Platform 4.13.69 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:40023"},{"id":"RHSA-2026:40030","date":"2026-07-23","title":"OpenShift Container Platform 4.12.94 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40030"},{"id":"RHSA-2026:42876","date":"2026-07-23","title":"java-1.8.0-openjdk security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42876"},{"id":"RHSA-2026:42878","date":"2026-07-23","title":"OpenJDK 8u502 Security Update for Portable Linux Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42878"},{"id":"RHSA-2026:42879","date":"2026-07-23","title":"OpenJDK 8u502 Windows Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42879"},{"id":"RHSA-2026:42881","date":"2026-07-23","title":"OpenJDK 11.0.32 ELS Security Update for Portable Linux Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42881"},{"id":"RHSA-2026:42889","date":"2026-07-23","title":"OpenJDK 17.0.20 Security Update for Portable Linux Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42889"},{"id":"RHSA-2026:42893","date":"2026-07-23","title":"OpenJDK 17.0.20 Security Update for Windows Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42893"},{"id":"RHSA-2026:42897","date":"2026-07-23","title":"OpenJDK 21.0.12 Security Update for Portable Linux Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42897"},{"id":"RHSA-2026:42898","date":"2026-07-23","title":"OpenJDK 21.0.12 Security Update for Windows Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42898"},{"id":"RHSA-2026:42900","date":"2026-07-23","title":"OpenJDK 25.0.4 Security Update for Portable Linux Builds","source_url":"https://access.redhat.com/errata/RHSA-2026:42900"},{"id":"RHSA-2026:44061","date":"2026-07-23","title":"pki-deps:10.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44061"},{"id":"RHSA-2026:44062","date":"2026-07-23","title":"pki-deps:10.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44062"},{"id":"RHSA-2026:44063","date":"2026-07-23","title":"jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44063"},{"id":"RHSA-2026:44064","date":"2026-07-23","title":"jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44064"},{"id":"RHSA-2026:44065","date":"2026-07-23","title":"jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44065"},{"id":"RHSA-2026:44066","date":"2026-07-23","title":"pki-deps:10.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44066"},{"id":"RHSA-2026:44270","date":"2026-07-23","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44270"},{"id":"RHSA-2026:44271","date":"2026-07-23","title":"dogtag-pki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44271"},{"id":"RHSA-2026:44308","date":"2026-07-23","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44308"},{"id":"RHSA-2026:44355","date":"2026-07-23","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44355"},{"id":"RHSA-2026:44357","date":"2026-07-23","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44357"},{"id":"RHSA-2026:44373","date":"2026-07-23","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44373"},{"id":"RHSA-2026:44385","date":"2026-07-23","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:44385"},{"id":"RHSA-2026:44391","date":"2026-07-23","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44391"},{"id":"RHSA-2026:44420","date":"2026-07-23","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44420"},{"id":"RHSA-2026:44481","date":"2026-07-23","title":"Red Hat Update Infrastructure 5.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44481"},{"id":"RHSA-2026:44622","date":"2026-07-23","title":"Multicluster Global Hub 1.6.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44622"},{"id":"RHSA-2026:44624","date":"2026-07-23","title":"Red Hat OpenShift distributed tracing platform (Tempo) 3.10.2 release","source_url":"https://access.redhat.com/errata/RHSA-2026:44624"},{"id":"RHSA-2026:44694","date":"2026-07-23","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:44694"},{"id":"RHSA-2026:44696","date":"2026-07-23","title":"satellite/iop-advisor-engine-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:44696"},{"id":"BSI:WID-SEC-2024-3289","date":"2026-07-23","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3289"},{"id":"BSI:WID-SEC-2026-0849","date":"2026-07-23","title":"ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0849"},{"id":"BSI:WID-SEC-2026-1049","date":"2026-07-23","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service oder Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1049"},{"id":"BSI:WID-SEC-2026-1057","date":"2026-07-23","title":"GNU tar: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1057"},{"id":"BSI:WID-SEC-2026-1063","date":"2026-07-23","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1063"},{"id":"BSI:WID-SEC-2026-1292","date":"2026-07-23","title":"Prometheus: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1292"},{"id":"BSI:WID-SEC-2026-1510","date":"2026-07-23","title":"OX Dovecot Pro: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1510"},{"id":"BSI:WID-SEC-2026-2471","date":"2026-07-23","title":"PowerDNS: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2471"},{"id":"BSI:WID-SEC-2026-2485","date":"2026-07-23","title":"RabbitMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2485"},{"id":"BSI:WID-SEC-2026-2490","date":"2026-07-23","title":"Grafana: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2490"},{"id":"ICSA-26-204-01","date":"2026-07-23","title":"Johnson Controls C-CURE 9000 and Victor application server","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01"},{"id":"ICSA-26-204-02","date":"2026-07-23","title":"Johnson Controls XAAP Android","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-02"},{"id":"ICSA-26-204-03","date":"2026-07-23","title":"Weintek cMT3092X","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-03"},{"id":"ICSA-26-204-04","date":"2026-07-23","title":"Panduit IntraVUE","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04"},{"id":"ICSA-26-204-05","date":"2026-07-23","title":"Rockwell Automation ThinManager","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-05"},{"id":"ICSA-26-204-06","date":"2026-07-23","title":"MZ Automation libIEC61850","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06"},{"id":"ICSA-26-204-07","date":"2026-07-23","title":"MZ Automation lib60870","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-07"},{"id":"RHSA-2026:44480","date":"2026-07-23","title":"compat-openssl10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44480"},{"id":"RHSA-2026:44522","date":"2026-07-23","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44522"},{"id":"USN-8322-2","date":"2026-07-23","title":"Apache Commons BeanUtils regression","source_url":"https://ubuntu.com/security/notices/USN-8322-2"},{"id":"USN-8574-2","date":"2026-07-23","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8574-2"},{"id":"USN-8575-2","date":"2026-07-23","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8575-2"},{"id":"USN-8576-2","date":"2026-07-23","title":"Linux kernel (NVIDIA Tegra) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8576-2"},{"id":"USN-8593-1","date":"2026-07-23","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8593-1"},{"id":"USN-8594-1","date":"2026-07-23","title":"Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8594-1"},{"id":"USN-8595-1","date":"2026-07-23","title":"Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8595-1"},{"id":"USN-8596-1","date":"2026-07-23","title":"Linux kernel (NVIDIA) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8596-1"},{"id":"USN-8597-1","date":"2026-07-23","title":"Linux kernel (IBM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8597-1"},{"id":"USN-8598-1","date":"2026-07-23","title":"rsyslog vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8598-1"},{"id":"USN-8599-1","date":"2026-07-23","title":"HTTP-Date vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8599-1"},{"id":"USN-8600-1","date":"2026-07-23","title":"libXpm vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8600-1"},{"id":"USN-8601-1","date":"2026-07-23","title":"PAM vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8601-1"},{"id":"USN-8602-1","date":"2026-07-23","title":"libinput vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8602-1"},{"id":"BSI:WID-SEC-2026-1126","date":"2026-07-23","title":"ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1126"},{"id":"RHSA-2026:44151","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44151"},{"id":"RHSA-2026:44152","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44152"},{"id":"RHSA-2026:44162","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44162"},{"id":"RHSA-2026:44343","date":"2026-07-23","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:44343"},{"id":"RHSA-2026:44430","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44430"},{"id":"RHSA-2026:44451","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44451"},{"id":"RHSA-2026:44479","date":"2026-07-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:44479"},{"id":"NCSC-2026-0252","date":"2026-07-22","title":"NCSC-2026-0252 Kwetsbaarheden verholpen in Oracle Fusion middleware","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0252"},{"id":"NCSC-2026-0253","date":"2026-07-22","title":"NCSC-2026-0253 Kwetsbaarheden verholpen in Oracle E-Business Suite componenten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0253"},{"id":"NCSC-2026-0254","date":"2026-07-22","title":"NCSC-2026-0254 Kwetsbaarheden verholpen in Oracle database producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0254"},{"id":"NCSC-2026-0255","date":"2026-07-22","title":"NCSC-2026-0255 Kwetsbaarheden verholpen in Oracle Commerce Platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0255"},{"id":"NCSC-2026-0256","date":"2026-07-22","title":"NCSC-2026-0256 Kwetsbaarheden verholpen in Oracle Communications","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0256"},{"id":"NCSC-2026-0257","date":"2026-07-22","title":"NCSC-2026-0257 Kwetsbaarheden verholpen in Oracle Enterprise Manager","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0257"},{"id":"NCSC-2026-0258","date":"2026-07-22","title":"NCSC-2026-0258 Kwetsbaarheden verholpen in Oracle Financial Services","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0258"},{"id":"NCSC-2026-0259","date":"2026-07-22","title":"NCSC-2026-0259 Kwetsbaarheden verholpen in Oracle Analytics","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0259"},{"id":"NCSC-2026-0260","date":"2026-07-22","title":"NCSC-2026-0260 Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0260"},{"id":"BSI:WID-SEC-2026-2468","date":"2026-07-22","title":"Vercel Next.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2468"},{"id":"BSI:WID-SEC-2026-2469","date":"2026-07-22","title":"snapd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2469"},{"id":"BSI:WID-SEC-2026-2472","date":"2026-07-22","title":"Budibase: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2472"},{"id":"BSI:WID-SEC-2026-2473","date":"2026-07-22","title":"Aruba AOS-CX: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2473"},{"id":"GHSA-F88M-G3JW-G9CJ","date":"2026-07-22","title":"sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591","source_url":"https://github.com/advisories/GHSA-f88m-g3jw-g9cj"},{"id":"GHSA-V2HH-GCRM-F6HX","date":"2026-07-22","title":"fast-uri vulnerable to host confusion via literal backslash authority delimiter","source_url":"https://github.com/advisories/GHSA-v2hh-gcrm-f6hx"},{"id":"NCSC-2026-0261","date":"2026-07-22","title":"NCSC-2026-0261 Kwetsbaarheden verholpen in Oracle Java SE","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0261"},{"id":"NCSC-2026-0262","date":"2026-07-22","title":"NCSC-2026-0262 Kwetsbaarheden verholpen in Oracle MySQL Server en MySQL Cluster","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0262"},{"id":"RHSA-2026:40762","date":"2026-07-22","title":"OpenShift Container Platform 4.19.39 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40762"},{"id":"RHSA-2026:40765","date":"2026-07-22","title":"OpenShift Container Platform 4.19.39 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40765"},{"id":"RHSA-2026:40828","date":"2026-07-22","title":"OpenShift Container Platform 4.18.49 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40828"},{"id":"RHSA-2026:42880","date":"2026-07-22","title":"Java 11 OpenJDK ELS Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42880"},{"id":"RHSA-2026:43218","date":"2026-07-22","title":"pki-deps:10.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43218"},{"id":"RHSA-2026:43231","date":"2026-07-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43231"},{"id":"RHSA-2026:43307","date":"2026-07-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43307"},{"id":"RHSA-2026:43398","date":"2026-07-22","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43398"},{"id":"RHSA-2026:43400","date":"2026-07-22","title":"dogtag-pki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43400"},{"id":"RHSA-2026:43402","date":"2026-07-22","title":"Red Hat JBoss Web Server 6.2.4 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43402"},{"id":"RHSA-2026:43420","date":"2026-07-22","title":"acl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43420"},{"id":"RHSA-2026:43424","date":"2026-07-22","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43424"},{"id":"RHSA-2026:43425","date":"2026-07-22","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43425"},{"id":"RHSA-2026:43461","date":"2026-07-22","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43461"},{"id":"RHSA-2026:43625","date":"2026-07-22","title":"OpenShift Virtualization v4.22 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:43625"},{"id":"RHSA-2026:43651","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43651"},{"id":"RHSA-2026:43670","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43670"},{"id":"RHSA-2026:43692","date":"2026-07-22","title":"Red Hat OpenShift API for Data Protection","source_url":"https://access.redhat.com/errata/RHSA-2026:43692"},{"id":"RHSA-2026:43711","date":"2026-07-22","title":"RHEL AI 3.5 RPM runtime CVE fix - ffmpeg","source_url":"https://access.redhat.com/errata/RHSA-2026:43711"},{"id":"RHSA-2026:43826","date":"2026-07-22","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43826"},{"id":"RHSA-2026:43851","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43851"},{"id":"RHSA-2026:43853","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43853"},{"id":"RHSA-2026:43854","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43854"},{"id":"RHSA-2026:43855","date":"2026-07-22","title":"Red Hat Enterprise Linux AI 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:43855"},{"id":"RHSA-2026:44003","date":"2026-07-22","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44003"},{"id":"RHSA-2026:44006","date":"2026-07-22","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44006"},{"id":"RHSA-2026:44007","date":"2026-07-22","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:44007"},{"id":"BSI:WID-SEC-2026-1929","date":"2026-07-22","title":"LibreOffice: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1929"},{"id":"GHSA-8R6M-32JQ-JX6Q","date":"2026-07-22","title":"fast-xml-parser: Repeated DOCTYPE declarations reset entity expansion limits","source_url":"https://github.com/advisories/GHSA-8r6m-32jq-jx6q"},{"id":"GHSA-CJ75-F6XR-R4G7","date":"2026-07-22","title":"Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations","source_url":"https://github.com/advisories/GHSA-cj75-f6xr-r4g7"},{"id":"GHSA-RWJ8-PGH3-R573","date":"2026-07-22","title":"GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL","source_url":"https://github.com/advisories/GHSA-rwj8-pgh3-r573"},{"id":"IBM:7280849","date":"2026-07-22","title":"Security Bulletin: Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7362)","source_url":"https://www.ibm.com/support/pages/node/7280849"},{"id":"RHSA-2026:43290","date":"2026-07-22","title":"libinput security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43290"},{"id":"RHSA-2026:43513","date":"2026-07-22","title":"openssl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43513"},{"id":"RHSA-2026:43575","date":"2026-07-22","title":"gnutls security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43575"},{"id":"RHSA-2026:43702","date":"2026-07-22","title":"libpng12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:43702"},{"id":"USN-8477-3","date":"2026-07-22","title":"tar regression","source_url":"https://ubuntu.com/security/notices/USN-8477-3"},{"id":"USN-8583-1","date":"2026-07-22","title":"GIFLIB vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8583-1"},{"id":"USN-8584-1","date":"2026-07-22","title":"GStreamer Good Plugins vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8584-1"},{"id":"USN-8585-1","date":"2026-07-22","title":"Kerberos vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8585-1"},{"id":"USN-8586-1","date":"2026-07-22","title":"libgphoto2 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8586-1"},{"id":"USN-8587-1","date":"2026-07-22","title":"HTML-Parser vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8587-1"},{"id":"USN-8588-1","date":"2026-07-22","title":"Gawk vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8588-1"},{"id":"USN-8589-1","date":"2026-07-22","title":"Apache HTTP Server vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8589-1"},{"id":"USN-8590-1","date":"2026-07-22","title":"Exim vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8590-1"},{"id":"USN-8591-1","date":"2026-07-22","title":"AIOHTTP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8591-1"},{"id":"BSI:WID-SEC-2026-2470","date":"2026-07-22","title":"Tanium Server und Connect: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2470"},{"id":"RHSA-2026:43119","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43119"},{"id":"RHSA-2026:43122","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43122"},{"id":"RHSA-2026:43236","date":"2026-07-22","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43236"},{"id":"RHSA-2026:43311","date":"2026-07-22","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43311"},{"id":"RHSA-2026:43554","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43554"},{"id":"RHSA-2026:43581","date":"2026-07-22","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43581"},{"id":"RHSA-2026:43588","date":"2026-07-22","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43588"},{"id":"RHSA-2026:43716","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43716"},{"id":"RHSA-2026:43797","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43797"},{"id":"RHSA-2026:43799","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43799"},{"id":"RHSA-2026:43801","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43801"},{"id":"RHSA-2026:43803","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43803"},{"id":"RHSA-2026:43818","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43818"},{"id":"RHSA-2026:43841","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43841"},{"id":"RHSA-2026:43852","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43852"},{"id":"RHSA-2026:43866","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43866"},{"id":"RHSA-2026:43873","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43873"},{"id":"RHSA-2026:43906","date":"2026-07-22","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:43906"},{"id":"NCSC-2026-0251","date":"2026-07-21","title":"NCSC-2026-0251 Kwetsbaarheden verholpen in IBM Langflow OSS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0251"},{"id":"RHSA-2026:43038","date":"2026-07-21","title":"Migration Toolkit for Applications","source_url":"https://access.redhat.com/errata/RHSA-2026:43038"},{"id":"BSI:WID-SEC-2025-0499","date":"2026-07-21","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0499"},{"id":"IBM:7280585","date":"2026-07-21","title":"Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in form-data and DOMPurify","source_url":"https://www.ibm.com/support/pages/node/7280585"},{"id":"IBM:7280626","date":"2026-07-21","title":"Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel","source_url":"https://www.ibm.com/support/pages/node/7280626"},{"id":"NCSC-2026-0237","date":"2026-07-21","title":"NCSC-2026-0237 [1.02] [H/H] Kwetsbaarheden verholpen in Microsoft Office","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0237"},{"id":"RHSA-2026:40764","date":"2026-07-21","title":"OpenShift Container Platform 4.22.6 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40764"},{"id":"RHSA-2026:40768","date":"2026-07-21","title":"OpenShift Container Platform 4.22.6 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40768"},{"id":"RHSA-2026:40779","date":"2026-07-21","title":"OpenShift Container Platform 4.21.25 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40779"},{"id":"RHSA-2026:40787","date":"2026-07-21","title":"OpenShift Container Platform 4.20.30 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40787"},{"id":"RHSA-2026:40792","date":"2026-07-21","title":"OpenShift Container Platform 4.21.25 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40792"},{"id":"RHSA-2026:40795","date":"2026-07-21","title":"OpenShift Container Platform 4.20.30 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40795"},{"id":"RHSA-2026:42550","date":"2026-07-21","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42550"},{"id":"RHSA-2026:42552","date":"2026-07-21","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42552"},{"id":"RHSA-2026:42555","date":"2026-07-21","title":"postgresql:13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42555"},{"id":"RHSA-2026:42644","date":"2026-07-21","title":"RHOAI 2.25.9 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:42644"},{"id":"RHSA-2026:42668","date":"2026-07-21","title":"libtiff security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42668"},{"id":"RHSA-2026:42692","date":"2026-07-21","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42692"},{"id":"RHSA-2026:42736","date":"2026-07-21","title":"acl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42736"},{"id":"RHSA-2026:42796","date":"2026-07-21","title":"Red Hat Quay 3.15.6","source_url":"https://access.redhat.com/errata/RHSA-2026:42796"},{"id":"RHSA-2026:42815","date":"2026-07-21","title":"Red Hat Ansible Automation Platform 2.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42815"},{"id":"RHSA-2026:42828","date":"2026-07-21","title":"httpd:2.4 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42828"},{"id":"RHSA-2026:42852","date":"2026-07-21","title":"Multicluster Global Hub 1.5.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42852"},{"id":"RHSA-2026:42875","date":"2026-07-21","title":"RHEL AI 3.5 RPM runtime CVE fix - aom","source_url":"https://access.redhat.com/errata/RHSA-2026:42875"},{"id":"RHSA-2026:42919","date":"2026-07-21","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42919"},{"id":"RHSA-2026:42946","date":"2026-07-21","title":"rhc-worker-playbook security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42946"},{"id":"RHSA-2026:43052","date":"2026-07-21","title":"Red Hat Quay 3.12.20","source_url":"https://access.redhat.com/errata/RHSA-2026:43052"},{"id":"ICSA-26-202-01","date":"2026-07-21","title":"Tycon Systems TPDIN-Monitor-WEB2","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01"},{"id":"ICSA-26-202-02","date":"2026-07-21","title":"Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02"},{"id":"ICSA-26-202-03","date":"2026-07-21","title":"Siemens Opcenter X","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-03"},{"id":"ICSA-26-202-04","date":"2026-07-21","title":"Siemens SIDIS Secured SmartPlug","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-04"},{"id":"ICSA-26-202-05","date":"2026-07-21","title":"Siemens IAM Client","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-05"},{"id":"ICSA-26-202-06","date":"2026-07-21","title":"Siemens CADRA","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-06"},{"id":"ICSA-26-202-07","date":"2026-07-21","title":"Rockwell Automation FactoryTalk Services Platform","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-07"},{"id":"ICSA-26-202-08","date":"2026-07-21","title":"Rockwell Automation 1718-AENTR/1719-AENTR","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-08"},{"id":"ICSA-26-202-09","date":"2026-07-21","title":"Rockwell Automation 1734 POINT I/O","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-09"},{"id":"ICSA-26-202-10","date":"2026-07-21","title":"Rockwell Automation Studio 5000 Logix Designer","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10"},{"id":"CISCO-SA-SDWAN-PRIVESC-4UXFRDZX","date":"2026-07-21","title":"Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx"},{"id":"IBM:7280659","date":"2026-07-21","title":"Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-23901, CVE-2026-23903)","source_url":"https://www.ibm.com/support/pages/node/7280659"},{"id":"RHSA-2026:42694","date":"2026-07-21","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42694"},{"id":"RHSA-2026:42733","date":"2026-07-21","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42733"},{"id":"USN-8574-1","date":"2026-07-21","title":"Linux kernel (GCP FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8574-1"},{"id":"USN-8575-1","date":"2026-07-21","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8575-1"},{"id":"USN-8577-1","date":"2026-07-21","title":"OpenSSH vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8577-1"},{"id":"USN-8578-1","date":"2026-07-21","title":"CUPS control character injection vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8578-1"},{"id":"USN-8579-1","date":"2026-07-21","title":"snapd vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8579-1"},{"id":"USN-8580-1","date":"2026-07-21","title":"AccountsService vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8580-1"},{"id":"USN-8580-2","date":"2026-07-21","title":"AccountsService vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8580-2"},{"id":"USN-8581-1","date":"2026-07-21","title":"libarchive vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8581-1"},{"id":"USN-8582-1","date":"2026-07-21","title":"jbig2dec vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8582-1"},{"id":"USN-8610-1","date":"2026-07-21","title":"Linux kernel (Azure CVM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8610-1"},{"id":"RHSA-2026:42387","date":"2026-07-21","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42387"},{"id":"RHSA-2026:42853","date":"2026-07-21","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42853"},{"id":"RHSA-2026:42922","date":"2026-07-21","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42922"},{"id":"RHSA-2026:42923","date":"2026-07-21","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42923"},{"id":"RHSA-2026:43015","date":"2026-07-21","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:43015"},{"id":"BSI:WID-SEC-2026-0207","date":"2026-07-20","title":"Red Hat Enterprise Linux (urllib3): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0207"},{"id":"BSI:WID-SEC-2026-1187","date":"2026-07-20","title":"Ruby und Ruby on Rails (erb gem): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1187"},{"id":"RHSA-2026:36610","date":"2026-07-20","title":"OpenShift Container Platform 4.14.69 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36610"},{"id":"RHSA-2026:41892","date":"2026-07-20","title":"libtiff security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:41892"},{"id":"RHSA-2026:41920","date":"2026-07-20","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41920"},{"id":"RHSA-2026:41921","date":"2026-07-20","title":"gnutls security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41921"},{"id":"RHSA-2026:41928","date":"2026-07-20","title":"Red Hat Migration Toolkit for Containers","source_url":"https://access.redhat.com/errata/RHSA-2026:41928"},{"id":"RHSA-2026:41929","date":"2026-07-20","title":"Red Hat Developer Hub 1.9.7 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:41929"},{"id":"RHSA-2026:41930","date":"2026-07-20","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41930"},{"id":"RHSA-2026:41937","date":"2026-07-20","title":"sssd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41937"},{"id":"RHSA-2026:41941","date":"2026-07-20","title":"Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:41941"},{"id":"RHSA-2026:41944","date":"2026-07-20","title":"Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:41944"},{"id":"RHSA-2026:41947","date":"2026-07-20","title":"nodejs:22 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:41947"},{"id":"RHSA-2026:41948","date":"2026-07-20","title":"javapackages-tools:201801 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41948"},{"id":"RHSA-2026:41951","date":"2026-07-20","title":"Red Hat Data Grid 8.6.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41951"},{"id":"RHSA-2026:41988","date":"2026-07-20","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41988"},{"id":"RHSA-2026:42041","date":"2026-07-20","title":"pacemaker security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42041"},{"id":"RHSA-2026:42043","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.11.1 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42043"},{"id":"RHSA-2026:42047","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.12.1 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42047"},{"id":"RHSA-2026:42048","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.16.1 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42048"},{"id":"RHSA-2026:42049","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.15.1 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42049"},{"id":"RHSA-2026:42050","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.13.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42050"},{"id":"RHSA-2026:42051","date":"2026-07-20","title":"Red Hat Web Terminal Operator 1.14.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:42051"},{"id":"RHSA-2026:42063","date":"2026-07-20","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42063"},{"id":"RHSA-2026:42075","date":"2026-07-20","title":"pacemaker security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42075"},{"id":"RHSA-2026:42076","date":"2026-07-20","title":"pacemaker security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42076"},{"id":"RHSA-2026:42080","date":"2026-07-20","title":"Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42080"},{"id":"RHSA-2026:42082","date":"2026-07-20","title":"Satellite 6.16.11 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42082"},{"id":"RHSA-2026:42085","date":"2026-07-20","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:42085"},{"id":"RHSA-2026:42088","date":"2026-07-20","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42088"},{"id":"RHSA-2026:42090","date":"2026-07-20","title":"glib2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42090"},{"id":"RHSA-2026:42091","date":"2026-07-20","title":"dovecot security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42091"},{"id":"RHSA-2026:42122","date":"2026-07-20","title":"sssd security update","source_url":"https://access.redhat.com/errata/RHSA-2026:42122"},{"id":"RHSA-2026:42132","date":"2026-07-20","title":"Red Hat Ansible Automation Platform 2.6 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42132"},{"id":"RHSA-2026:42142","date":"2026-07-20","title":"Red Hat Ansible Automation Platform 2.7 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42142"},{"id":"RHSA-2026:42144","date":"2026-07-20","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42144"},{"id":"RHSA-2026:42146","date":"2026-07-20","title":"Red Hat Quay 3.12.20","source_url":"https://access.redhat.com/errata/RHSA-2026:42146"},{"id":"RHSA-2026:42150","date":"2026-07-20","title":"Satellite 6.17.9.1 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42150"},{"id":"RHSA-2026:42151","date":"2026-07-20","title":"Satellite 6.18.7.1 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42151"},{"id":"RHSA-2026:42240","date":"2026-07-20","title":"Satellite 6.19.2.1 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42240"},{"id":"BSI:WID-SEC-2024-0219","date":"2026-07-20","title":"libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0219"},{"id":"BSI:WID-SEC-2025-2150","date":"2026-07-20","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2150"},{"id":"BSI:WID-SEC-2026-2411","date":"2026-07-20","title":"Mattermost Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2411"},{"id":"CISCO-SA-ISE-XSS-42TGSDMG","date":"2026-07-20","title":"Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xss-42tgsdMG"},{"id":"RHSA-2026:42098","date":"2026-07-20","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release","source_url":"https://access.redhat.com/errata/RHSA-2026:42098"},{"id":"RHSA-2026:42141","date":"2026-07-20","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42141"},{"id":"USN-8558-1","date":"2026-07-20","title":"ImageMagick vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8558-1"},{"id":"USN-8566-1","date":"2026-07-20","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8566-1"},{"id":"USN-8567-1","date":"2026-07-20","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8567-1"},{"id":"USN-8568-1","date":"2026-07-20","title":"Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8568-1"},{"id":"USN-8569-1","date":"2026-07-20","title":"Linux kernel (HWE) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8569-1"},{"id":"USN-8570-1","date":"2026-07-20","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8570-1"},{"id":"RHSA-2026:42045","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42045"},{"id":"RHSA-2026:42074","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42074"},{"id":"RHSA-2026:42081","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42081"},{"id":"RHSA-2026:42083","date":"2026-07-20","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42083"},{"id":"RHSA-2026:42125","date":"2026-07-20","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42125"},{"id":"RHSA-2026:42145","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42145"},{"id":"RHSA-2026:42230","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42230"},{"id":"RHSA-2026:42241","date":"2026-07-20","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:42241"},{"id":"RHSA-2026:42329","date":"2026-07-20","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:42329"},{"id":"IBM:7280476","date":"2026-07-18","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge","source_url":"https://www.ibm.com/support/pages/node/7280476"},{"id":"NCSC-2026-0250","date":"2026-07-18","title":"NCSC-2026-0250 Kwetsbaarheden verholpen in WordPress door Automattic","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0250"},{"id":"RHSA-2026:41389","date":"2026-07-18","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:41389"},{"id":"IBM:7280332","date":"2026-07-17","title":"Security Bulletin: Multiple vulnerabilities in IBM Guardium Unified Discovery and Classification (GUDC) container images","source_url":"https://www.ibm.com/support/pages/node/7280332"},{"id":"IBM:7280411","date":"2026-07-17","title":"Security Bulletin: Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking","source_url":"https://www.ibm.com/support/pages/node/7280411"},{"id":"NCSC-2026-0246","date":"2026-07-17","title":"NCSC-2026-0246 Kwetsbaarheden verholpen in Adobe Experience Manager","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0246"},{"id":"NCSC-2026-0248","date":"2026-07-17","title":"NCSC-2026-0248 Kwetsbaarheden verholpen in n8n workflow automation platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0248"},{"id":"NCSC-2026-0249","date":"2026-07-17","title":"NCSC-2026-0249 Kwetsbaarheden verholpen in Zoom","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0249"},{"id":"RHSA-2026:41236","date":"2026-07-17","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:41236"},{"id":"BSI:WID-SEC-2026-1959","date":"2026-07-17","title":"Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1959"},{"id":"BSI:WID-SEC-2026-1996","date":"2026-07-17","title":"libssh2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1996"},{"id":"BSI:WID-SEC-2026-2133","date":"2026-07-17","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2133"},{"id":"BSI:WID-SEC-2026-2390","date":"2026-07-17","title":"nginx-ui: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2390"},{"id":"BSI:WID-SEC-2026-2393","date":"2026-07-17","title":"Ubuntu Linux (ubuntu-pro-client): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2393"},{"id":"BSI:WID-SEC-2026-2398","date":"2026-07-17","title":"Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2398"},{"id":"GHSA-8QQM-FP2Q-V734","date":"2026-07-17","title":"Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies","source_url":"https://github.com/advisories/GHSA-8qqm-fp2q-v734"},{"id":"GHSA-R95Q-FP26-H3HC","date":"2026-07-17","title":"CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard","source_url":"https://github.com/advisories/GHSA-r95q-fp26-h3hc"},{"id":"IBM:7280382","date":"2026-07-17","title":"Security Bulletin: Vulnerability in IBM Data Product Hub","source_url":"https://www.ibm.com/support/pages/node/7280382"},{"id":"NCSC-2026-0230","date":"2026-07-17","title":"NCSC-2026-0230 [1.01] [M/H] Kwetsbaarheden verholpen in SAP-producten","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0230"},{"id":"NCSC-2026-0243","date":"2026-07-17","title":"NCSC-2026-0243 Kwetsbaarheid verholpen in Fortinet FortiClient EMS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0243"},{"id":"NCSC-2026-0244","date":"2026-07-17","title":"NCSC-2026-0244 Kwetsbaarheid verholpen in Fortinet FortiAuthenticator","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0244"},{"id":"NCSC-2026-0245","date":"2026-07-17","title":"NCSC-2026-0245 Kwetsbaarheid verholpen in Fortinet FortiSandbox","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0245"},{"id":"NCSC-2026-0247","date":"2026-07-17","title":"NCSC-2026-0247 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0247"},{"id":"RHSA-2026:41229","date":"2026-07-17","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41229"},{"id":"RHSA-2026:41234","date":"2026-07-17","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41234"},{"id":"RHSA-2026:41235","date":"2026-07-17","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41235"},{"id":"BSI:WID-SEC-2026-2063","date":"2026-07-17","title":"Red Hat Enterprise Linux (perl-IO-Compress): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2063"},{"id":"BSI:WID-SEC-2026-2123","date":"2026-07-17","title":"Apache Tomcat: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2123"},{"id":"BSI:WID-SEC-2026-2387","date":"2026-07-17","title":"cyrus imap: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2387"},{"id":"BSI:WID-SEC-2026-2388","date":"2026-07-17","title":"HTTP/2 Server: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2388"},{"id":"BSI:WID-SEC-2026-2389","date":"2026-07-17","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2389"},{"id":"BSI:WID-SEC-2026-2391","date":"2026-07-17","title":"Grafana Loki: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2391"},{"id":"BSI:WID-SEC-2026-2392","date":"2026-07-17","title":"Microsoft Windows Admin Center: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2392"},{"id":"BSI:WID-SEC-2026-2394","date":"2026-07-17","title":"HCL BigFix (Service Management): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2394"},{"id":"BSI:WID-SEC-2026-2395","date":"2026-07-17","title":"IBM Cognos Analytics: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2395"},{"id":"BSI:WID-SEC-2026-2396","date":"2026-07-17","title":"Microsoft Windows Terminal: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2396"},{"id":"BSI:WID-SEC-2026-2397","date":"2026-07-17","title":"Microsoft SharePoint und SharePoint Server: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2397"},{"id":"GHSA-5587-2X54-JJ6H","date":"2026-07-17","title":"Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication","source_url":"https://github.com/advisories/GHSA-5587-2x54-jj6h"},{"id":"GHSA-56R5-2P2F-7CXP","date":"2026-07-17","title":"PocketSphinx: Buffer overflows in language and acoustic model loading code","source_url":"https://github.com/advisories/GHSA-56r5-2p2f-7cxp"},{"id":"IBM:7280329","date":"2026-07-17","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7280329"},{"id":"IBM:7280360","date":"2026-07-17","title":"Security Bulletin: IBM Maximo Application Suite uses yaml-2.7.0.tgz which is vulnerable to CVE-2026-33532.","source_url":"https://www.ibm.com/support/pages/node/7280360"},{"id":"IBM:7280373","date":"2026-07-17","title":"Security Bulletin: IBM DataPower Gateway vulnerable to memory corruption in OS kernel (CVE-2023-53178)","source_url":"https://www.ibm.com/support/pages/node/7280373"},{"id":"RHSA-2026:41240","date":"2026-07-17","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:41240"},{"id":"IBM:7280196","date":"2026-07-16","title":"Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager","source_url":"https://www.ibm.com/support/pages/node/7280196"},{"id":"BSI:WID-SEC-2026-1221","date":"2026-07-16","title":"VMware Tanzu Spring Security: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1221"},{"id":"BSI:WID-SEC-2026-2117","date":"2026-07-16","title":"HCL BigFix Compliance (Ruby): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2117"},{"id":"BSI:WID-SEC-2026-2220","date":"2026-07-16","title":"DriveLock On-Premise und Cloud: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2220"},{"id":"BSI:WID-SEC-2026-2321","date":"2026-07-16","title":"Microsoft Azure: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2321"},{"id":"NCSC-2026-0242","date":"2026-07-16","title":"NCSC-2026-0242 Kwetsbaarheden verholpen in Mozilla Firefox","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0242"},{"id":"RHSA-2026:36611","date":"2026-07-16","title":"OpenShift Container Platform 4.14.69 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36611"},{"id":"RHSA-2026:36620","date":"2026-07-16","title":"OpenShift Container Platform 4.16.66 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36620"},{"id":"RHSA-2026:36621","date":"2026-07-16","title":"OpenShift Container Platform 4.16.66 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36621"},{"id":"RHSA-2026:40751","date":"2026-07-16","title":"gimp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40751"},{"id":"RHSA-2026:40760","date":"2026-07-16","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40760"},{"id":"RHSA-2026:40831","date":"2026-07-16","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40831"},{"id":"RHSA-2026:40833","date":"2026-07-16","title":"pacemaker security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40833"},{"id":"RHSA-2026:40841","date":"2026-07-16","title":"maven:3.8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40841"},{"id":"RHSA-2026:40894","date":"2026-07-16","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40894"},{"id":"RHSA-2026:40895","date":"2026-07-16","title":"jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40895"},{"id":"RHSA-2026:40924","date":"2026-07-16","title":"external secrets operator for Red Hat OpenShift 1.0.1","source_url":"https://access.redhat.com/errata/RHSA-2026:40924"},{"id":"RHSA-2026:40945","date":"2026-07-16","title":"Red Hat Edge Manager Version 1.1.3 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40945"},{"id":"RHSA-2026:40967","date":"2026-07-16","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:40967"},{"id":"RHSA-2026:40969","date":"2026-07-16","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:40969"},{"id":"RHSA-2026:40970","date":"2026-07-16","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:40970"},{"id":"RHSA-2026:40972","date":"2026-07-16","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:40972"},{"id":"RHSA-2026:40974","date":"2026-07-16","title":"RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:40974"},{"id":"RHSA-2026:40984","date":"2026-07-16","title":"Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:40984"},{"id":"RHSA-2026:41019","date":"2026-07-16","title":"Red Hat Edge Manager Version 1.1.3 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:41019"},{"id":"RHSA-2026:41030","date":"2026-07-16","title":"Multicluster Global Hub 1.4.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41030"},{"id":"RHSA-2026:41031","date":"2026-07-16","title":"Red Hat Quay 3.10.24","source_url":"https://access.redhat.com/errata/RHSA-2026:41031"},{"id":"RHSA-2026:41036","date":"2026-07-16","title":"Red Hat OpenShift Builds 1.8.1","source_url":"https://access.redhat.com/errata/RHSA-2026:41036"},{"id":"RHSA-2026:41054","date":"2026-07-16","title":"Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41054"},{"id":"RHSA-2026:41055","date":"2026-07-16","title":"multicluster engine for Kubernetes v2.6.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41055"},{"id":"RHSA-2026:41056","date":"2026-07-16","title":"Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41056"},{"id":"RHSA-2026:41064","date":"2026-07-16","title":"Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:41064"},{"id":"RHSA-2026:41066","date":"2026-07-16","title":"Red Hat Quay 3.16.5","source_url":"https://access.redhat.com/errata/RHSA-2026:41066"},{"id":"BSI:WID-SEC-2023-0505","date":"2026-07-16","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0505"},{"id":"BSI:WID-SEC-2023-1283","date":"2026-07-16","title":"PHP: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1283"},{"id":"BSI:WID-SEC-2025-2078","date":"2026-07-16","title":"Red Hat Enterprise Linux (Developer Hub): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2078"},{"id":"BSI:WID-SEC-2026-1589","date":"2026-07-16","title":"n8n: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1589"},{"id":"BSI:WID-SEC-2026-2223","date":"2026-07-16","title":"Apache Airflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2223"},{"id":"BSI:WID-SEC-2026-2224","date":"2026-07-16","title":"xwiki: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2224"},{"id":"BSI:WID-SEC-2026-2334","date":"2026-07-16","title":"Red Hat OpenShift Container Platform (fast-uri,OpenTelemetry-Go) : Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2334"},{"id":"BSI:WID-SEC-2026-2362","date":"2026-07-16","title":"Perl: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2362"},{"id":"ICSA-26-197-01","date":"2026-07-16","title":"Rockwell Automation Arena","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01"},{"id":"ICSA-26-197-02","date":"2026-07-16","title":"Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02"},{"id":"ICSA-26-197-03","date":"2026-07-16","title":"NASA Core Flight System (cFS) Health & Safety (HS) Application","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-03"},{"id":"ICSA-26-197-04","date":"2026-07-16","title":"AutomationDirect Productivity Suite","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04"},{"id":"ICSA-26-197-05","date":"2026-07-16","title":"Siemens SICAM 8","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-05"},{"id":"ICSA-26-197-06","date":"2026-07-16","title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06"},{"id":"ICSA-26-197-07","date":"2026-07-16","title":"SALTO ProAccess Space","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07"},{"id":"ICSA-26-197-08","date":"2026-07-16","title":"Rockwell Automation Flex 5000 Adapter","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08"},{"id":"ICSA-26-197-09","date":"2026-07-16","title":"Rockwell Automation FactoryTalk DataMosaix","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-09"},{"id":"GHSA-PR64-JMMF-JP54","date":"2026-07-16","title":"ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)","source_url":"https://github.com/advisories/GHSA-pr64-jmmf-jp54"},{"id":"GHSA-XG43-5579-QW6V","date":"2026-07-16","title":"adawolfa/isdoc: Uncontrolled resource consumption (decompression bomb) when reading untrusted ISDOCX or PDF files","source_url":"https://github.com/advisories/GHSA-xg43-5579-qw6v"},{"id":"IBM:7280204","date":"2026-07-16","title":"Security Bulletin: The IBM Common Licensing using IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923)","source_url":"https://www.ibm.com/support/pages/node/7280204"},{"id":"NCSC-2026-0241","date":"2026-07-16","title":"NCSC-2026-0241 Kwetsbaarheden verholpen in Adobe ColdFusion","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0241"},{"id":"BSI:WID-SEC-2026-2385","date":"2026-07-16","title":"ESET Server Security: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2385"},{"id":"RHSA-2026:40573","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40573"},{"id":"RHSA-2026:40700","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40700"},{"id":"RHSA-2026:40724","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40724"},{"id":"RHSA-2026:40938","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40938"},{"id":"RHSA-2026:40964","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40964"},{"id":"RHSA-2026:41020","date":"2026-07-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:41020"},{"id":"RHSA-2026:41130","date":"2026-07-16","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:41130"},{"id":"BSI:WID-SEC-2025-0975","date":"2026-07-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0975"},{"id":"BSI:WID-SEC-2025-1465","date":"2026-07-15","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1465"},{"id":"BSI:WID-SEC-2026-0525","date":"2026-07-15","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0525"},{"id":"BSI:WID-SEC-2026-2302","date":"2026-07-15","title":"ServiceNow AI Platform: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2302"},{"id":"BSI:WID-SEC-2026-2325","date":"2026-07-15","title":"Microsoft Dynamics NAV: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2325"},{"id":"BSI:WID-SEC-2026-2345","date":"2026-07-15","title":"Red Hat Enterprise Linux (pacemaker): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2345"},{"id":"BSI:WID-SEC-2026-2367","date":"2026-07-15","title":"Adobe Magento: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2367"},{"id":"CISCO-SA-HARDENING-ROOMOS-AQNMBEQ","date":"2026-07-15","title":"Cisco RoomOS Security Hardening Release: July 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq"},{"id":"NCSC-2026-0239","date":"2026-07-15","title":"NCSC-2026-0239 Zero-Day kwetsbaarheden verholpen in SonicWall SMA1000","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0239"},{"id":"RHSA-2026:37192","date":"2026-07-15","title":"OpenShift Container Platform 4.18.48 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37192"},{"id":"RHSA-2026:37193","date":"2026-07-15","title":"OpenShift Container Platform 4.18.48 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:37193"},{"id":"RHSA-2026:37580","date":"2026-07-15","title":"OpenShift Container Platform 4.19.38 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37580"},{"id":"RHSA-2026:37581","date":"2026-07-15","title":"OpenShift Container Platform 4.19.38 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:37581"},{"id":"RHSA-2026:39575","date":"2026-07-15","title":"cifs-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39575"},{"id":"RHSA-2026:39576","date":"2026-07-15","title":"cifs-utils security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39576"},{"id":"RHSA-2026:39706","date":"2026-07-15","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39706"},{"id":"RHSA-2026:39771","date":"2026-07-15","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39771"},{"id":"RHSA-2026:39798","date":"2026-07-15","title":"python3.9 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39798"},{"id":"RHSA-2026:39808","date":"2026-07-15","title":"Red Hat OpenStack Services on OpenShift 18.0 (openstack-keystone) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39808"},{"id":"RHSA-2026:39809","date":"2026-07-15","title":"Red Hat OpenStack Services on OpenShift 18.0 (erlang) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39809"},{"id":"RHSA-2026:39810","date":"2026-07-15","title":"Red Hat OpenStack Services on OpenShift 18.0 (golang-github-openstack-k8s-operators-os-diff) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39810"},{"id":"RHSA-2026:39811","date":"2026-07-15","title":"Red Hat OpenStack Services on OpenShift 18.0 (openstack-ironic) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39811"},{"id":"RHSA-2026:39812","date":"2026-07-15","title":"Red Hat OpenStack Services on OpenShift 18.0 (openstack-glance) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39812"},{"id":"RHSA-2026:39868","date":"2026-07-15","title":"nodejs:24 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39868"},{"id":"RHSA-2026:39879","date":"2026-07-15","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39879"},{"id":"RHSA-2026:39893","date":"2026-07-15","title":"python3.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39893"},{"id":"RHSA-2026:39894","date":"2026-07-15","title":"Release of containers for RHOSO 18.0.21","source_url":"https://access.redhat.com/errata/RHSA-2026:39894"},{"id":"RHSA-2026:39976","date":"2026-07-15","title":"hplip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39976"},{"id":"RHSA-2026:39981","date":"2026-07-15","title":"Cost Management Metrics Operator Update","source_url":"https://access.redhat.com/errata/RHSA-2026:39981"},{"id":"RHSA-2026:39984","date":"2026-07-15","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39984"},{"id":"RHSA-2026:40068","date":"2026-07-15","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40068"},{"id":"RHSA-2026:40082","date":"2026-07-15","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40082"},{"id":"RHSA-2026:40118","date":"2026-07-15","title":"Red Hat Edge Manager Version 1.1.3 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40118"},{"id":"RHSA-2026:40119","date":"2026-07-15","title":"multicluster engine for Kubernetes v2.6.12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40119"},{"id":"RHSA-2026:40138","date":"2026-07-15","title":"Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:40138"},{"id":"RHSA-2026:40262","date":"2026-07-15","title":"Red Hat Quay 3.9.24","source_url":"https://access.redhat.com/errata/RHSA-2026:40262"},{"id":"RHSA-2026:40425","date":"2026-07-15","title":"kernel update","source_url":"https://access.redhat.com/errata/RHSA-2026:40425"},{"id":"BSI:WID-SEC-2023-2189","date":"2026-07-15","title":"BusyBox: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2189"},{"id":"BSI:WID-SEC-2025-1480","date":"2026-07-15","title":"Red Hat Enterprise Linux (jq): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1480"},{"id":"BSI:WID-SEC-2026-2342","date":"2026-07-15","title":"Grafana Tempo: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2342"},{"id":"BSI:WID-SEC-2026-2365","date":"2026-07-15","title":"Red Hat OpenShift (OpenStack Services): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2365"},{"id":"CISCO-SA-ISE-TRAVERSAL-XNT7WB2Y","date":"2026-07-15","title":"Cisco Identity Services Engine Path Traversal Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-traversal-xNt7wb2Y"},{"id":"IBM:7280091","date":"2026-07-15","title":"IBM Jazz Reporting Service is affected by Nesting-Based mXSS Vulnerability of DOMPurify","source_url":"https://www.ibm.com/support/pages/node/7280091"},{"id":"IBM:7280092","date":"2026-07-15","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko","source_url":"https://www.ibm.com/support/pages/node/7280092"},{"id":"IBM:7280093","date":"2026-07-15","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pip","source_url":"https://www.ibm.com/support/pages/node/7280093"},{"id":"IBM:7280094","date":"2026-07-15","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to PyJWT","source_url":"https://www.ibm.com/support/pages/node/7280094"},{"id":"IBM:7280095","date":"2026-07-15","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to urllib3","source_url":"https://www.ibm.com/support/pages/node/7280095"},{"id":"IBM:7280106","date":"2026-07-15","title":"Vulnerability in python (CVE-2026-50219) affects AIX/VIOS.","source_url":"https://www.ibm.com/support/pages/node/7280106"},{"id":"IBM:7280108","date":"2026-07-15","title":"Multiple vulnerabilities in Python affects AIX/VIOS.","source_url":"https://www.ibm.com/support/pages/node/7280108"},{"id":"RHSA-2026:39983","date":"2026-07-15","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39983"},{"id":"CISCO-SA-NOTICE-ILH3ZRP5","date":"2026-07-15","title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5"},{"id":"RHSA-2026:39952","date":"2026-07-15","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39952"},{"id":"RHSA-2026:39985","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:39985"},{"id":"RHSA-2026:39997","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:39997"},{"id":"RHSA-2026:40041","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40041"},{"id":"RHSA-2026:40223","date":"2026-07-15","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40223"},{"id":"RHSA-2026:40236","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40236"},{"id":"RHSA-2026:40380","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40380"},{"id":"RHSA-2026:40415","date":"2026-07-15","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:40415"},{"id":"RHSA-2026:40416","date":"2026-07-15","title":"php:8.2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40416"},{"id":"RHSA-2026:40485","date":"2026-07-15","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40485"},{"id":"RHSA-2026:40486","date":"2026-07-15","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:40486"},{"id":"BSI:WID-SEC-2026-2312","date":"2026-07-14","title":"Notepad++: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2312"},{"id":"NCSC-2026-0235","date":"2026-07-14","title":"NCSC-2026-0235 Kwetsbaarheden verholpen in Microsoft Developer Tools","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0235"},{"id":"NCSC-2026-0236","date":"2026-07-14","title":"NCSC-2026-0236 Kwetsbaarheden verholpen in Microsoft Defender","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0236"},{"id":"NCSC-2026-0238","date":"2026-07-14","title":"NCSC-2026-0238 Kwetsbaarheid verholpen in Microsoft Dynamics","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0238"},{"id":"RHSA-2026:37186","date":"2026-07-14","title":"OpenShift Container Platform 4.21.24 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37186"},{"id":"RHSA-2026:37187","date":"2026-07-14","title":"OpenShift Container Platform 4.21.24 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:37187"},{"id":"RHSA-2026:37585","date":"2026-07-14","title":"OpenShift Container Platform 4.22.5 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37585"},{"id":"RHSA-2026:37628","date":"2026-07-14","title":"OpenShift Container Platform 4.20.29 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37628"},{"id":"RHSA-2026:37629","date":"2026-07-14","title":"OpenShift Container Platform 4.20.29 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:37629"},{"id":"RHSA-2026:39082","date":"2026-07-14","title":"kernel-rt update","source_url":"https://access.redhat.com/errata/RHSA-2026:39082"},{"id":"RHSA-2026:39083","date":"2026-07-14","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39083"},{"id":"RHSA-2026:39115","date":"2026-07-14","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39115"},{"id":"RHSA-2026:39127","date":"2026-07-14","title":"python-pillow security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39127"},{"id":"RHSA-2026:39141","date":"2026-07-14","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39141"},{"id":"RHSA-2026:39142","date":"2026-07-14","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39142"},{"id":"RHSA-2026:39180","date":"2026-07-14","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39180"},{"id":"RHSA-2026:39189","date":"2026-07-14","title":"Red Hat JBoss Web Server 7.0.0 security release","source_url":"https://access.redhat.com/errata/RHSA-2026:39189"},{"id":"RHSA-2026:39246","date":"2026-07-14","title":"nodejs22 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39246"},{"id":"RHSA-2026:39266","date":"2026-07-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39266"},{"id":"RHSA-2026:39272","date":"2026-07-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39272"},{"id":"RHSA-2026:39319","date":"2026-07-14","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39319"},{"id":"RHSA-2026:39320","date":"2026-07-14","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39320"},{"id":"RHSA-2026:39371","date":"2026-07-14","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39371"},{"id":"RHSA-2026:39428","date":"2026-07-14","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39428"},{"id":"RHSA-2026:39494","date":"2026-07-14","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39494"},{"id":"RHSA-2026:39547","date":"2026-07-14","title":"perl-XML-LibXML security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39547"},{"id":"RHSA-2026:39553","date":"2026-07-14","title":"perl-XML-LibXML security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39553"},{"id":"RHSA-2026:39573","date":"2026-07-14","title":"yggdrasil security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39573"},{"id":"BSI:WID-SEC-2026-2307","date":"2026-07-14","title":"Siemens SIMATIC S7: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2307"},{"id":"BSI:WID-SEC-2026-2311","date":"2026-07-14","title":"Apache ActiveMQ: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2311"},{"id":"BSI:WID-SEC-2026-2315","date":"2026-07-14","title":"AnyDesk: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2315"},{"id":"ICSA-26-195-01","date":"2026-07-14","title":"ABB Advant Master Online Builder","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01"},{"id":"ICSA-26-195-02","date":"2026-07-14","title":"ABB Ability Edgenius","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-02"},{"id":"ICSA-26-195-03","date":"2026-07-14","title":"ABB T-MAC Plus","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-03"},{"id":"ICSA-26-195-04","date":"2026-07-14","title":"Rockwell Automation 1715-AENTR EtherNet/IP Adapter","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-04"},{"id":"GHSA-2CF7-HPWF-47H9","date":"2026-07-14","title":"n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode","source_url":"https://github.com/advisories/GHSA-2cf7-hpwf-47h9"},{"id":"GHSA-2P2F-PX33-4VV5","date":"2026-07-14","title":"nebula-mesh: CA private key not zeroized on web mobile-bundle error paths","source_url":"https://github.com/advisories/GHSA-2p2f-px33-4vv5"},{"id":"GHSA-7RX3-5WX3-5V76","date":"2026-07-14","title":"Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`","source_url":"https://github.com/advisories/GHSA-7rx3-5wx3-5v76"},{"id":"GHSA-CM26-5974-52H8","date":"2026-07-14","title":"nebula-mesh: Certificate revocation is never enforced at the mesh","source_url":"https://github.com/advisories/GHSA-cm26-5974-52h8"},{"id":"GHSA-G4X6-JCVR-9M3G","date":"2026-07-14","title":"nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens","source_url":"https://github.com/advisories/GHSA-g4x6-jcvr-9m3g"},{"id":"GHSA-HGJX-R89M-M7V4","date":"2026-07-14","title":"FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE","source_url":"https://github.com/advisories/GHSA-hgjx-r89m-m7v4"},{"id":"GHSA-M3CX-MWPG-32JG","date":"2026-07-14","title":"nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting","source_url":"https://github.com/advisories/GHSA-m3cx-mwpg-32jg"},{"id":"GHSA-MF78-3RPF-R784","date":"2026-07-14","title":"Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode","source_url":"https://github.com/advisories/GHSA-mf78-3rpf-r784"},{"id":"GHSA-Q4VM-PQ3Q-8WGQ","date":"2026-07-14","title":"nebula-mesh: Operator session tokens stored in plaintext in the database","source_url":"https://github.com/advisories/GHSA-q4vm-pq3q-8wgq"},{"id":"GHSA-QF34-295C-26V8","date":"2026-07-14","title":"Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend","source_url":"https://github.com/advisories/GHSA-qf34-295c-26v8"},{"id":"GHSA-VHCH-2WF3-M8RP","date":"2026-07-14","title":"Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder","source_url":"https://github.com/advisories/GHSA-vhch-2wf3-m8rp"},{"id":"GHSA-X9VC-9FFQ-P3GJ","date":"2026-07-14","title":"NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode","source_url":"https://github.com/advisories/GHSA-x9vc-9ffq-p3gj"},{"id":"IBM:7279944","date":"2026-07-14","title":"IBM Engineering Lifecycle Management - Doors Next is impacted by vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7279944"},{"id":"IBM:7279947","date":"2026-07-14","title":"IBM Automation Decision Services for June 2026- Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7279947"},{"id":"IBM:7279949","date":"2026-07-14","title":"IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by a cross-site request forgery vulnerability","source_url":"https://www.ibm.com/support/pages/node/7279949"},{"id":"IBM:7279958","date":"2026-07-14","title":"IBM Jazz Reporting Service is affected by RDF/XML parser of Apache Jena","source_url":"https://www.ibm.com/support/pages/node/7279958"},{"id":"IBM:7279980","date":"2026-07-14","title":"Multiple vulnerabilities in IBM Rapid Infrastructure Automation","source_url":"https://www.ibm.com/support/pages/node/7279980"},{"id":"IBM:7280015","date":"2026-07-14","title":"SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Axios","source_url":"https://www.ibm.com/support/pages/node/7280015"},{"id":"RHSA-2026:39119","date":"2026-07-14","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39119"},{"id":"RHSA-2026:39296","date":"2026-07-14","title":"libinput security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39296"},{"id":"RHSA-2026:39297","date":"2026-07-14","title":"edk2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39297"},{"id":"RHSA-2026:39302","date":"2026-07-14","title":"cups security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39302"},{"id":"RHSA-2026:39304","date":"2026-07-14","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39304"},{"id":"RHSA-2026:39309","date":"2026-07-14","title":"capstone security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39309"},{"id":"BSI:WID-SEC-2026-2293","date":"2026-07-13","title":"Red Hat Enterprise Linux (openexr): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2293"},{"id":"BSI:WID-SEC-2026-2296","date":"2026-07-13","title":"Netwrix Password Secure: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2296"},{"id":"BSI:WID-SEC-2026-2297","date":"2026-07-13","title":"Google Cloud Platform (BigQuery, Dataform, Colab Enterprise): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2297"},{"id":"NCSC-2026-0224","date":"2026-07-13","title":"NCSC-2026-0224 Kwetsbaarheden verholpen in Juniper Networks Junos OS en Junos OS Evolved","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0224"},{"id":"NCSC-2026-0225","date":"2026-07-13","title":"NCSC-2026-0225 Kwetsbaarheden verholpen in Siemens SICORE","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0225"},{"id":"NCSC-2026-0226","date":"2026-07-13","title":"NCSC-2026-0226 Kwetsbaarheden verholpen in Progress MOVEit Transfer","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0226"},{"id":"NCSC-2026-0227","date":"2026-07-13","title":"NCSC-2026-0227 Kwetsbaarheden verholpen in Palo Alto Networks PAN-OS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0227"},{"id":"NCSC-2026-0228","date":"2026-07-13","title":"NCSC-2026-0228 Kwetsbaarheden verholpen in n8n workflow automation platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0228"},{"id":"RHSA-2026:38485","date":"2026-07-13","title":"gegl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38485"},{"id":"RHSA-2026:38488","date":"2026-07-13","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38488"},{"id":"RHSA-2026:38489","date":"2026-07-13","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38489"},{"id":"RHSA-2026:38490","date":"2026-07-13","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38490"},{"id":"RHSA-2026:38493","date":"2026-07-13","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38493"},{"id":"RHSA-2026:38494","date":"2026-07-13","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38494"},{"id":"RHSA-2026:38502","date":"2026-07-13","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38502"},{"id":"RHSA-2026:38505","date":"2026-07-13","title":"tomcat security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38505"},{"id":"RHSA-2026:38506","date":"2026-07-13","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38506"},{"id":"RHSA-2026:38512","date":"2026-07-13","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38512"},{"id":"RHSA-2026:38513","date":"2026-07-13","title":"perl-DBI security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38513"},{"id":"RHSA-2026:38514","date":"2026-07-13","title":"plexus-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38514"},{"id":"RHSA-2026:38751","date":"2026-07-13","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38751"},{"id":"RHSA-2026:38753","date":"2026-07-13","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38753"},{"id":"RHSA-2026:38810","date":"2026-07-13","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38810"},{"id":"RHSA-2026:38847","date":"2026-07-13","title":"nginx:1.24 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38847"},{"id":"RHSA-2026:38901","date":"2026-07-13","title":"perl-DBI:1.641 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38901"},{"id":"RHSA-2026:38902","date":"2026-07-13","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38902"},{"id":"RHSA-2026:38995","date":"2026-07-13","title":"go-toolset:rhel8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38995"},{"id":"RHSA-2026:39005","date":"2026-07-13","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39005"},{"id":"RHSA-2026:39011","date":"2026-07-13","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39011"},{"id":"RHSA-2026:39012","date":"2026-07-13","title":"compat-openssl11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39012"},{"id":"RHSA-2026:39024","date":"2026-07-13","title":"openexr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39024"},{"id":"RHSA-2026:39025","date":"2026-07-13","title":"openexr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39025"},{"id":"RHSA-2026:39026","date":"2026-07-13","title":"openexr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39026"},{"id":"RHSA-2026:39027","date":"2026-07-13","title":"openexr security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39027"},{"id":"RHSA-2026:38804","date":"2026-07-13","title":"openssl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38804"},{"id":"RHSA-2026:38805","date":"2026-07-13","title":"openssl security update","source_url":"https://access.redhat.com/errata/RHSA-2026:38805"},{"id":"RHSA-2026:39006","date":"2026-07-13","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39006"},{"id":"RHSA-2026:39007","date":"2026-07-13","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39007"},{"id":"RHSA-2026:39008","date":"2026-07-13","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39008"},{"id":"RHSA-2026:39010","date":"2026-07-13","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:39010"},{"id":"USN-8532-1","date":"2026-07-13","title":"libssh2 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8532-1"},{"id":"USN-8533-1","date":"2026-07-13","title":"OpenSSH vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8533-1"},{"id":"USN-8535-1","date":"2026-07-13","title":"PipeWire vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8535-1"},{"id":"RHSA-2026:38694","date":"2026-07-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38694"},{"id":"RHSA-2026:39022","date":"2026-07-13","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:39022"},{"id":"RHSA-2026:39023","date":"2026-07-13","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39023"},{"id":"RHSA-2026:39058","date":"2026-07-13","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:39058"},{"id":"RHSA-2026:38279","date":"2026-07-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38279"},{"id":"RHSA-2026:38304","date":"2026-07-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38304"},{"id":"RHSA-2026:38342","date":"2026-07-12","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38342"},{"id":"IBM:7279533","date":"2026-07-11","title":"Vulnerability in follow-redirects bundled with IBM Fusion and IBM Fusion HCI","source_url":"https://www.ibm.com/support/pages/node/7279533"},{"id":"IBM:7279687","date":"2026-07-11","title":"Vulnerability in undici bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage","source_url":"https://www.ibm.com/support/pages/node/7279687"},{"id":"IBM:7279688","date":"2026-07-11","title":"Vulnerability in bytes bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage","source_url":"https://www.ibm.com/support/pages/node/7279688"},{"id":"RHSA-2026:38187","date":"2026-07-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38187"},{"id":"RHSA-2026:38236","date":"2026-07-11","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38236"},{"id":"GHSA-9M9W-GXF7-RH8M","date":"2026-07-10","title":"Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering","source_url":"https://github.com/advisories/GHSA-9m9w-gxf7-rh8m"},{"id":"GHSA-H74C-Q9J7-MPCM","date":"2026-07-10","title":"Tesla vulnerable to atom exhaustion via untrusted URL scheme","source_url":"https://github.com/advisories/GHSA-h74c-q9j7-mpcm"},{"id":"GHSA-MC85-72GR-VM9F","date":"2026-07-10","title":"Tesla has decompression bomb on response body","source_url":"https://github.com/advisories/GHSA-mc85-72gr-vm9f"},{"id":"IBM:7279479","date":"2026-07-10","title":"Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)","source_url":"https://www.ibm.com/support/pages/node/7279479"},{"id":"NCSC-2026-0222","date":"2026-07-10","title":"NCSC-2026-0222 Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0222"},{"id":"NCSC-2026-0223","date":"2026-07-10","title":"NCSC-2026-0223 Kwetsbaarheden verholpen in BeyondTrust Remote Support en Privileged Remote Access","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0223"},{"id":"RHSA-2026:37728","date":"2026-07-10","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37728"},{"id":"RHSA-2026:37729","date":"2026-07-10","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37729"},{"id":"GHSA-48RX-C7PG-Q66R","date":"2026-07-10","title":"Excon does not redact additional sensitive/risky headers when following redirects","source_url":"https://github.com/advisories/GHSA-48rx-c7pg-q66r"},{"id":"GHSA-56MP-4F3V-FGJ2","date":"2026-07-10","title":"SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content","source_url":"https://github.com/advisories/GHSA-56mp-4f3v-fgj2"},{"id":"GHSA-FPG8-7664-JC5Q","date":"2026-07-10","title":"melange: Incomplete package integrity verification allows data section substitution","source_url":"https://github.com/advisories/GHSA-fpg8-7664-jc5q"},{"id":"GHSA-G936-7JQJ-MWV8","date":"2026-07-10","title":"TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation","source_url":"https://github.com/advisories/GHSA-g936-7jqj-mwv8"},{"id":"GHSA-H4G2-XFMW-Q2C9","date":"2026-07-10","title":"Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset","source_url":"https://github.com/advisories/GHSA-h4g2-xfmw-q2c9"},{"id":"GHSA-M5F5-28QR-9G9R","date":"2026-07-10","title":"prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE","source_url":"https://github.com/advisories/GHSA-m5f5-28qr-9g9r"},{"id":"GHSA-RQQ5-2GF9-4W4Q","date":"2026-07-10","title":"Secure Headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input","source_url":"https://github.com/advisories/GHSA-rqq5-2gf9-4w4q"},{"id":"IBM:7279458","date":"2026-07-10","title":"IBM® Db2® is affected by a vulnerability in log4j-core (CVE-2026-34479)","source_url":"https://www.ibm.com/support/pages/node/7279458"},{"id":"IBM:7279459","date":"2026-07-10","title":"IBM® Db2® is affected by a vulnerability in netty-codec-http-4.1.130.Final.jar (CVE-2026-41417)","source_url":"https://www.ibm.com/support/pages/node/7279459"},{"id":"IBM:7279466","date":"2026-07-10","title":"IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc (CVE-2026-10535)","source_url":"https://www.ibm.com/support/pages/node/7279466"},{"id":"IBM:7279474","date":"2026-07-10","title":"IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries (CVE-2026-10695)","source_url":"https://www.ibm.com/support/pages/node/7279474"},{"id":"IBM:7279709","date":"2026-07-10","title":"IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty (CVE-2026-50010,CVE-2026-50020,CVE-2026-45416 & CVE-2026-44249)","source_url":"https://www.ibm.com/support/pages/node/7279709"},{"id":"IBM:7279710","date":"2026-07-10","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pyOpenSSL","source_url":"https://www.ibm.com/support/pages/node/7279710"},{"id":"IBM:7279712","date":"2026-07-10","title":"IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7279712"},{"id":"USN-8492-5","date":"2026-07-10","title":"Linux kernel (FIPS) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8492-5"},{"id":"USN-8527-1","date":"2026-07-10","title":"Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8527-1"},{"id":"USN-8528-1","date":"2026-07-10","title":"Linux kernel (Xilinx ZynqMP) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8528-1"},{"id":"GHSA-28JH-G32X-V9V4","date":"2026-07-10","title":"Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values","source_url":"https://github.com/advisories/GHSA-28jh-g32x-v9v4"},{"id":"RHSA-2026:37468","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37468"},{"id":"RHSA-2026:37469","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37469"},{"id":"RHSA-2026:37530","date":"2026-07-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37530"},{"id":"RHSA-2026:37532","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37532"},{"id":"RHSA-2026:37533","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37533"},{"id":"RHSA-2026:37534","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37534"},{"id":"RHSA-2026:37535","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37535"},{"id":"RHSA-2026:37577","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37577"},{"id":"RHSA-2026:37764","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:37764"},{"id":"RHSA-2026:37767","date":"2026-07-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37767"},{"id":"RHSA-2026:38009","date":"2026-07-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38009"},{"id":"RHSA-2026:38017","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38017"},{"id":"RHSA-2026:38018","date":"2026-07-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:38018"},{"id":"RHSA-2026:38019","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38019"},{"id":"RHSA-2026:38090","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38090"},{"id":"RHSA-2026:38091","date":"2026-07-10","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:38091"},{"id":"RHSA-2026:34098","date":"2026-07-09","title":"OpenShift Container Platform 4.17.55 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34098"},{"id":"RHSA-2026:37275","date":"2026-07-09","title":"RHOAI 3.3.5 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"id":"BSI:WID-SEC-2026-2251","date":"2026-07-09","title":"Drupal Module: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2251"},{"id":"BSI:WID-SEC-2026-2262","date":"2026-07-09","title":"Progress Software MOVEit: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2262"},{"id":"BSI:WID-SEC-2026-2264","date":"2026-07-09","title":"FreeRDP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2264"},{"id":"BSI:WID-SEC-2026-2266","date":"2026-07-09","title":"rclone: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2266"},{"id":"RHSA-2026:34048","date":"2026-07-09","title":"OpenShift Container Platform 4.12.93 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34048"},{"id":"RHSA-2026:34049","date":"2026-07-09","title":"OpenShift Container Platform 4.12.93 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34049"},{"id":"RHSA-2026:34050","date":"2026-07-09","title":"OpenShift Container Platform 4.12.93 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:34050"},{"id":"RHSA-2026:34099","date":"2026-07-09","title":"OpenShift Container Platform 4.17.55 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34099"},{"id":"RHSA-2026:34100","date":"2026-07-09","title":"OpenShift Container Platform 4.17.55 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:34100"},{"id":"RHSA-2026:36956","date":"2026-07-09","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36956"},{"id":"RHSA-2026:36957","date":"2026-07-09","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36957"},{"id":"RHSA-2026:37072","date":"2026-07-09","title":"podman security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37072"},{"id":"RHSA-2026:37123","date":"2026-07-09","title":"podman security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37123"},{"id":"RHSA-2026:37130","date":"2026-07-09","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37130"},{"id":"RHSA-2026:37136","date":"2026-07-09","title":"tomcat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37136"},{"id":"RHSA-2026:37207","date":"2026-07-09","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37207"},{"id":"RHSA-2026:37210","date":"2026-07-09","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37210"},{"id":"RHSA-2026:37238","date":"2026-07-09","title":"ruby:3.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37238"},{"id":"RHSA-2026:37252","date":"2026-07-09","title":"Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.4","source_url":"https://access.redhat.com/errata/RHSA-2026:37252"},{"id":"RHSA-2026:37267","date":"2026-07-09","title":"RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:37267"},{"id":"RHSA-2026:37268","date":"2026-07-09","title":"RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:37268"},{"id":"RHSA-2026:37271","date":"2026-07-09","title":"RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:37271"},{"id":"RHSA-2026:37272","date":"2026-07-09","title":"RHTAS 1.4.2 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:37272"},{"id":"RHSA-2026:37278","date":"2026-07-09","title":"RHTAS 1.4.2 - Tech Preview Release Of the Go based Model Transparency CLI","source_url":"https://access.redhat.com/errata/RHSA-2026:37278"},{"id":"RHSA-2026:37282","date":"2026-07-09","title":"unbound security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37282"},{"id":"RHSA-2026:37283","date":"2026-07-09","title":"RHTAS 1.4 - GA Release of Model Transparency 1.0.2","source_url":"https://access.redhat.com/errata/RHSA-2026:37283"},{"id":"RHSA-2026:37286","date":"2026-07-09","title":"RHTAS 1.4.2 - Tech Preview Release Of the Model Validation Operator","source_url":"https://access.redhat.com/errata/RHSA-2026:37286"},{"id":"RHSA-2026:37287","date":"2026-07-09","title":"Kiali 2.4.20 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:37287"},{"id":"RHSA-2026:37288","date":"2026-07-09","title":"Kiali 2.22.7 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:37288"},{"id":"RHSA-2026:37296","date":"2026-07-09","title":"RHTAS 1.0.1 - GA Release Of the Policy Controller Operator","source_url":"https://access.redhat.com/errata/RHSA-2026:37296"},{"id":"RHSA-2026:37297","date":"2026-07-09","title":"Kiali 2.11.14 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:37297"},{"id":"RHSA-2026:37385","date":"2026-07-09","title":"rh-podman-desktop security advisory update","source_url":"https://access.redhat.com/errata/RHSA-2026:37385"},{"id":"RHSA-2026:37387","date":"2026-07-09","title":"Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:37387"},{"id":"RHSA-2026:37390","date":"2026-07-09","title":"Red Hat Build of Apache Camel 4.18.1.P1 for Spring Boot release.","source_url":"https://access.redhat.com/errata/RHSA-2026:37390"},{"id":"RHSA-2026:37391","date":"2026-07-09","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37391"},{"id":"RHSA-2026:37397","date":"2026-07-09","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37397"},{"id":"RHSA-2026:37410","date":"2026-07-09","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37410"},{"id":"RHSA-2026:37435","date":"2026-07-09","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37435"},{"id":"RHSA-2026:37436","date":"2026-07-09","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37436"},{"id":"ICSA-26-190-01","date":"2026-07-09","title":"OpenPLC v3","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-01"},{"id":"ICSA-26-190-02","date":"2026-07-09","title":"Schneider Electric PowerChute Serial Shutdown","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02"},{"id":"ICSA-26-190-03","date":"2026-07-09","title":"Schneider Electric Easergy MiCOM Px40 Series","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-03"},{"id":"IBM:7279569","date":"2026-07-09","title":"IBM Maximo Application Suite - Monitor Component uses tomcat-embed-core-10.1.54.jar which is vulnerable to CVE-2026-41293, CVE-2026-43512, CVE-2026-43513 and CVE-2026-43515.","source_url":"https://www.ibm.com/support/pages/node/7279569"},{"id":"IBM:7279574","date":"2026-07-09","title":"IBM Operational Decision Manager for May 2026 - Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7279574"},{"id":"RHSA-2026:34757","date":"2026-07-09","title":"OpenShift Container Platform 4.19.37 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34757"},{"id":"RHSA-2026:37070","date":"2026-07-09","title":"perl:5.32 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37070"},{"id":"RHSA-2026:37249","date":"2026-07-09","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37249"},{"id":"RHSA-2026:37251","date":"2026-07-09","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37251"},{"id":"RHSA-2026:37395","date":"2026-07-09","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37395"},{"id":"RHSA-2026:37396","date":"2026-07-09","title":"compat-glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:37396"},{"id":"USN-8490-2","date":"2026-07-09","title":"Linux kernel (Real-time) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8490-2"},{"id":"USN-8492-4","date":"2026-07-09","title":"Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8492-4"},{"id":"USN-8519-1","date":"2026-07-09","title":"Go Cryptography vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8519-1"},{"id":"USN-8520-1","date":"2026-07-09","title":"Expat vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8520-1"},{"id":"USN-8521-1","date":"2026-07-09","title":"Libidn vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8521-1"},{"id":"USN-8522-1","date":"2026-07-09","title":"LibRaw vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8522-1"},{"id":"USN-8523-1","date":"2026-07-09","title":"libsoup vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8523-1"},{"id":"USN-8524-1","date":"2026-07-09","title":"Python vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8524-1"},{"id":"USN-8525-1","date":"2026-07-09","title":"curl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8525-1"},{"id":"USN-8526-1","date":"2026-07-09","title":"libheif vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8526-1"},{"id":"RHSA-2026:36978","date":"2026-07-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36978"},{"id":"RHSA-2026:37094","date":"2026-07-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37094"},{"id":"RHSA-2026:37276","date":"2026-07-09","title":"RHTAS 1.4.2 - CLI Stack Release","source_url":"https://access.redhat.com/errata/RHSA-2026:37276"},{"id":"RHSA-2026:37382","date":"2026-07-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:37382"},{"id":"BSI:WID-SEC-2022-0351","date":"2026-07-08","title":"Apache log4j: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0351"},{"id":"BSI:WID-SEC-2025-1445","date":"2026-07-08","title":"dpkg: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1445"},{"id":"RHSA-2026:34766","date":"2026-07-08","title":"OpenShift Container Platform 4.19.37 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34766"},{"id":"RHSA-2026:34815","date":"2026-07-08","title":"OpenShift Container Platform 4.18.47 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34815"},{"id":"RHSA-2026:36002","date":"2026-07-08","title":"Red Hat build of Quarkus 3.27.4.SP2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36002"},{"id":"RHSA-2026:36013","date":"2026-07-08","title":"Red Hat build of Quarkus 3.33.2.SP2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36013"},{"id":"RHSA-2026:36530","date":"2026-07-08","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36530"},{"id":"RHSA-2026:36531","date":"2026-07-08","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36531"},{"id":"RHSA-2026:36532","date":"2026-07-08","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36532"},{"id":"RHSA-2026:36533","date":"2026-07-08","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36533"},{"id":"RHSA-2026:36534","date":"2026-07-08","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36534"},{"id":"RHSA-2026:36541","date":"2026-07-08","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36541"},{"id":"RHSA-2026:36585","date":"2026-07-08","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36585"},{"id":"RHSA-2026:36617","date":"2026-07-08","title":"oci-seccomp-bpf-hook security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36617"},{"id":"RHSA-2026:36625","date":"2026-07-08","title":"RHACS 4.10.5 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:36625"},{"id":"RHSA-2026:36632","date":"2026-07-08","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36632"},{"id":"RHSA-2026:36633","date":"2026-07-08","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36633"},{"id":"RHSA-2026:36634","date":"2026-07-08","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36634"},{"id":"RHSA-2026:36641","date":"2026-07-08","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36641"},{"id":"RHSA-2026:36648","date":"2026-07-08","title":"Red Hat OpenShift Builds 1.7.4","source_url":"https://access.redhat.com/errata/RHSA-2026:36648"},{"id":"RHSA-2026:36651","date":"2026-07-08","title":"Red Hat Edge Manager Version 1.0.3 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:36651"},{"id":"RHSA-2026:36660","date":"2026-07-08","title":"Red Hat Directory Server 13.2 container image update","source_url":"https://access.redhat.com/errata/RHSA-2026:36660"},{"id":"RHSA-2026:36670","date":"2026-07-08","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36670"},{"id":"RHSA-2026:36671","date":"2026-07-08","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36671"},{"id":"RHSA-2026:36675","date":"2026-07-08","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36675"},{"id":"RHSA-2026:36749","date":"2026-07-08","title":"gstreamer1-plugins-bad-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36749"},{"id":"RHSA-2026:36754","date":"2026-07-08","title":"Red Hat Developer Hub 1.10.2 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:36754"},{"id":"RHSA-2026:36767","date":"2026-07-08","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36767"},{"id":"RHSA-2026:36768","date":"2026-07-08","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36768"},{"id":"RHSA-2026:36774","date":"2026-07-08","title":"gstreamer1-plugins-good security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36774"},{"id":"RHSA-2026:36777","date":"2026-07-08","title":"unbound security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36777"},{"id":"RHSA-2026:36790","date":"2026-07-08","title":"tomcat9 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36790"},{"id":"RHSA-2026:36796","date":"2026-07-08","title":"Red Hat Edge Manager Version 1.0.3 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:36796"},{"id":"RHSA-2026:36798","date":"2026-07-08","title":"xorg-x11-server-Xwayland security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36798"},{"id":"RHSA-2026:36808","date":"2026-07-08","title":"DevWorkspace Operator 0.42.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:36808"},{"id":"RHSA-2026:36820","date":"2026-07-08","title":"Red Hat OpenShift Dev Spaces 3.29.0 Release.","source_url":"https://access.redhat.com/errata/RHSA-2026:36820"},{"id":"RHSA-2026:36831","date":"2026-07-08","title":"httpd:2.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36831"},{"id":"RHSA-2026:36832","date":"2026-07-08","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36832"},{"id":"RHSA-2026:36839","date":"2026-07-08","title":"Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP2)","source_url":"https://access.redhat.com/errata/RHSA-2026:36839"},{"id":"RHSA-2026:36846","date":"2026-07-08","title":"httpd:2.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36846"},{"id":"RHSA-2026:36873","date":"2026-07-08","title":"Submariner v0.20 security fixes and container updates","source_url":"https://access.redhat.com/errata/RHSA-2026:36873"},{"id":"RHSA-2026:36876","date":"2026-07-08","title":"tomcat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36876"},{"id":"RHSA-2026:36877","date":"2026-07-08","title":"tomcat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36877"},{"id":"RHSA-2026:36878","date":"2026-07-08","title":"tomcat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36878"},{"id":"RHSA-2026:36879","date":"2026-07-08","title":"tomcat security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36879"},{"id":"RHSA-2026:36882","date":"2026-07-08","title":"Red Hat Advanced Cluster Management for Kubernetes v2.14.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36882"},{"id":"RHSA-2026:36883","date":"2026-07-08","title":"multicluster engine for Kubernetes v2.9.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36883"},{"id":"BSI:WID-SEC-2026-2227","date":"2026-07-08","title":"Red Hat JBoss Enterprise Application Platform (io.undertow.jastow): Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2227"},{"id":"IBM:7279343","date":"2026-07-08","title":"Multiple vulnerabilities in IBM MQ Operator and Queue manager container images","source_url":"https://www.ibm.com/support/pages/node/7279343"},{"id":"IBM:7279349","date":"2026-07-08","title":"Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge","source_url":"https://www.ibm.com/support/pages/node/7279349"},{"id":"IBM:7279367","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by an XML external entity (XXE) vulnerability due to lxml","source_url":"https://www.ibm.com/support/pages/node/7279367"},{"id":"IBM:7279371","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by improper handling of Windows device names due to Werkzeug","source_url":"https://www.ibm.com/support/pages/node/7279371"},{"id":"IBM:7279374","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by a sensitive information caching vulnerability due to Flask","source_url":"https://www.ibm.com/support/pages/node/7279374"},{"id":"IBM:7279376","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by a command injection vulnerability due to Click","source_url":"https://www.ibm.com/support/pages/node/7279376"},{"id":"IBM:7279377","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to cryptography","source_url":"https://www.ibm.com/support/pages/node/7279377"},{"id":"IBM:7279417","date":"2026-07-08","title":"IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Regular Expression Denial of Service vulnerability due to idna","source_url":"https://www.ibm.com/support/pages/node/7279417"},{"id":"RHSA-2026:36673","date":"2026-07-08","title":"gstreamer1-plugins-ugly-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36673"},{"id":"RHSA-2026:36674","date":"2026-07-08","title":"gstreamer1-plugins-ugly-free security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36674"},{"id":"RHSA-2026:36697","date":"2026-07-08","title":"opencryptoki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36697"},{"id":"RHSA-2026:36730","date":"2026-07-08","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36730"},{"id":"RHSA-2026:36732","date":"2026-07-08","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36732"},{"id":"RHSA-2026:36733","date":"2026-07-08","title":"cups security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36733"},{"id":"RHSA-2026:36782","date":"2026-07-08","title":"aardvark-dns security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36782"},{"id":"BSI:WID-SEC-2026-0191","date":"2026-07-08","title":"ImageMagick: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0191"},{"id":"BSI:WID-SEC-2026-2229","date":"2026-07-08","title":"GStreamer (webrtcbin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2229"},{"id":"RHSA-2026:36477","date":"2026-07-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36477"},{"id":"RHSA-2026:36510","date":"2026-07-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36510"},{"id":"RHSA-2026:36728","date":"2026-07-08","title":"libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36728"},{"id":"RHSA-2026:36734","date":"2026-07-08","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36734"},{"id":"RHSA-2026:36759","date":"2026-07-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36759"},{"id":"RHSA-2026:36797","date":"2026-07-08","title":"RHTAS 1.4.2 - CLI Stack Release","source_url":"https://access.redhat.com/errata/RHSA-2026:36797"},{"id":"RHSA-2026:36841","date":"2026-07-08","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:36841"},{"id":"RHSA-2026:36862","date":"2026-07-08","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:36862"},{"id":"RHSA-2026:36872","date":"2026-07-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36872"},{"id":"ICSA-26-188-02","date":"2026-07-07","title":"Hitachi Energy PROMOD V","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-02"},{"id":"ICSA-26-188-03","date":"2026-07-07","title":"Hitachi Energy e-mesh EMS","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-03"},{"id":"ICSA-26-188-05","date":"2026-07-07","title":"Siemens SINEC OS","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-05"},{"id":"ICSA-26-188-06","date":"2026-07-07","title":"Labcenter Proteus 9","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-06"},{"id":"ICSA-26-188-07","date":"2026-07-07","title":"Digi International PortServer TS, Digi One SP IA","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-188-07"},{"id":"NCSC-2026-0221","date":"2026-07-07","title":"NCSC-2026-0221 Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti Networks","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0221"},{"id":"BSI:WID-SEC-2026-2192","date":"2026-07-07","title":"Coolify: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2192"},{"id":"BSI:WID-SEC-2026-2215","date":"2026-07-07","title":"BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2215"},{"id":"BSI:WID-SEC-2026-2216","date":"2026-07-07","title":"Synacor Zimbra Classic Web Client: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2216"},{"id":"BSI:WID-SEC-2026-2218","date":"2026-07-07","title":"Red Hat Enterprise Linux (perl-HTTP-Daemon): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2218"},{"id":"RHSA-2026:34764","date":"2026-07-07","title":"OpenShift Container Platform 4.21.23 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34764"},{"id":"RHSA-2026:34769","date":"2026-07-07","title":"OpenShift Container Platform 4.21.23 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34769"},{"id":"RHSA-2026:34770","date":"2026-07-07","title":"OpenShift Container Platform 4.21.23 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:34770"},{"id":"RHSA-2026:34788","date":"2026-07-07","title":"OpenShift Container Platform 4.20.28 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34788"},{"id":"RHSA-2026:34789","date":"2026-07-07","title":"OpenShift Container Platform 4.22.4 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34789"},{"id":"RHSA-2026:34790","date":"2026-07-07","title":"OpenShift Container Platform 4.22.4 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34790"},{"id":"RHSA-2026:34791","date":"2026-07-07","title":"OpenShift Container Platform 4.20.28 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34791"},{"id":"RHSA-2026:34794","date":"2026-07-07","title":"OpenShift Container Platform 4.22.4 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34794"},{"id":"RHSA-2026:34795","date":"2026-07-07","title":"OpenShift Container Platform 4.22.4 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:34795"},{"id":"RHSA-2026:36049","date":"2026-07-07","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36049"},{"id":"RHSA-2026:36073","date":"2026-07-07","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36073"},{"id":"RHSA-2026:36083","date":"2026-07-07","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36083"},{"id":"RHSA-2026:36086","date":"2026-07-07","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36086"},{"id":"RHSA-2026:36087","date":"2026-07-07","title":"xorg-x11-server security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36087"},{"id":"RHSA-2026:36100","date":"2026-07-07","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36100"},{"id":"RHSA-2026:36101","date":"2026-07-07","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36101"},{"id":"RHSA-2026:36102","date":"2026-07-07","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36102"},{"id":"RHSA-2026:36103","date":"2026-07-07","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36103"},{"id":"RHSA-2026:36105","date":"2026-07-07","title":"Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12","source_url":"https://access.redhat.com/errata/RHSA-2026:36105"},{"id":"RHSA-2026:36107","date":"2026-07-07","title":"OpenShift Virtualization v4.15 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:36107"},{"id":"RHSA-2026:36108","date":"2026-07-07","title":"OpenShift Virtualization v4.13 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:36108"},{"id":"RHSA-2026:36162","date":"2026-07-07","title":"OpenShift Virtualization v4.15 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:36162"},{"id":"RHSA-2026:36167","date":"2026-07-07","title":"Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12","source_url":"https://access.redhat.com/errata/RHSA-2026:36167"},{"id":"RHSA-2026:36172","date":"2026-07-07","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36172"},{"id":"RHSA-2026:36186","date":"2026-07-07","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36186"},{"id":"RHSA-2026:36187","date":"2026-07-07","title":"perl-HTTP-Daemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36187"},{"id":"RHSA-2026:36188","date":"2026-07-07","title":"perl-HTTP-Daemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36188"},{"id":"RHSA-2026:36189","date":"2026-07-07","title":"perl-HTTP-Daemon security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36189"},{"id":"RHSA-2026:36193","date":"2026-07-07","title":"python3.14-pip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36193"},{"id":"RHSA-2026:36195","date":"2026-07-07","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36195"},{"id":"RHSA-2026:36197","date":"2026-07-07","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36197"},{"id":"RHSA-2026:36198","date":"2026-07-07","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36198"},{"id":"RHSA-2026:36200","date":"2026-07-07","title":"redhat-ds:11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36200"},{"id":"RHSA-2026:36201","date":"2026-07-07","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36201"},{"id":"RHSA-2026:36202","date":"2026-07-07","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36202"},{"id":"RHSA-2026:36204","date":"2026-07-07","title":"redhat-ds:11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36204"},{"id":"RHSA-2026:36205","date":"2026-07-07","title":"389-ds-base security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36205"},{"id":"RHSA-2026:36206","date":"2026-07-07","title":"389-ds:1.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36206"},{"id":"RHSA-2026:36207","date":"2026-07-07","title":"RHACS 4.11.1 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:36207"},{"id":"RHSA-2026:36208","date":"2026-07-07","title":"redhat-ds:11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36208"},{"id":"RHSA-2026:36209","date":"2026-07-07","title":"redhat-ds:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36209"},{"id":"RHSA-2026:36215","date":"2026-07-07","title":"compat-openssl10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36215"},{"id":"RHSA-2026:36216","date":"2026-07-07","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36216"},{"id":"RHSA-2026:36217","date":"2026-07-07","title":"compat-openssl10 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36217"},{"id":"RHSA-2026:36315","date":"2026-07-07","title":"python3.14-pip security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36315"},{"id":"RHSA-2026:36319","date":"2026-07-07","title":"RHACS 4.9.9 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:36319"},{"id":"RHSA-2026:36320","date":"2026-07-07","title":"unbound security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36320"},{"id":"RHSA-2026:36348","date":"2026-07-07","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36348"},{"id":"RHSA-2026:36349","date":"2026-07-07","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36349"},{"id":"RHSA-2026:36350","date":"2026-07-07","title":"satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:36350"},{"id":"RHSA-2026:36364","date":"2026-07-07","title":"nginx security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36364"},{"id":"RHSA-2026:36365","date":"2026-07-07","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36365"},{"id":"RHSA-2026:36366","date":"2026-07-07","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36366"},{"id":"RHSA-2026:36373","date":"2026-07-07","title":"httpd:2.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36373"},{"id":"BSI:WID-SEC-2025-0302","date":"2026-07-07","title":"GnuTLS: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0302"},{"id":"BSI:WID-SEC-2025-1466","date":"2026-07-07","title":"Red Hat Enterprise Linux (socat): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1466"},{"id":"BSI:WID-SEC-2026-2207","date":"2026-07-07","title":"Roundcube: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2207"},{"id":"BSI:WID-SEC-2026-2213","date":"2026-07-07","title":"Hashicorp Terraform: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2213"},{"id":"BSI:WID-SEC-2026-2214","date":"2026-07-07","title":"Mozilla Firefox für iOS: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2214"},{"id":"GHSA-JGX9-JR5X-MVPV","date":"2026-07-07","title":"Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality","source_url":"https://github.com/advisories/GHSA-jgx9-jr5x-mvpv"},{"id":"IBM:7278218","date":"2026-07-07","title":"Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7278218"},{"id":"IBM:7278909","date":"2026-07-07","title":"Multiple Vulnerabilities in IBM API Connect","source_url":"https://www.ibm.com/support/pages/node/7278909"},{"id":"IBM:7279216","date":"2026-07-07","title":"Security vulnerabilities have been found in IBM Application Gateway","source_url":"https://www.ibm.com/support/pages/node/7279216"},{"id":"RHSA-2026:36210","date":"2026-07-07","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36210"},{"id":"RHSA-2026:36211","date":"2026-07-07","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36211"},{"id":"RHSA-2026:36307","date":"2026-07-07","title":"freeipmi security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36307"},{"id":"RHSA-2026:36342","date":"2026-07-07","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36342"},{"id":"RHSA-2026:36343","date":"2026-07-07","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36343"},{"id":"RHSA-2026:36345","date":"2026-07-07","title":"Red Hat JBoss Enterprise Application Platform 8.1.7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36345"},{"id":"USN-8515-1","date":"2026-07-07","title":"Addressable vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8515-1"},{"id":"RHSA-2026:36192","date":"2026-07-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36192"},{"id":"RHSA-2026:36359","date":"2026-07-07","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:36359"},{"id":"CISCO-SA-ISE-MULTI-G5WP8VV","date":"2026-07-06","title":"Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv"},{"id":"IBM:7277424","date":"2026-07-06","title":"Security Bulletin: IBM® Db2®  is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling (CVE-2026-10109)","source_url":"https://www.ibm.com/support/pages/node/7277424"},{"id":"IBM:7279018","date":"2026-07-06","title":"Security Bulletin: Multiple Vulnerabilities in IBM Bob","source_url":"https://www.ibm.com/support/pages/node/7279018"},{"id":"IBM:7279143","date":"2026-07-06","title":"Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring","source_url":"https://www.ibm.com/support/pages/node/7279143"},{"id":"IBM:7279145","date":"2026-07-06","title":"Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7279145"},{"id":"IBM:7279148","date":"2026-07-06","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7279148"},{"id":"RHSA-2026:28962","date":"2026-07-06","title":"OpenShift Container Platform 4.15.66 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28962"},{"id":"BSI:WID-SEC-2023-2618","date":"2026-07-06","title":"http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2618"},{"id":"BSI:WID-SEC-2024-3147","date":"2026-07-06","title":"Red Hat Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3147"},{"id":"BSI:WID-SEC-2025-0844","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0844"},{"id":"BSI:WID-SEC-2025-2350","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2350"},{"id":"BSI:WID-SEC-2025-2925","date":"2026-07-06","title":"Gitea: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2925"},{"id":"BSI:WID-SEC-2025-2941","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2941"},{"id":"BSI:WID-SEC-2026-0074","date":"2026-07-06","title":"Apache Camel (Neo4j): Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0074"},{"id":"BSI:WID-SEC-2026-0319","date":"2026-07-06","title":"Red Hat Enterprise Linux (fontforge): Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0319"},{"id":"BSI:WID-SEC-2026-0445","date":"2026-07-06","title":"Apache Camel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0445"},{"id":"BSI:WID-SEC-2026-0614","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0614"},{"id":"BSI:WID-SEC-2026-0661","date":"2026-07-06","title":"Microsoft Windows und Windows Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0661"},{"id":"BSI:WID-SEC-2026-0861","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0861"},{"id":"BSI:WID-SEC-2026-1271","date":"2026-07-06","title":"Apache Camel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1271"},{"id":"BSI:WID-SEC-2026-1957","date":"2026-07-06","title":"Red Hat Enterprise Linux (openCryptoki, hplip, 389-ds-base): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1957"},{"id":"BSI:WID-SEC-2026-2092","date":"2026-07-06","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2092"},{"id":"BSI:WID-SEC-2026-2143","date":"2026-07-06","title":"Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2143"},{"id":"BSI:WID-SEC-2026-2166","date":"2026-07-06","title":"Red Hat Satellite (foreman, python-pillow, go): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2166"},{"id":"BSI:WID-SEC-2026-2197","date":"2026-07-06","title":"OpenVPN: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2197"},{"id":"BSI:WID-SEC-2026-2200","date":"2026-07-06","title":"Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2200"},{"id":"BSI:WID-SEC-2026-2203","date":"2026-07-06","title":"Apache Camel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2203"},{"id":"BSI:WID-SEC-2026-2205","date":"2026-07-06","title":"n8n: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2205"},{"id":"BSI:WID-SEC-2026-2210","date":"2026-07-06","title":"Samsung Exynos: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2210"},{"id":"CISCO-SA-CATC-FILE-READ-WLH2VF8X","date":"2026-07-06","title":"Cisco Catalyst Center Arbitrary File Read Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X"},{"id":"GHSA-PMF6-RCX4-V53V","date":"2026-07-06","title":"mkfifo: permissions of an existing file are changed after FIFO creation fails","source_url":"https://github.com/advisories/GHSA-pmf6-rcx4-v53v"},{"id":"GHSA-QRWJ-VH9X-GW5V","date":"2026-07-06","title":"Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write","source_url":"https://github.com/advisories/GHSA-qrwj-vh9x-gw5v"},{"id":"IBM:7279146","date":"2026-07-06","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7279146"},{"id":"IBM:7279147","date":"2026-07-06","title":"Security Bulletin: IBM WinCollect Agent is vulnerable to using components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7279147"},{"id":"RHSA-2026:28961","date":"2026-07-06","title":"OpenShift Container Platform 4.15.66 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28961"},{"id":"RHSA-2026:35826","date":"2026-07-06","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35826"},{"id":"RHSA-2026:35827","date":"2026-07-06","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35827"},{"id":"RHSA-2026:35828","date":"2026-07-06","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35828"},{"id":"RHSA-2026:35829","date":"2026-07-06","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35829"},{"id":"RHSA-2026:35830","date":"2026-07-06","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35830"},{"id":"RHSA-2026:35831","date":"2026-07-06","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35831"},{"id":"RHSA-2026:35832","date":"2026-07-06","title":"golang-github-openprinting-ipp-usb security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35832"},{"id":"RHSA-2026:35834","date":"2026-07-06","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35834"},{"id":"RHSA-2026:35838","date":"2026-07-06","title":"python3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35838"},{"id":"RHSA-2026:35843","date":"2026-07-06","title":"flatpak security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35843"},{"id":"RHSA-2026:35844","date":"2026-07-06","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35844"},{"id":"RHSA-2026:35845","date":"2026-07-06","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35845"},{"id":"RHSA-2026:35863","date":"2026-07-06","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35863"},{"id":"RHSA-2026:35866","date":"2026-07-06","title":"ruby:2.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35866"},{"id":"RHSA-2026:35867","date":"2026-07-06","title":"ruby:2.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35867"},{"id":"RHSA-2026:35869","date":"2026-07-06","title":"compat-openssl11 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35869"},{"id":"RHSA-2026:35870","date":"2026-07-06","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35870"},{"id":"RHSA-2026:35880","date":"2026-07-06","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35880"},{"id":"RHSA-2026:35891","date":"2026-07-06","title":"nodejs:24 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35891"},{"id":"RHSA-2026:35892","date":"2026-07-06","title":"nodejs:22 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35892"},{"id":"RHSA-2026:35894","date":"2026-07-06","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35894"},{"id":"RHSA-2026:35895","date":"2026-07-06","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35895"},{"id":"RHSA-2026:35896","date":"2026-07-06","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35896"},{"id":"RHSA-2026:35904","date":"2026-07-06","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35904"},{"id":"RHSA-2026:35990","date":"2026-07-06","title":"plexus-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35990"},{"id":"RHSA-2026:35991","date":"2026-07-06","title":"plexus-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35991"},{"id":"RHSA-2026:35992","date":"2026-07-06","title":"plexus-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35992"},{"id":"RHSA-2026:35993","date":"2026-07-06","title":"Red Hat OpenShift GitOps v1.20.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35993"},{"id":"RHSA-2026:35994","date":"2026-07-06","title":"Red Hat OpenShift GitOps v1.19.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35994"},{"id":"RHSA-2026:35995","date":"2026-07-06","title":"Red Hat OpenShift GitOps v1.21.1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35995"},{"id":"RHSA-2026:35997","date":"2026-07-06","title":"plexus-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35997"},{"id":"RHSA-2026:36004","date":"2026-07-06","title":"Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)","source_url":"https://access.redhat.com/errata/RHSA-2026:36004"},{"id":"RHSA-2026:36005","date":"2026-07-06","title":"Red Hat AI Inference Server 3.2.2 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:36005"},{"id":"RHSA-2026:36006","date":"2026-07-06","title":"Red Hat AI Inference Server 3.2.2 (ROCm)","source_url":"https://access.redhat.com/errata/RHSA-2026:36006"},{"id":"RHSA-2026:36012","date":"2026-07-06","title":"maven:3.9 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:36012"},{"id":"RHSA-2026:36018","date":"2026-07-06","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36018"},{"id":"BSI:WID-SEC-2023-3037","date":"2026-07-06","title":"Apache Camel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3037"},{"id":"BSI:WID-SEC-2024-0679","date":"2026-07-06","title":"Apache Commons: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0679"},{"id":"BSI:WID-SEC-2025-1433","date":"2026-07-06","title":"Red Hat Enterprise Linux (python-setuptools): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1433"},{"id":"BSI:WID-SEC-2026-0188","date":"2026-07-06","title":"Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0188"},{"id":"BSI:WID-SEC-2026-0754","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0754"},{"id":"BSI:WID-SEC-2026-0790","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0790"},{"id":"BSI:WID-SEC-2026-0809","date":"2026-07-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0809"},{"id":"BSI:WID-SEC-2026-1219","date":"2026-07-06","title":"lxml: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1219"},{"id":"BSI:WID-SEC-2026-1265","date":"2026-07-06","title":"Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1265"},{"id":"BSI:WID-SEC-2026-2195","date":"2026-07-06","title":"dhcpcd: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2195"},{"id":"BSI:WID-SEC-2026-2196","date":"2026-07-06","title":"Apache Airflow: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2196"},{"id":"BSI:WID-SEC-2026-2198","date":"2026-07-06","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2198"},{"id":"BSI:WID-SEC-2026-2199","date":"2026-07-06","title":"PostgreSQL JDBC Driver: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2199"},{"id":"BSI:WID-SEC-2026-2202","date":"2026-07-06","title":"Dell Computer: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2202"},{"id":"BSI:WID-SEC-2026-2206","date":"2026-07-06","title":"Puppet: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2206"},{"id":"BSI:WID-SEC-2026-2211","date":"2026-07-06","title":"Pega Platform: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2211"},{"id":"IBM:7277417","date":"2026-07-06","title":"Security Bulletin: IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables (CVE-2025-36372)","source_url":"https://www.ibm.com/support/pages/node/7277417"},{"id":"IBM:7279132","date":"2026-07-06","title":"Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites","source_url":"https://www.ibm.com/support/pages/node/7279132"},{"id":"IBM:7279133","date":"2026-07-06","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7279133"},{"id":"RHSA-2026:35846","date":"2026-07-06","title":"edk2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:35846"},{"id":"USN-8502-1","date":"2026-07-06","title":"GnuTLS vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8502-1"},{"id":"USN-8513-1","date":"2026-07-06","title":"PHP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8513-1"},{"id":"USN-8514-1","date":"2026-07-06","title":"OpenSSH vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8514-1"},{"id":"BSI:WID-SEC-2026-1037","date":"2026-07-06","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1037"},{"id":"BSI:WID-SEC-2026-2201","date":"2026-07-06","title":"Icinga: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2201"},{"id":"BSI:WID-SEC-2026-2212","date":"2026-07-06","title":"WSO2 API Manager: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2212"},{"id":"GHSA-PMFC-4WJJ-GMHX","date":"2026-07-06","title":"cut: -s ignored in -z -d '' newline-delimiter mode","source_url":"https://github.com/advisories/GHSA-pmfc-4wjj-gmhx"},{"id":"GHSA-R9HW-MJ3W-PHCQ","date":"2026-07-06","title":"mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)","source_url":"https://github.com/advisories/GHSA-r9hw-mj3w-phcq"},{"id":"RHSA-2026:35939","date":"2026-07-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35939"},{"id":"RHSA-2026:35940","date":"2026-07-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35940"},{"id":"RHSA-2026:35998","date":"2026-07-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35998"},{"id":"RHSA-2026:36016","date":"2026-07-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36016"},{"id":"RHSA-2026:36017","date":"2026-07-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:36017"},{"id":"RHSA-2026:35806","date":"2026-07-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35806"},{"id":"RHSA-2026:35807","date":"2026-07-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35807"},{"id":"RHSA-2026:35812","date":"2026-07-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35812"},{"id":"RHSA-2026:35813","date":"2026-07-05","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35813"},{"id":"IBM:7255048","date":"2026-07-03","title":"Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring","source_url":"https://www.ibm.com/support/pages/node/7255048"},{"id":"IBM:7279060","date":"2026-07-03","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7279060"},{"id":"BSI:WID-SEC-2026-0873","date":"2026-07-03","title":"docker: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0873"},{"id":"BSI:WID-SEC-2026-1433","date":"2026-07-03","title":"PHP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1433"},{"id":"BSI:WID-SEC-2026-1468","date":"2026-07-03","title":"dnsmasq: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1468"},{"id":"BSI:WID-SEC-2026-2183","date":"2026-07-03","title":"Red Hat Software Collections: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2183"},{"id":"BSI:WID-SEC-2026-2184","date":"2026-07-03","title":"Microsoft Azure und Entra: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2184"},{"id":"BSI:WID-SEC-2026-2185","date":"2026-07-03","title":"Microsoft 365 Copilot: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2185"},{"id":"BSI:WID-SEC-2026-2189","date":"2026-07-03","title":"Dell PowerProtect Data Domain: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2189"},{"id":"BSI:WID-SEC-2026-2191","date":"2026-07-03","title":"Microsoft Exchange Online: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2191"},{"id":"BSI:WID-SEC-2026-2193","date":"2026-07-03","title":"WatchGuard Firebox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2193"},{"id":"IBM:7279034","date":"2026-07-03","title":"Security Bulletin: Vulnerability in BIND (CVE-2025-13878) affects AIX/ VIOS.","source_url":"https://www.ibm.com/support/pages/node/7279034"},{"id":"IBM:7279038","date":"2026-07-03","title":"Security Bulletin: Vulnerability in BIND (CVE-2026-1519) affects AIX/ VIOS.","source_url":"https://www.ibm.com/support/pages/node/7279038"},{"id":"IBM:7279039","date":"2026-07-03","title":"Security Bulletin: Vulnerability in BIND (CVE-2026-3592, CVE-2026-5946) affects AIX/ VIOS.","source_url":"https://www.ibm.com/support/pages/node/7279039"},{"id":"NCSC-2026-0219","date":"2026-07-03","title":"NCSC-2026-0219 Kwetsbaarheden verholpen in GitHub Enterprise Server","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0219"},{"id":"NCSC-2026-0220","date":"2026-07-03","title":"NCSC-2026-0220 Kwetsbaarheden verholpen in Rancher door Rancher Labs","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0220"},{"id":"BSI:WID-SEC-2024-3586","date":"2026-07-03","title":"GStreamer: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3586"},{"id":"BSI:WID-SEC-2025-2026","date":"2026-07-03","title":"ffmpeg: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2026"},{"id":"BSI:WID-SEC-2026-1143","date":"2026-07-03","title":"ffmpeg: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1143"},{"id":"BSI:WID-SEC-2026-1167","date":"2026-07-03","title":"dnsmasq: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1167"},{"id":"BSI:WID-SEC-2026-1962","date":"2026-07-03","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1962"},{"id":"BSI:WID-SEC-2026-2125","date":"2026-07-03","title":"Red Hat Enterprise Linux (cifs-utils): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2125"},{"id":"BSI:WID-SEC-2026-2141","date":"2026-07-03","title":"Red Hat Enterprise Linux (rrdcached): Schwachstelle ermöglicht Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2141"},{"id":"BSI:WID-SEC-2026-2163","date":"2026-07-03","title":"Red Hat Enterprise Linux (ruby: net-imap): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2163"},{"id":"BSI:WID-SEC-2026-2173","date":"2026-07-03","title":"ClamAV: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2173"},{"id":"BSI:WID-SEC-2026-2178","date":"2026-07-03","title":"Mozilla Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2178"},{"id":"BSI:WID-SEC-2026-2186","date":"2026-07-03","title":"PHP: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2186"},{"id":"BSI:WID-SEC-2026-2188","date":"2026-07-03","title":"IGEL OS: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2188"},{"id":"BSI:WID-SEC-2026-2194","date":"2026-07-03","title":"Erlang/OTP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2194"},{"id":"USN-8496-2","date":"2026-07-03","title":"cifs-utils regression","source_url":"https://ubuntu.com/security/notices/USN-8496-2"},{"id":"IBM:7279021","date":"2026-07-03","title":"Security Bulletin: Security vulnerabilities have been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7279021"},{"id":"IBM:7279046","date":"2026-07-03","title":"Security Bulletin: Security vulnerability has been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7279046"},{"id":"IBM:7279047","date":"2026-07-03","title":"Security Bulletin: Security vulnerability has been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7279047"},{"id":"IBM:7279049","date":"2026-07-03","title":"Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)","source_url":"https://www.ibm.com/support/pages/node/7279049"},{"id":"RHSA-2026:35272","date":"2026-07-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35272"},{"id":"RHSA-2026:35387","date":"2026-07-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35387"},{"id":"RHSA-2026:35447","date":"2026-07-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35447"},{"id":"RHSA-2026:35453","date":"2026-07-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:35453"},{"id":"RHSA-2026:35454","date":"2026-07-03","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35454"},{"id":"GHSA-5G75-477J-2C2F","date":"2026-07-02","title":"LaunchServer FileServerHandler has an unauthenticated path traversal issue","source_url":"https://github.com/advisories/GHSA-5g75-477j-2c2f"},{"id":"GHSA-JPHH-M39H-6GWX","date":"2026-07-02","title":"9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass","source_url":"https://github.com/advisories/GHSA-jphh-m39h-6gwx"},{"id":"GHSA-RXW2-PC8J-VXWM","date":"2026-07-02","title":"fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection","source_url":"https://github.com/advisories/GHSA-rxw2-pc8j-vxwm"},{"id":"IBM:7278851","date":"2026-07-02","title":"Security Bulletin: Multiple Security Vulnerabilities in Apache-MINA libraries used by IBM Tivoli Netcool Configuration Manager","source_url":"https://www.ibm.com/support/pages/node/7278851"},{"id":"IBM:7278857","date":"2026-07-02","title":"Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data","source_url":"https://www.ibm.com/support/pages/node/7278857"},{"id":"IBM:7278877","date":"2026-07-02","title":"Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates","source_url":"https://www.ibm.com/support/pages/node/7278877"},{"id":"BSI:WID-SEC-2025-0226","date":"2026-07-02","title":"Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0226"},{"id":"BSI:WID-SEC-2025-0309","date":"2026-07-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0309"},{"id":"BSI:WID-SEC-2025-2229","date":"2026-07-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2229"},{"id":"BSI:WID-SEC-2026-0262","date":"2026-07-02","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0262"},{"id":"BSI:WID-SEC-2026-0362","date":"2026-07-02","title":"Red Hat Enterprise Linux (Lodash): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0362"},{"id":"BSI:WID-SEC-2026-0514","date":"2026-07-02","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0514"},{"id":"BSI:WID-SEC-2026-0694","date":"2026-07-02","title":"Red Hat Build of Debezium for Red Hat Application Foundations: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0694"},{"id":"BSI:WID-SEC-2026-0725","date":"2026-07-02","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0725"},{"id":"BSI:WID-SEC-2026-1407","date":"2026-07-02","title":"IBM App Connect Enterprise Certified Container: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1407"},{"id":"BSI:WID-SEC-2026-1652","date":"2026-07-02","title":"Microsoft SharePoint Server 2016 und SharePoint Server 2019: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1652"},{"id":"BSI:WID-SEC-2026-1814","date":"2026-07-02","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1814"},{"id":"BSI:WID-SEC-2026-1955","date":"2026-07-02","title":"Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1955"},{"id":"BSI:WID-SEC-2026-2001","date":"2026-07-02","title":"IBM WebSphere Application Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2001"},{"id":"BSI:WID-SEC-2026-2169","date":"2026-07-02","title":"IBM DataPower Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2169"},{"id":"BSI:WID-SEC-2026-2170","date":"2026-07-02","title":"MediaWiki und Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2170"},{"id":"BSI:WID-SEC-2026-2171","date":"2026-07-02","title":"Ubiquiti UniFi: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2171"},{"id":"BSI:WID-SEC-2026-2177","date":"2026-07-02","title":"OPNsense: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2177"},{"id":"BSI:WID-SEC-2026-2179","date":"2026-07-02","title":"Kibana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2179"},{"id":"BSI:WID-SEC-2026-2182","date":"2026-07-02","title":"Coolify: Schwachstelle ermöglicht Codeausführung und Offenlegung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2182"},{"id":"CISCO-SA-CLAMAV-88CFYYXR","date":"2026-07-02","title":"ClamAV Vulnerabilities Affecting Cisco Products: July 2026","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-88cFYyxR"},{"id":"GHSA-322X-V876-G883","date":"2026-07-02","title":"@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write","source_url":"https://github.com/advisories/GHSA-322x-v876-g883"},{"id":"GHSA-4H7G-5542-V3FC","date":"2026-07-02","title":"mediawiki/maps has stored XSS through the overlays parameter in the display_map parser function","source_url":"https://github.com/advisories/GHSA-4h7g-5542-v3fc"},{"id":"GHSA-5PMV-RX8R-WMV5","date":"2026-07-02","title":"jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow","source_url":"https://github.com/advisories/GHSA-5pmv-rx8r-wmv5"},{"id":"GHSA-6G2F-W7G3-77VF","date":"2026-07-02","title":"9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING","source_url":"https://github.com/advisories/GHSA-6g2f-w7g3-77vf"},{"id":"GHSA-6GR2-QH89-HXWM","date":"2026-07-02","title":"Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token","source_url":"https://github.com/advisories/GHSA-6gr2-qh89-hxwm"},{"id":"GHSA-794G-X443-36F7","date":"2026-07-02","title":"Keycloak: Unauthorized access via improper validation of encrypted SAML assertions","source_url":"https://github.com/advisories/GHSA-794g-x443-36f7"},{"id":"GHSA-8WG3-5MCM-FJQ8","date":"2026-07-02","title":"OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows","source_url":"https://github.com/advisories/GHSA-8wg3-5mcm-fjq8"},{"id":"GHSA-FCMW-WX57-9P75","date":"2026-07-02","title":"Mautic has SQL Injection in API Contact Filtering","source_url":"https://github.com/advisories/GHSA-fcmw-wx57-9p75"},{"id":"GHSA-FG23-3346-88F5","date":"2026-07-02","title":"Langroid: Path traversal in the file tools allows read/write outside configured current directory","source_url":"https://github.com/advisories/GHSA-fg23-3346-88f5"},{"id":"GHSA-GFHV-VQV2-4544","date":"2026-07-02","title":"Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload","source_url":"https://github.com/advisories/GHSA-gfhv-vqv2-4544"},{"id":"GHSA-GG9X-QCX2-XMRH","date":"2026-07-02","title":"joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)","source_url":"https://github.com/advisories/GHSA-gg9x-qcx2-xmrh"},{"id":"GHSA-J8PH-6FXJ-G533","date":"2026-07-02","title":"Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch","source_url":"https://github.com/advisories/GHSA-j8ph-6fxj-g533"},{"id":"GHSA-M3CR-VC2J-PM27","date":"2026-07-02","title":"Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent","source_url":"https://github.com/advisories/GHSA-m3cr-vc2j-pm27"},{"id":"GHSA-MM6C-5J6X-HQ8M","date":"2026-07-02","title":"Algernon vulnerable to server-side script source disclosure on Windows via NTFS filename","source_url":"https://github.com/advisories/GHSA-mm6c-5j6x-hq8m"},{"id":"GHSA-PMCH-G965-GRMR","date":"2026-07-02","title":"Langroid: SQLChatAgent _validate_query blocklist misses pg_read_file family enabling arbitrary file read","source_url":"https://github.com/advisories/GHSA-pmch-g965-grmr"},{"id":"GHSA-Q62H-354G-5R85","date":"2026-07-02","title":"Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords","source_url":"https://github.com/advisories/GHSA-q62h-354g-5r85"},{"id":"GHSA-Q675-QJ96-32M9","date":"2026-07-02","title":"golang.org/x/image/tiff has excessive resource consumption in PackBits decompression","source_url":"https://github.com/advisories/GHSA-q675-qj96-32m9"},{"id":"GHSA-Q8R6-XJ3F-WRRM","date":"2026-07-02","title":"SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo`","source_url":"https://github.com/advisories/GHSA-q8r6-xj3f-wrrm"},{"id":"GHSA-RH62-J648-G5QC","date":"2026-07-02","title":"Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB","source_url":"https://github.com/advisories/GHSA-rh62-j648-g5qc"},{"id":"GHSA-V8CX-933X-R976","date":"2026-07-02","title":"OpenClaw: Fake package roots could influence memory-core artifact loading","source_url":"https://github.com/advisories/GHSA-v8cx-933x-r976"},{"id":"IBM:7278875","date":"2026-07-02","title":"Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs","source_url":"https://www.ibm.com/support/pages/node/7278875"},{"id":"NCSC-2026-0218","date":"2026-07-02","title":"NCSC-2026-0218 Kwetsbaarheid verholpen in Cisco Catalyst Center","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0218"},{"id":"RHSA-2026:29863","date":"2026-07-02","title":"OpenShift Container Platform 4.19.36 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29863"},{"id":"RHSA-2026:29864","date":"2026-07-02","title":"OpenShift Container Platform 4.19.36 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29864"},{"id":"RHSA-2026:34608","date":"2026-07-02","title":"Streams for Apache Kafka 2.9.4 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34608"},{"id":"RHSA-2026:34739","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (CPU)","source_url":"https://access.redhat.com/errata/RHSA-2026:34739"},{"id":"RHSA-2026:34740","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (Neuron)","source_url":"https://access.redhat.com/errata/RHSA-2026:34740"},{"id":"RHSA-2026:34741","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (Spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:34741"},{"id":"RHSA-2026:34748","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (CUDA 12.9)","source_url":"https://access.redhat.com/errata/RHSA-2026:34748"},{"id":"RHSA-2026:34749","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (ROCm 6.4)","source_url":"https://access.redhat.com/errata/RHSA-2026:34749"},{"id":"RHSA-2026:34750","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (ROCm 7.0)","source_url":"https://access.redhat.com/errata/RHSA-2026:34750"},{"id":"RHSA-2026:34752","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (CUDA 12.9)","source_url":"https://access.redhat.com/errata/RHSA-2026:34752"},{"id":"RHSA-2026:34756","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (Spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:34756"},{"id":"RHSA-2026:34758","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (ROCm 6.4)","source_url":"https://access.redhat.com/errata/RHSA-2026:34758"},{"id":"RHSA-2026:34760","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (TPU)","source_url":"https://access.redhat.com/errata/RHSA-2026:34760"},{"id":"RHSA-2026:34765","date":"2026-07-02","title":"Red Hat AI Base Images 3.2.2 (ROCm 7.0)","source_url":"https://access.redhat.com/errata/RHSA-2026:34765"},{"id":"RHSA-2026:34772","date":"2026-07-02","title":"Red Hat AI Base Images 3.0.2 (cpu)","source_url":"https://access.redhat.com/errata/RHSA-2026:34772"},{"id":"RHSA-2026:34773","date":"2026-07-02","title":"Red Hat AI Base Images 3.0.2 (spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:34773"},{"id":"RHSA-2026:34774","date":"2026-07-02","title":"Red Hat AI Base Images 3.0.2 (tpu)","source_url":"https://access.redhat.com/errata/RHSA-2026:34774"},{"id":"RHSA-2026:34775","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (CUDA 13.0)","source_url":"https://access.redhat.com/errata/RHSA-2026:34775"},{"id":"RHSA-2026:34776","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (CPU)","source_url":"https://access.redhat.com/errata/RHSA-2026:34776"},{"id":"RHSA-2026:34777","date":"2026-07-02","title":"Red Hat AI Base Images 3.3.2 (TPU)","source_url":"https://access.redhat.com/errata/RHSA-2026:34777"},{"id":"RHSA-2026:34778","date":"2026-07-02","title":"Red Hat AI Base Images 3.0.2 (cuda)","source_url":"https://access.redhat.com/errata/RHSA-2026:34778"},{"id":"RHSA-2026:34780","date":"2026-07-02","title":"Red Hat AI Base Images 3.0.2 (rocm)","source_url":"https://access.redhat.com/errata/RHSA-2026:34780"},{"id":"RHSA-2026:34911","date":"2026-07-02","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34911"},{"id":"RHSA-2026:34927","date":"2026-07-02","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34927"},{"id":"BSI:WID-SEC-2024-2036","date":"2026-07-02","title":"Red Hat OpenShift: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2036"},{"id":"BSI:WID-SEC-2025-0119","date":"2026-07-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0119"},{"id":"BSI:WID-SEC-2025-0512","date":"2026-07-02","title":"Red Hat Advanced Cluster Security: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0512"},{"id":"BSI:WID-SEC-2025-1206","date":"2026-07-02","title":"Perl: Schwachstelle ermöglicht Codeausführung und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1206"},{"id":"BSI:WID-SEC-2025-1646","date":"2026-07-02","title":"Red Hat Enterprise Linux (nodejs, perl): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1646"},{"id":"BSI:WID-SEC-2025-1756","date":"2026-07-02","title":"libTIFF: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1756"},{"id":"BSI:WID-SEC-2025-1948","date":"2026-07-02","title":"libxml2 (exsltDynMapFunction): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1948"},{"id":"BSI:WID-SEC-2025-2301","date":"2026-07-02","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2301"},{"id":"BSI:WID-SEC-2026-0019","date":"2026-07-02","title":"Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0019"},{"id":"BSI:WID-SEC-2026-0219","date":"2026-07-02","title":"Vercel Next.js: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0219"},{"id":"BSI:WID-SEC-2026-0352","date":"2026-07-02","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0352"},{"id":"BSI:WID-SEC-2026-0716","date":"2026-07-02","title":"OpenSSH GSSAPI delta: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0716"},{"id":"BSI:WID-SEC-2026-0748","date":"2026-07-02","title":"Vercel Next.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0748"},{"id":"BSI:WID-SEC-2026-1064","date":"2026-07-02","title":"CPython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1064"},{"id":"BSI:WID-SEC-2026-1226","date":"2026-07-02","title":"Red Hat Hardened Images RPMs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1226"},{"id":"BSI:WID-SEC-2026-1230","date":"2026-07-02","title":"DNSdist: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1230"},{"id":"BSI:WID-SEC-2026-1272","date":"2026-07-02","title":"ImageMagick: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1272"},{"id":"BSI:WID-SEC-2026-1283","date":"2026-07-02","title":"CoreDNS: Mehrere Schwachstellen ermöglichen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1283"},{"id":"BSI:WID-SEC-2026-1328","date":"2026-07-02","title":"Red Hat Hardened Images RPMs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1328"},{"id":"BSI:WID-SEC-2026-1663","date":"2026-07-02","title":"Perl: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1663"},{"id":"BSI:WID-SEC-2026-1866","date":"2026-07-02","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1866"},{"id":"BSI:WID-SEC-2026-1895","date":"2026-07-02","title":"Apache CXF: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1895"},{"id":"BSI:WID-SEC-2026-1923","date":"2026-07-02","title":"Red Hat Ansible Automation Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1923"},{"id":"BSI:WID-SEC-2026-1927","date":"2026-07-02","title":"jq: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1927"},{"id":"BSI:WID-SEC-2026-2168","date":"2026-07-02","title":"Fleet: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2168"},{"id":"BSI:WID-SEC-2026-2174","date":"2026-07-02","title":"Cisco Catalyst: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2174"},{"id":"BSI:WID-SEC-2026-2180","date":"2026-07-02","title":"Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2180"},{"id":"BSI:WID-SEC-2026-2181","date":"2026-07-02","title":"Drupal Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2181"},{"id":"ICSA-26-183-01","date":"2026-07-02","title":"ST Engineering iDirect iQ-Series Terminals","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01"},{"id":"ICSA-26-183-02","date":"2026-07-02","title":"CubeSpace CW0057 Reaction Wheel","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-02"},{"id":"ICSA-26-183-03","date":"2026-07-02","title":"Gardyn IoT Hub","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03"},{"id":"GHSA-227R-JM2G-7CP4","date":"2026-07-02","title":"Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission","source_url":"https://github.com/advisories/GHSA-227r-jm2g-7cp4"},{"id":"GHSA-2V8P-FQPX-2Q3W","date":"2026-07-02","title":"jxl-oxide: integer subtraction overflow panic in cluster_from_table via crafted JXL input (DoS)","source_url":"https://github.com/advisories/GHSA-2v8p-fqpx-2q3w"},{"id":"GHSA-4FC2-H7JH-287C","date":"2026-07-02","title":"zebrad has mempool transaction admission denial via single-peer inbound queue saturation","source_url":"https://github.com/advisories/GHSA-4fc2-h7jh-287c"},{"id":"GHSA-66M8-C62J-H6V5","date":"2026-07-02","title":"jxl-oxide: `FrameBuffer::new` creates out-of-bounds slices on overflow","source_url":"https://github.com/advisories/GHSA-66m8-c62j-h6v5"},{"id":"GHSA-77PV-3W4Q-VRJ5","date":"2026-07-02","title":"OpenClaw: QQBot pre-dispatch slash commands could skip allowFrom checks","source_url":"https://github.com/advisories/GHSA-77pv-3w4q-vrj5"},{"id":"GHSA-7FQC-P256-7PWJ","date":"2026-07-02","title":"Steeltoe's static JWKS cache shared across schemes and never invalidated","source_url":"https://github.com/advisories/GHSA-7fqc-p256-7pwj"},{"id":"GHSA-9C3V-684M-579C","date":"2026-07-02","title":"OpenClaw MCP SSE redirects could forward Authorization headers","source_url":"https://github.com/advisories/GHSA-9c3v-684m-579c"},{"id":"GHSA-C8W6-X74F-VMG3","date":"2026-07-02","title":"zebrad vulnerable to full node denial of service via crafted Sapling receiver in z_listunifiedreceivers","source_url":"https://github.com/advisories/GHSA-c8w6-x74f-vmg3"},{"id":"GHSA-H5GX-45RJ-2H5J","date":"2026-07-02","title":"Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect","source_url":"https://github.com/advisories/GHSA-h5gx-45rj-2h5j"},{"id":"GHSA-P39J-X9H5-Q66M","date":"2026-07-02","title":"OpenClaw: Embedded runner policy could be confused by provider aliases","source_url":"https://github.com/advisories/GHSA-p39j-x9h5-q66m"},{"id":"GHSA-QV2R-V3MX-F4PF","date":"2026-07-02","title":"zebrad has full node denial of service via non-ASCII LongPollId in getblocktemplate","source_url":"https://github.com/advisories/GHSA-qv2r-v3mx-f4pf"},{"id":"GHSA-RXRH-4J9H-XGG9","date":"2026-07-02","title":"Steeltoe: TLS private keys written to /tmp with default permissions, never deleted","source_url":"https://github.com/advisories/GHSA-rxrh-4j9h-xgg9"},{"id":"GHSA-X4HG-HFWF-P9MW","date":"2026-07-02","title":"@asymmetric-effort/nogginlessdom vulnerable to ReDoS via user-controlled regex in HTMLInputElement pattern validation","source_url":"https://github.com/advisories/GHSA-x4hg-hfwf-p9mw"},{"id":"IBM:6610583","date":"2026-07-02","title":"Security Bulletin: IBM Product Security Incident Response Team News","source_url":"https://www.ibm.com/support/pages/node/6610583"},{"id":"IBM:7278906","date":"2026-07-02","title":"Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView","source_url":"https://www.ibm.com/support/pages/node/7278906"},{"id":"USN-8467-2","date":"2026-07-02","title":"Perl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8467-2"},{"id":"USN-8488-2","date":"2026-07-02","title":"Linux kernel (Raspberry Pi) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8488-2"},{"id":"USN-8492-2","date":"2026-07-02","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8492-2"},{"id":"USN-8493-2","date":"2026-07-02","title":"Linux kernel (Oracle) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8493-2"},{"id":"USN-8494-1","date":"2026-07-02","title":"LibVNCServer vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8494-1"},{"id":"USN-8495-1","date":"2026-07-02","title":"nghttp2 vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8495-1"},{"id":"USN-8496-1","date":"2026-07-02","title":"cifs-utils vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8496-1"},{"id":"USN-8497-1","date":"2026-07-02","title":"Linux kernel (Low Latency) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8497-1"},{"id":"USN-8498-1","date":"2026-07-02","title":"Linux kernel (NVIDIA Tegra) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8498-1"},{"id":"USN-8499-1","date":"2026-07-02","title":"Linux kernel (Xilinx) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8499-1"},{"id":"USN-8500-1","date":"2026-07-02","title":"Vim vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8500-1"},{"id":"USN-8501-1","date":"2026-07-02","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8501-1"},{"id":"USN-8503-1","date":"2026-07-02","title":"ncurses vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8503-1"},{"id":"BSI:WID-SEC-2026-0729","date":"2026-07-02","title":"OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0729"},{"id":"BSI:WID-SEC-2026-1343","date":"2026-07-02","title":"mutt: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1343"},{"id":"BSI:WID-SEC-2026-2167","date":"2026-07-02","title":"Hashicorp Vault: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2167"},{"id":"GHSA-3VCG-PV95-PQ54","date":"2026-07-02","title":"SFTPGo has stored XSS via inline parameter on public shares and user file download","source_url":"https://github.com/advisories/GHSA-3vcg-pv95-pq54"},{"id":"GHSA-4J9M-H44M-2HV8","date":"2026-07-02","title":"Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding","source_url":"https://github.com/advisories/GHSA-4j9m-h44m-2hv8"},{"id":"GHSA-J5MC-P8QG-39J7","date":"2026-07-02","title":"Kimai Favorite Timesheet Add and Remove Endpoints Allows Cross-User Bookmark Manipulation","source_url":"https://github.com/advisories/GHSA-j5mc-p8qg-39j7"},{"id":"GHSA-V8RP-6XCV-FWGH","date":"2026-07-02","title":"Kiwi TCMS's /init-db/ page renders and responds to requests after first use","source_url":"https://github.com/advisories/GHSA-v8rp-6xcv-fwgh"},{"id":"RHSA-2026:34854","date":"2026-07-02","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34854"},{"id":"RHSA-2026:34889","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34889"},{"id":"RHSA-2026:34890","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34890"},{"id":"RHSA-2026:34891","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34891"},{"id":"RHSA-2026:34924","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34924"},{"id":"RHSA-2026:34975","date":"2026-07-02","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34975"},{"id":"RHSA-2026:35016","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35016"},{"id":"RHSA-2026:35111","date":"2026-07-02","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:35111"},{"id":"CISCO-SA-CUCM-SSRF-CXPNHCW","date":"2026-07-01","title":"Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW"},{"id":"GHSA-62Q6-4HV4-VJRW","date":"2026-07-01","title":"Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header","source_url":"https://github.com/advisories/GHSA-62q6-4hv4-vjrw"},{"id":"GHSA-MHC6-2GFQ-XX62","date":"2026-07-01","title":"Rancher vulnerable to command injection through unsanitized YAML parameter","source_url":"https://github.com/advisories/GHSA-mhc6-2gfq-xx62"},{"id":"GHSA-VX8H-4PRV-G744","date":"2026-07-01","title":"Rancher has Privilege Escalation from Project Owner to Host","source_url":"https://github.com/advisories/GHSA-vx8h-4prv-g744"},{"id":"GHSA-XR65-5CPM-G36X","date":"2026-07-01","title":"Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer","source_url":"https://github.com/advisories/GHSA-xr65-5cpm-g36x"},{"id":"IBM:7278697","date":"2026-07-01","title":"Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-9319)","source_url":"https://www.ibm.com/support/pages/node/7278697"},{"id":"IBM:7278713","date":"2026-07-01","title":"Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for June 2026.","source_url":"https://www.ibm.com/support/pages/node/7278713"},{"id":"RHSA-2026:28887","date":"2026-07-01","title":"OpenShift Container Platform 4.14.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28887"},{"id":"RHSA-2026:34342","date":"2026-07-01","title":"Cluster Observability Operator 1.5.0","source_url":"https://access.redhat.com/errata/RHSA-2026:34342"},{"id":"RHSA-2026:34456","date":"2026-07-01","title":"RHOAI 3.4.2 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:34456"},{"id":"BSI:WID-SEC-2022-0646","date":"2026-07-01","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0646"},{"id":"BSI:WID-SEC-2022-0727","date":"2026-07-01","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0727"},{"id":"BSI:WID-SEC-2025-1114","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1114"},{"id":"BSI:WID-SEC-2025-1522","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1522"},{"id":"BSI:WID-SEC-2025-1529","date":"2026-07-01","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1529"},{"id":"BSI:WID-SEC-2025-1653","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1653"},{"id":"BSI:WID-SEC-2025-1898","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1898"},{"id":"BSI:WID-SEC-2025-2040","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2040"},{"id":"BSI:WID-SEC-2025-2099","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2099"},{"id":"BSI:WID-SEC-2025-2579","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2579"},{"id":"BSI:WID-SEC-2026-1367","date":"2026-07-01","title":"Red Hat Advanced Cluster Management und Multicluster engine for Kubernetes: Schwachstelle ermöglicht Codeausführung oder DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1367"},{"id":"BSI:WID-SEC-2026-1482","date":"2026-07-01","title":"AMD Prozessor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1482"},{"id":"BSI:WID-SEC-2026-1530","date":"2026-07-01","title":"Linux Kernel (Fragnesia): Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1530"},{"id":"BSI:WID-SEC-2026-1762","date":"2026-07-01","title":"IBM WebSphere Application Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1762"},{"id":"BSI:WID-SEC-2026-1859","date":"2026-07-01","title":"AMD ARM und EPYC Prozessoren: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1859"},{"id":"BSI:WID-SEC-2026-2140","date":"2026-07-01","title":"Synology MailPlus Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2140"},{"id":"BSI:WID-SEC-2026-2146","date":"2026-07-01","title":"MediaWiki: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2146"},{"id":"BSI:WID-SEC-2026-2149","date":"2026-07-01","title":"Gitea: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2149"},{"id":"BSI:WID-SEC-2026-2150","date":"2026-07-01","title":"IBM Power Hardware Management Console: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2150"},{"id":"BSI:WID-SEC-2026-2151","date":"2026-07-01","title":"Coolify: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2151"},{"id":"BSI:WID-SEC-2026-2153","date":"2026-07-01","title":"Mozilla Firefox: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2153"},{"id":"BSI:WID-SEC-2026-2155","date":"2026-07-01","title":"Adobe ColdFusion: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2155"},{"id":"BSI:WID-SEC-2026-2156","date":"2026-07-01","title":"IBM WebSphere Application Server Liberty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2156"},{"id":"BSI:WID-SEC-2026-2161","date":"2026-07-01","title":"LiteLLM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2161"},{"id":"BSI:WID-SEC-2026-2162","date":"2026-07-01","title":"UltraVNC: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2162"},{"id":"GHSA-32H4-44JJ-C5VX","date":"2026-07-01","title":"Keycloak has privilege escalation via improper scope mapping enforcement","source_url":"https://github.com/advisories/GHSA-32h4-44jj-c5vx"},{"id":"GHSA-3WHC-QVHV-XQJP","date":"2026-07-01","title":"goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags","source_url":"https://github.com/advisories/GHSA-3whc-qvhv-xqjp"},{"id":"GHSA-4J6X-2764-M8GH","date":"2026-07-01","title":"Rancher has over-inclusive team membership expansion in GitHub App authentication provider","source_url":"https://github.com/advisories/GHSA-4j6x-2764-m8gh"},{"id":"GHSA-JMF4-M7J9-G72R","date":"2026-07-01","title":"Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components","source_url":"https://github.com/advisories/GHSA-jmf4-m7j9-g72r"},{"id":"GHSA-JXPM-75MH-9FP7","date":"2026-07-01","title":"oras-go blob upload vulnerable to credential forwarding via unvalidated Location header","source_url":"https://github.com/advisories/GHSA-jxpm-75mh-9fp7"},{"id":"GHSA-P9JG-FCR6-3MHF","date":"2026-07-01","title":"OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms","source_url":"https://github.com/advisories/GHSA-p9jg-fcr6-3mhf"},{"id":"IBM:7278671","date":"2026-07-01","title":"Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Apache Log4j","source_url":"https://www.ibm.com/support/pages/node/7278671"},{"id":"IBM:7278700","date":"2026-07-01","title":"Security Bulletin: IBM B2B Advanced Communications is vulnerable to issues due to Java SDK (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)","source_url":"https://www.ibm.com/support/pages/node/7278700"},{"id":"IBM:7278701","date":"2026-07-01","title":"Security Bulletin: IBM B2B Advanced Communications is vulnerable to issues due to Java SDK (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)","source_url":"https://www.ibm.com/support/pages/node/7278701"},{"id":"IBM:7278704","date":"2026-07-01","title":"Security Bulletin: Vulnerabilities in kernel library (CVE-2025-68724, CVE-2026-31431) affect Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278704"},{"id":"IBM:7278706","date":"2026-07-01","title":"Security Bulletin: Vulnerabilities in xorg-x11-server library (CVE-2026-33999, CVE-2026-34001, CVE-2026-34003) affect Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278706"},{"id":"IBM:7278708","date":"2026-07-01","title":"Security Bulletin: Vulnerability in nghttp2 library (CVE-2026-27135) affects Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278708"},{"id":"IBM:7278709","date":"2026-07-01","title":"Security Bulletin: Vulnerabilities in IBM Semeru SDK (CVE-2026-34282, CVE-2026-22016, CVE-2026-23865, CVE-2026-22021, CVE-2026-22018, CVE-2026-22008, CVE-2026-34268, CVE-2026-22007) affect Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278709"},{"id":"IBM:7278710","date":"2026-07-01","title":"Security Bulletin: Vulnerability in openssh library (CVE-2026-3497) affects Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278710"},{"id":"IBM:7278711","date":"2026-07-01","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in ws","source_url":"https://www.ibm.com/support/pages/node/7278711"},{"id":"IBM:7278717","date":"2026-07-01","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerability in uuid","source_url":"https://www.ibm.com/support/pages/node/7278717"},{"id":"NCSC-2026-0217","date":"2026-07-01","title":"NCSC-2026-0217 Kwetsbaarheden verholpen in Adobe ColdFusion","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0217"},{"id":"RHSA-2026:28886","date":"2026-07-01","title":"OpenShift Container Platform 4.14.68 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28886"},{"id":"RHSA-2026:28893","date":"2026-07-01","title":"OpenShift Container Platform 4.14.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28893"},{"id":"RHSA-2026:28964","date":"2026-07-01","title":"OpenShift Container Platform 4.15.66 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28964"},{"id":"RHSA-2026:29079","date":"2026-07-01","title":"OpenShift Container Platform 4.16.65 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29079"},{"id":"RHSA-2026:29080","date":"2026-07-01","title":"OpenShift Container Platform 4.16.65 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29080"},{"id":"RHSA-2026:29082","date":"2026-07-01","title":"OpenShift Container Platform 4.16.65 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29082"},{"id":"RHSA-2026:29856","date":"2026-07-01","title":"OpenShift Container Platform 4.18.46 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29856"},{"id":"RHSA-2026:29857","date":"2026-07-01","title":"OpenShift Container Platform 4.18.46 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29857"},{"id":"RHSA-2026:29858","date":"2026-07-01","title":"OpenShift Container Platform 4.18.46 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:29858"},{"id":"RHSA-2026:29865","date":"2026-07-01","title":"OpenShift Container Platform 4.19.36 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:29865"},{"id":"RHSA-2026:33899","date":"2026-07-01","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33899"},{"id":"RHSA-2026:33900","date":"2026-07-01","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33900"},{"id":"RHSA-2026:34043","date":"2026-07-01","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34043"},{"id":"RHSA-2026:34076","date":"2026-07-01","title":"ruby:2.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34076"},{"id":"RHSA-2026:34094","date":"2026-07-01","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34094"},{"id":"RHSA-2026:34095","date":"2026-07-01","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34095"},{"id":"RHSA-2026:34102","date":"2026-07-01","title":"Insights proxy Container Image","source_url":"https://access.redhat.com/errata/RHSA-2026:34102"},{"id":"RHSA-2026:34109","date":"2026-07-01","title":"httpd security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34109"},{"id":"RHSA-2026:34160","date":"2026-07-01","title":"Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34160"},{"id":"RHSA-2026:34192","date":"2026-07-01","title":"buildah security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34192"},{"id":"RHSA-2026:34196","date":"2026-07-01","title":"podman security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34196"},{"id":"RHSA-2026:34197","date":"2026-07-01","title":"skopeo security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34197"},{"id":"RHSA-2026:34354","date":"2026-07-01","title":"php:7.4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34354"},{"id":"RHSA-2026:34357","date":"2026-07-01","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34357"},{"id":"RHSA-2026:34359","date":"2026-07-01","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34359"},{"id":"RHSA-2026:34362","date":"2026-07-01","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34362"},{"id":"RHSA-2026:34363","date":"2026-07-01","title":"postgresql:13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34363"},{"id":"RHSA-2026:34364","date":"2026-07-01","title":"Logging for Red Hat OpenShift - 6.4.6","source_url":"https://access.redhat.com/errata/RHSA-2026:34364"},{"id":"RHSA-2026:34365","date":"2026-07-01","title":"Satellite 6.19.2 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34365"},{"id":"RHSA-2026:34366","date":"2026-07-01","title":"Satellite 6.17.9 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34366"},{"id":"RHSA-2026:34367","date":"2026-07-01","title":"Satellite 6.16.10 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34367"},{"id":"RHSA-2026:34368","date":"2026-07-01","title":"Satellite 6.18.7 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34368"},{"id":"RHSA-2026:34372","date":"2026-07-01","title":"gnutls security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34372"},{"id":"RHSA-2026:34374","date":"2026-07-01","title":"Red Hat Ansible Automation Platform 2.6 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34374"},{"id":"RHSA-2026:34443","date":"2026-07-01","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34443"},{"id":"RHSA-2026:34476","date":"2026-07-01","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34476"},{"id":"RHSA-2026:34477","date":"2026-07-01","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34477"},{"id":"RHSA-2026:34508","date":"2026-07-01","title":"dnsmasq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34508"},{"id":"RHSA-2026:34525","date":"2026-07-01","title":"Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34525"},{"id":"RHSA-2026:34526","date":"2026-07-01","title":"Technical preview of the satellite/iop-vmaas-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34526"},{"id":"RHSA-2026:34527","date":"2026-07-01","title":"General availability of the satellite/iop-host-inventory-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34527"},{"id":"RHSA-2026:34530","date":"2026-07-01","title":"General availability of the satellite/iop-advisor-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34530"},{"id":"RHSA-2026:34531","date":"2026-07-01","title":"General availability of the satellite/iop-puptoo-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34531"},{"id":"RHSA-2026:34533","date":"2026-07-01","title":"General availability of the satellite/iop-yuptoo-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34533"},{"id":"RHSA-2026:34607","date":"2026-07-01","title":"General availability of the satellite/iop-insights-engine-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34607"},{"id":"BSI:WID-SEC-2022-0192","date":"2026-07-01","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0192"},{"id":"BSI:WID-SEC-2023-0110","date":"2026-07-01","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0110"},{"id":"BSI:WID-SEC-2025-1452","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1452"},{"id":"BSI:WID-SEC-2026-0209","date":"2026-07-01","title":"Cpython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0209"},{"id":"BSI:WID-SEC-2026-0950","date":"2026-07-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0950"},{"id":"BSI:WID-SEC-2026-1393","date":"2026-07-01","title":"LibreOffice: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1393"},{"id":"BSI:WID-SEC-2026-1598","date":"2026-07-01","title":"libvirt: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1598"},{"id":"BSI:WID-SEC-2026-2139","date":"2026-07-01","title":"TeamViewer: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2139"},{"id":"BSI:WID-SEC-2026-2144","date":"2026-07-01","title":"Snipe-IT: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2144"},{"id":"BSI:WID-SEC-2026-2145","date":"2026-07-01","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2145"},{"id":"BSI:WID-SEC-2026-2148","date":"2026-07-01","title":"Aqua Security Trivy: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2148"},{"id":"BSI:WID-SEC-2026-2152","date":"2026-07-01","title":"win.rar WinRAR: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2152"},{"id":"BSI:WID-SEC-2026-2154","date":"2026-07-01","title":"hostapd: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2154"},{"id":"BSI:WID-SEC-2026-2160","date":"2026-07-01","title":"Dell PowerScale OneFS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2160"},{"id":"BSI:WID-SEC-2026-2164","date":"2026-07-01","title":"Microsoft GitHub Enterprise Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2164"},{"id":"BSI:WID-SEC-2026-2165","date":"2026-07-01","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2165"},{"id":"GHSA-28PQ-6QXG-WG5R","date":"2026-07-01","title":"Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)","source_url":"https://github.com/advisories/GHSA-28pq-6qxg-wg5r"},{"id":"GHSA-8XWF-RJM4-XVHV","date":"2026-07-01","title":"oras-go has file store write outside workingDir via symlink traversal","source_url":"https://github.com/advisories/GHSA-8xwf-rjm4-xvhv"},{"id":"GHSA-HHX9-57XQ-R5RW","date":"2026-07-01","title":"@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>___proto__` key","source_url":"https://github.com/advisories/GHSA-hhx9-57xq-r5rw"},{"id":"GHSA-HX4V-CXPF-VH8M","date":"2026-07-01","title":"Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml","source_url":"https://github.com/advisories/GHSA-hx4v-cxpf-vh8m"},{"id":"GHSA-J48M-H7XQ-2XPJ","date":"2026-07-01","title":"goshs: Share-link ?token=… redemption races past download limit","source_url":"https://github.com/advisories/GHSA-j48m-h7xq-2xpj"},{"id":"GHSA-VH4V-2XQ2-G5CG","date":"2026-07-01","title":"ORAS Go forwards registry credentials across registry redirects","source_url":"https://github.com/advisories/GHSA-vh4v-2xq2-g5cg"},{"id":"IBM:7278678","date":"2026-07-01","title":"Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl  (CVE-2026-1965, CVE-2026-3783, CVE-2026-3784)","source_url":"https://www.ibm.com/support/pages/node/7278678"},{"id":"IBM:7278705","date":"2026-07-01","title":"Security Bulletin: Vulnerability in openssh library (CVE-2026-35387) affects Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278705"},{"id":"IBM:7278707","date":"2026-07-01","title":"Security Bulletin: Vulnerability in libxml2 library (CVE-2025-9714) affects Power HMC.","source_url":"https://www.ibm.com/support/pages/node/7278707"},{"id":"IBM:7278740","date":"2026-07-01","title":"Security Bulletin: IBM Tivoli Netcool Impact and IBM Tivoli Business Service Manager is vulnerable to man-in-the-middle attack due to Axis2 (CVE-2012-5785)","source_url":"https://www.ibm.com/support/pages/node/7278740"},{"id":"IBM:7278745","date":"2026-07-01","title":"Security Bulletin: Multiple vulnerabilities reported in jQuery library shipped in IBM WebSphere eXtreme Scale Monitoring Console","source_url":"https://www.ibm.com/support/pages/node/7278745"},{"id":"RHSA-2026:34155","date":"2026-07-01","title":"rrdtool security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34155"},{"id":"RHSA-2026:34156","date":"2026-07-01","title":"rrdtool security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34156"},{"id":"RHSA-2026:34211","date":"2026-07-01","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:34211"},{"id":"RHSA-2026:34355","date":"2026-07-01","title":"mod_http2 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34355"},{"id":"RHSA-2026:34532","date":"2026-07-01","title":"General availability of the satellite/iop-host-inventory-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:34532"},{"id":"USN-8488-1","date":"2026-07-01","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8488-1"},{"id":"USN-8489-1","date":"2026-07-01","title":"Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8489-1"},{"id":"USN-8490-1","date":"2026-07-01","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8490-1"},{"id":"USN-8491-1","date":"2026-07-01","title":"Linux kernel (OEM) vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8491-1"},{"id":"USN-8492-1","date":"2026-07-01","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8492-1"},{"id":"USN-8493-1","date":"2026-07-01","title":"Linux kernel vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8493-1"},{"id":"BSI:WID-SEC-2026-2157","date":"2026-07-01","title":"IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2157"},{"id":"CISCO-SA-NOTICE-VWL7B0S7","date":"2026-07-01","title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7"},{"id":"GHSA-XF85-363P-868W","date":"2026-07-01","title":"oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens","source_url":"https://github.com/advisories/GHSA-xf85-363p-868w"},{"id":"RHSA-2026:34119","date":"2026-07-01","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34119"},{"id":"RHSA-2026:34164","date":"2026-07-01","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:34164"},{"id":"RHSA-2026:34293","date":"2026-07-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34293"},{"id":"RHSA-2026:34351","date":"2026-07-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34351"},{"id":"RHSA-2026:34478","date":"2026-07-01","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:34478"},{"id":"IBM:7268732","date":"2026-06-30","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager and IBM Tivoli Netcool Impact","source_url":"https://www.ibm.com/support/pages/node/7268732"},{"id":"RHSA-2026:33486","date":"2026-06-30","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33486"},{"id":"BSI:WID-SEC-2025-2708","date":"2026-06-30","title":"Angular: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2708"},{"id":"BSI:WID-SEC-2026-2136","date":"2026-06-30","title":"Icinga: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2136"},{"id":"BSI:WID-SEC-2026-2138","date":"2026-06-30","title":"OWASP ModSecurity: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2138"},{"id":"GHSA-5Q4Q-834J-G8G4","date":"2026-06-30","title":"Paymenter has URL parameter injection that bypasses paid plan limits at checkout","source_url":"https://github.com/advisories/GHSA-5q4q-834j-g8g4"},{"id":"GHSA-J35X-W4GJ-PF7W","date":"2026-06-30","title":"Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles","source_url":"https://github.com/advisories/GHSA-j35x-w4gj-pf7w"},{"id":"GHSA-Q2M9-6JP9-C6MC","date":"2026-06-30","title":"Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query","source_url":"https://github.com/advisories/GHSA-q2m9-6jp9-c6mc"},{"id":"NCSC-2026-0214","date":"2026-06-30","title":"NCSC-2026-0214 Kwetsbaarheden verholpen in Apple MacOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0214"},{"id":"NCSC-2026-0215","date":"2026-06-30","title":"NCSC-2026-0215 Kwetsbaarheden verholpen in Apple iOS en iPadOS","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0215"},{"id":"RHSA-2026:29794","date":"2026-06-30","title":"OpenShift Container Platform 4.22.3 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29794"},{"id":"RHSA-2026:29795","date":"2026-06-30","title":"OpenShift Container Platform 4.22.3 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29795"},{"id":"RHSA-2026:29796","date":"2026-06-30","title":"OpenShift Container Platform 4.22.3 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:29796"},{"id":"RHSA-2026:29799","date":"2026-06-30","title":"OpenShift Container Platform 4.20.27 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29799"},{"id":"RHSA-2026:29800","date":"2026-06-30","title":"OpenShift Container Platform 4.20.27 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29800"},{"id":"RHSA-2026:29801","date":"2026-06-30","title":"OpenShift Container Platform 4.20.27 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:29801"},{"id":"RHSA-2026:29833","date":"2026-06-30","title":"OpenShift Container Platform 4.21.22 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29833"},{"id":"RHSA-2026:29834","date":"2026-06-30","title":"OpenShift Container Platform 4.21.22 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29834"},{"id":"RHSA-2026:29835","date":"2026-06-30","title":"OpenShift Container Platform 4.21.22 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:29835"},{"id":"RHSA-2026:33371","date":"2026-06-30","title":"Red Hat JBoss Enterprise Application Platform 7.3.18 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33371"},{"id":"RHSA-2026:33372","date":"2026-06-30","title":"Red Hat JBoss Enterprise Application Platform 7.1.15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33372"},{"id":"RHSA-2026:33412","date":"2026-06-30","title":"galera and mariadb11.8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33412"},{"id":"RHSA-2026:33416","date":"2026-06-30","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33416"},{"id":"RHSA-2026:33427","date":"2026-06-30","title":"redis:6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33427"},{"id":"RHSA-2026:33441","date":"2026-06-30","title":"postgresql:15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33441"},{"id":"RHSA-2026:33444","date":"2026-06-30","title":"redis:7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"id":"RHSA-2026:33445","date":"2026-06-30","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33445"},{"id":"RHSA-2026:33447","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33447"},{"id":"RHSA-2026:33449","date":"2026-06-30","title":"php security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33449"},{"id":"RHSA-2026:33450","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33450"},{"id":"RHSA-2026:33451","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33451"},{"id":"RHSA-2026:33452","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33452"},{"id":"RHSA-2026:33453","date":"2026-06-30","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33453"},{"id":"RHSA-2026:33455","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33455"},{"id":"RHSA-2026:33456","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33456"},{"id":"RHSA-2026:33462","date":"2026-06-30","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33462"},{"id":"RHSA-2026:33464","date":"2026-06-30","title":"mariadb:10.11 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33464"},{"id":"RHSA-2026:33478","date":"2026-06-30","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33478"},{"id":"RHSA-2026:33481","date":"2026-06-30","title":"mariadb:11.8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33481"},{"id":"RHSA-2026:33482","date":"2026-06-30","title":"mariadb:10.11 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33482"},{"id":"RHSA-2026:33497","date":"2026-06-30","title":"postgresql:15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33497"},{"id":"RHSA-2026:33501","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33501"},{"id":"RHSA-2026:33502","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33502"},{"id":"RHSA-2026:33503","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33503"},{"id":"RHSA-2026:33509","date":"2026-06-30","title":"giflib security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33509"},{"id":"RHSA-2026:33512","date":"2026-06-30","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33512"},{"id":"RHSA-2026:33514","date":"2026-06-30","title":"ruby:2.5 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33514"},{"id":"RHSA-2026:33515","date":"2026-06-30","title":"ruby:3.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33515"},{"id":"RHSA-2026:33524","date":"2026-06-30","title":"Red Hat Enterprise Linux AI 3.4.1 enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33524"},{"id":"RHSA-2026:33531","date":"2026-06-30","title":"Red Hat Enterprise Linux AI 3.4.1 enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33531"},{"id":"RHSA-2026:33540","date":"2026-06-30","title":"ruby4.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33540"},{"id":"RHSA-2026:33565","date":"2026-06-30","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33565"},{"id":"RHSA-2026:33574","date":"2026-06-30","title":"Red Hat Developer Hub 1.9.6 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:33574"},{"id":"RHSA-2026:33576","date":"2026-06-30","title":"ruby:3.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33576"},{"id":"RHSA-2026:33577","date":"2026-06-30","title":"ruby:4.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33577"},{"id":"RHSA-2026:33630","date":"2026-06-30","title":"ruby security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33630"},{"id":"RHSA-2026:33666","date":"2026-06-30","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33666"},{"id":"RHSA-2026:33683","date":"2026-06-30","title":"Red Hat Quay 3.10.23","source_url":"https://access.redhat.com/errata/RHSA-2026:33683"},{"id":"RHSA-2026:33685","date":"2026-06-30","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33685"},{"id":"RHSA-2026:33722","date":"2026-06-30","title":"container-tools:rhel8 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33722"},{"id":"RHSA-2026:33743","date":"2026-06-30","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33743"},{"id":"BSI:WID-SEC-2022-1091","date":"2026-06-30","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1091"},{"id":"BSI:WID-SEC-2022-1269","date":"2026-06-30","title":"QEMU: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1269"},{"id":"BSI:WID-SEC-2022-1643","date":"2026-06-30","title":"RabbitMQ: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1643"},{"id":"BSI:WID-SEC-2024-1971","date":"2026-06-30","title":"QEMU: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1971"},{"id":"BSI:WID-SEC-2024-1983","date":"2026-06-30","title":"QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1983"},{"id":"BSI:WID-SEC-2026-2122","date":"2026-06-30","title":"libTIFF: Schwachstelle ermöglicht Codeausführung und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2122"},{"id":"BSI:WID-SEC-2026-2124","date":"2026-06-30","title":"Apache ActiveMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2124"},{"id":"BSI:WID-SEC-2026-2127","date":"2026-06-30","title":"Google Cloud Service Mesh und Envoy Proxy: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2127"},{"id":"BSI:WID-SEC-2026-2128","date":"2026-06-30","title":"Apple macOS Tahoe: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2128"},{"id":"BSI:WID-SEC-2026-2130","date":"2026-06-30","title":"Rancher: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2130"},{"id":"BSI:WID-SEC-2026-2131","date":"2026-06-30","title":"Apple Safari: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2131"},{"id":"BSI:WID-SEC-2026-2134","date":"2026-06-30","title":"Apple iOS und iPadOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2134"},{"id":"BSI:WID-SEC-2026-2137","date":"2026-06-30","title":"Red Hat Enterprise Linux (giflib): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2137"},{"id":"ICSA-26-181-01","date":"2026-06-30","title":"Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-01"},{"id":"ICSA-26-181-03","date":"2026-06-30","title":"Schneider Electric EcoStruxure IT Data Center Expert","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-03"},{"id":"ICSA-26-181-06","date":"2026-06-30","title":"StoneFly Storage Concentrator","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06"},{"id":"GHSA-PGCQ-8GRM-5RX9","date":"2026-06-30","title":"Paymenter has race condition in payWithCredit() that enables credit double-spend","source_url":"https://github.com/advisories/GHSA-pgcq-8grm-5rx9"},{"id":"GHSA-W6CQ-9CF4-GQPG","date":"2026-06-30","title":"RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API","source_url":"https://github.com/advisories/GHSA-w6cq-9cf4-gqpg"},{"id":"RHSA-2026:33519","date":"2026-06-30","title":"opencryptoki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33519"},{"id":"RHSA-2026:33612","date":"2026-06-30","title":"Red Hat OpenShift distributed tracing platform (Tempo) 3.10.1 release","source_url":"https://access.redhat.com/errata/RHSA-2026:33612"},{"id":"RHSA-2026:33731","date":"2026-06-30","title":"rrdtool security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33731"},{"id":"USN-8482-1","date":"2026-06-30","title":"Roundcube Webmail vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8482-1"},{"id":"USN-8483-1","date":"2026-06-30","title":"HPLIP vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8483-1"},{"id":"USN-8484-1","date":"2026-06-30","title":"GD.pm vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8484-1"},{"id":"USN-8485-1","date":"2026-06-30","title":"libyang vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8485-1"},{"id":"USN-8486-1","date":"2026-06-30","title":"libssh2 vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8486-1"},{"id":"USN-8487-1","date":"2026-06-30","title":"curl vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8487-1"},{"id":"BSI:WID-SEC-2022-1275","date":"2026-06-30","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1275"},{"id":"BSI:WID-SEC-2022-2259","date":"2026-06-30","title":"QEMU: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2259"},{"id":"BSI:WID-SEC-2026-2129","date":"2026-06-30","title":"libxml2: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2129"},{"id":"GHSA-8J3X-M868-CPW8","date":"2026-06-30","title":"Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow","source_url":"https://github.com/advisories/GHSA-8j3x-m868-cpw8"},{"id":"GHSA-PP85-5J63-XPQ3","date":"2026-06-30","title":"Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule","source_url":"https://github.com/advisories/GHSA-pp85-5j63-xpq3"},{"id":"RHSA-2026:33388","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33388"},{"id":"RHSA-2026:33507","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33507"},{"id":"RHSA-2026:33521","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33521"},{"id":"RHSA-2026:33527","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33527"},{"id":"RHSA-2026:33551","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33551"},{"id":"RHSA-2026:33552","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33552"},{"id":"RHSA-2026:33632","date":"2026-06-30","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33632"},{"id":"RHSA-2026:33633","date":"2026-06-30","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33633"},{"id":"RHSA-2026:33634","date":"2026-06-30","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33634"},{"id":"RHSA-2026:33635","date":"2026-06-30","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33635"},{"id":"RHSA-2026:33721","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33721"},{"id":"RHSA-2026:33771","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33771"},{"id":"RHSA-2026:33840","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33840"},{"id":"RHSA-2026:33866","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33866"},{"id":"RHSA-2026:33885","date":"2026-06-30","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:33885"},{"id":"BSI:WID-SEC-2026-0098","date":"2026-06-29","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0098"},{"id":"IBM:7278441","date":"2026-06-29","title":"Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint","source_url":"https://www.ibm.com/support/pages/node/7278441"},{"id":"BSI:WID-SEC-2022-1749","date":"2026-06-29","title":"QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1749"},{"id":"BSI:WID-SEC-2026-0894","date":"2026-06-29","title":"Hitachi Virtual Storage Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0894"},{"id":"BSI:WID-SEC-2026-0996","date":"2026-06-29","title":"Apache Kafka: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0996"},{"id":"BSI:WID-SEC-2026-1007","date":"2026-06-29","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1007"},{"id":"BSI:WID-SEC-2026-1654","date":"2026-06-29","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1654"},{"id":"BSI:WID-SEC-2026-1679","date":"2026-06-29","title":"Notepad++: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1679"},{"id":"BSI:WID-SEC-2026-1696","date":"2026-06-29","title":"Notepad++: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1696"},{"id":"BSI:WID-SEC-2026-1714","date":"2026-06-29","title":"Budibase: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1714"},{"id":"BSI:WID-SEC-2026-1732","date":"2026-06-29","title":"Red Hat Enterprise Linux (Flatpak): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1732"},{"id":"BSI:WID-SEC-2026-2103","date":"2026-06-29","title":"Coolify: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2103"},{"id":"BSI:WID-SEC-2026-2108","date":"2026-06-29","title":"Microsoft Edge (Chromium-based): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2108"},{"id":"BSI:WID-SEC-2026-2109","date":"2026-06-29","title":"ffmpeg RASC video decoder): Schwachstelle ermöglicht Denial of Service und Speicherkorruption","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2109"},{"id":"BSI:WID-SEC-2026-2113","date":"2026-06-29","title":"Froxlor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2113"},{"id":"BSI:WID-SEC-2026-2116","date":"2026-06-29","title":"Gitea (act_runner): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2116"},{"id":"GHSA-69J4-QVQR-HPW3","date":"2026-06-29","title":"OpenAM Authenticated RCE via Groovy Sandbox Escape","source_url":"https://github.com/advisories/GHSA-69j4-qvqr-hpw3"},{"id":"GHSA-F2CX-463Q-7M2C","date":"2026-06-29","title":"OpenAM OAuth Client Impersonation via JWKS Resolver Cache","source_url":"https://github.com/advisories/GHSA-f2cx-463q-7m2c"},{"id":"NCSC-2026-0212","date":"2026-06-29","title":"NCSC-2026-0212 Kwetsbaarheden verholpen in n8n workflow automation platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0212"},{"id":"NCSC-2026-0213","date":"2026-06-29","title":"NCSC-2026-0213 Kwetsbaarheden verholpen in MISP platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0213"},{"id":"RHSA-2026:30843","date":"2026-06-29","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30843"},{"id":"RHSA-2026:30846","date":"2026-06-29","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30846"},{"id":"RHSA-2026:30848","date":"2026-06-29","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30848"},{"id":"RHSA-2026:30849","date":"2026-06-29","title":"gnutls and libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30849"},{"id":"RHSA-2026:30850","date":"2026-06-29","title":"gnutls and libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30850"},{"id":"RHSA-2026:30851","date":"2026-06-29","title":"perl:5.32 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30851"},{"id":"RHSA-2026:30852","date":"2026-06-29","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30852"},{"id":"RHSA-2026:30853","date":"2026-06-29","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30853"},{"id":"RHSA-2026:30854","date":"2026-06-29","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30854"},{"id":"RHSA-2026:30855","date":"2026-06-29","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30855"},{"id":"RHSA-2026:30856","date":"2026-06-29","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30856"},{"id":"RHSA-2026:30857","date":"2026-06-29","title":"perl-Archive-Tar security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30857"},{"id":"RHSA-2026:30858","date":"2026-06-29","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30858"},{"id":"RHSA-2026:30859","date":"2026-06-29","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30859"},{"id":"RHSA-2026:30860","date":"2026-06-29","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30860"},{"id":"RHSA-2026:30900","date":"2026-06-29","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30900"},{"id":"RHSA-2026:30901","date":"2026-06-29","title":"flatpak security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30901"},{"id":"RHSA-2026:32961","date":"2026-06-29","title":"ImageMagick security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32961"},{"id":"RHSA-2026:32962","date":"2026-06-29","title":"gnutls security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32962"},{"id":"RHSA-2026:32983","date":"2026-06-29","title":"postgresql:15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32983"},{"id":"RHSA-2026:32990","date":"2026-06-29","title":"cifs-utils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32990"},{"id":"RHSA-2026:32991","date":"2026-06-29","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32991"},{"id":"RHSA-2026:32992","date":"2026-06-29","title":"python3.12-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32992"},{"id":"RHSA-2026:32994","date":"2026-06-29","title":"postgresql:13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:32994"},{"id":"RHSA-2026:33005","date":"2026-06-29","title":"OpenShift Virtualization v4.14 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:33005"},{"id":"RHSA-2026:33078","date":"2026-06-29","title":"OpenShift Virtualization v4.16 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:33078"},{"id":"RHSA-2026:33093","date":"2026-06-29","title":"mariadb10.11 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33093"},{"id":"RHSA-2026:33120","date":"2026-06-29","title":"Red Hat OpenShift Service Mesh 3.0.13","source_url":"https://access.redhat.com/errata/RHSA-2026:33120"},{"id":"RHSA-2026:33123","date":"2026-06-29","title":"Red Hat OpenShift Service Mesh 3.1.10","source_url":"https://access.redhat.com/errata/RHSA-2026:33123"},{"id":"RHSA-2026:33125","date":"2026-06-29","title":"gnutls and libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33125"},{"id":"RHSA-2026:33142","date":"2026-06-29","title":"Red Hat OpenShift Service Mesh 3.2.7","source_url":"https://access.redhat.com/errata/RHSA-2026:33142"},{"id":"RHSA-2026:33150","date":"2026-06-29","title":"Red Hat OpenShift Service Mesh 3.3.5","source_url":"https://access.redhat.com/errata/RHSA-2026:33150"},{"id":"RHSA-2026:33154","date":"2026-06-29","title":"Red Hat Ceph Storage","source_url":"https://access.redhat.com/errata/RHSA-2026:33154"},{"id":"RHSA-2026:33155","date":"2026-06-29","title":"Kiali 1.73.33 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:33155"},{"id":"RHSA-2026:33160","date":"2026-06-29","title":"Kiali 2.4.19 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:33160"},{"id":"RHSA-2026:33163","date":"2026-06-29","title":"Kiali 2.11.13 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:33163"},{"id":"RHSA-2026:33169","date":"2026-06-29","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33169"},{"id":"RHSA-2026:33173","date":"2026-06-29","title":"Kiali 2.17.10 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:33173"},{"id":"RHSA-2026:33183","date":"2026-06-29","title":"Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:33183"},{"id":"RHSA-2026:33215","date":"2026-06-29","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33215"},{"id":"RHSA-2026:33219","date":"2026-06-29","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33219"},{"id":"RHSA-2026:33220","date":"2026-06-29","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33220"},{"id":"RHSA-2026:33221","date":"2026-06-29","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33221"},{"id":"RHSA-2026:33222","date":"2026-06-29","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33222"},{"id":"RHSA-2026:33223","date":"2026-06-29","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33223"},{"id":"RHSA-2026:33224","date":"2026-06-29","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33224"},{"id":"RHSA-2026:33225","date":"2026-06-29","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33225"},{"id":"RHSA-2026:33285","date":"2026-06-29","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33285"},{"id":"RHSA-2026:33313","date":"2026-06-29","title":"A Subscription Management tool for finding and reporting Red Hat product usage","source_url":"https://access.redhat.com/errata/RHSA-2026:33313"},{"id":"BSI:WID-SEC-2022-1090","date":"2026-06-29","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1090"},{"id":"BSI:WID-SEC-2022-1268","date":"2026-06-29","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1268"},{"id":"BSI:WID-SEC-2022-1270","date":"2026-06-29","title":"QEMU: Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1270"},{"id":"BSI:WID-SEC-2022-1271","date":"2026-06-29","title":"QEMU: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1271"},{"id":"BSI:WID-SEC-2022-1273","date":"2026-06-29","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1273"},{"id":"BSI:WID-SEC-2022-1276","date":"2026-06-29","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1276"},{"id":"BSI:WID-SEC-2022-1384","date":"2026-06-29","title":"Red Hat Virtualization: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1384"},{"id":"BSI:WID-SEC-2023-1600","date":"2026-06-29","title":"sudo: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1600"},{"id":"BSI:WID-SEC-2025-2637","date":"2026-06-29","title":"Rsync: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2637"},{"id":"BSI:WID-SEC-2025-2663","date":"2026-06-29","title":"libpng: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2663"},{"id":"BSI:WID-SEC-2026-0068","date":"2026-06-29","title":"libpng (API-Funktionen): Mehrere Schwachstellen ermöglichen DoS und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0068"},{"id":"BSI:WID-SEC-2026-0105","date":"2026-06-29","title":"Red Hat Developer Hub: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0105"},{"id":"BSI:WID-SEC-2026-0359","date":"2026-06-29","title":"GnuTLS: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0359"},{"id":"BSI:WID-SEC-2026-0843","date":"2026-06-29","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0843"},{"id":"BSI:WID-SEC-2026-1275","date":"2026-06-29","title":"LangChain (openai, text-splitters): Mehrere Schwachstellen ermöglichen Offenlegung von Informationen und SSRF-Umgehung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1275"},{"id":"BSI:WID-SEC-2026-1614","date":"2026-06-29","title":"Notepad++: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1614"},{"id":"BSI:WID-SEC-2026-1705","date":"2026-06-29","title":"Mattermost Server und Plugins: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1705"},{"id":"BSI:WID-SEC-2026-1769","date":"2026-06-29","title":"OpenSC: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1769"},{"id":"BSI:WID-SEC-2026-2105","date":"2026-06-29","title":"Ollama (Quantization Engine): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2105"},{"id":"BSI:WID-SEC-2026-2106","date":"2026-06-29","title":"Flowise: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2106"},{"id":"BSI:WID-SEC-2026-2107","date":"2026-06-29","title":"Mattermost Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2107"},{"id":"BSI:WID-SEC-2026-2111","date":"2026-06-29","title":"docker: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2111"},{"id":"BSI:WID-SEC-2026-2112","date":"2026-06-29","title":"IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2112"},{"id":"BSI:WID-SEC-2026-2118","date":"2026-06-29","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2118"},{"id":"BSI:WID-SEC-2026-2120","date":"2026-06-29","title":"IBM App Connect Enterprise und IBM Integration Bus: Schwachstelle ermöglicht SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2120"},{"id":"GHSA-4V2W-2WQP-MC85","date":"2026-06-29","title":"OpenAM OAuth Authorization Bypass via PKCE Challenge","source_url":"https://github.com/advisories/GHSA-4v2w-2wqp-mc85"},{"id":"RHSA-2026:30844","date":"2026-06-29","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30844"},{"id":"RHSA-2026:30845","date":"2026-06-29","title":"mod_md security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30845"},{"id":"RHSA-2026:30847","date":"2026-06-29","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30847"},{"id":"RHSA-2026:33092","date":"2026-06-29","title":"glibc security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33092"},{"id":"RHSA-2026:33124","date":"2026-06-29","title":"coreutils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33124"},{"id":"RHSA-2026:33126","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33126"},{"id":"RHSA-2026:33170","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33170"},{"id":"RHSA-2026:33226","date":"2026-06-29","title":"glibc security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33226"},{"id":"RHSA-2026:33227","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33227"},{"id":"RHSA-2026:33228","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33228"},{"id":"RHSA-2026:33229","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33229"},{"id":"RHSA-2026:33230","date":"2026-06-29","title":"glibc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:33230"},{"id":"RHSA-2026:33231","date":"2026-06-29","title":"glibc security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:33231"},{"id":"BSI:WID-SEC-2022-1097","date":"2026-06-29","title":"QEMU: Mehrere Schwachstellen ermöglichten Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1097"},{"id":"BSI:WID-SEC-2025-0212","date":"2026-06-29","title":"Perl: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0212"},{"id":"BSI:WID-SEC-2025-2651","date":"2026-06-29","title":"GnuTLS: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2651"},{"id":"BSI:WID-SEC-2026-0611","date":"2026-06-29","title":"Eclipse Jetty: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0611"},{"id":"BSI:WID-SEC-2026-2101","date":"2026-06-29","title":"Fleet: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2101"},{"id":"RHSA-2026:32960","date":"2026-06-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:32960"},{"id":"RHSA-2026:32963","date":"2026-06-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:32963"},{"id":"RHSA-2026:32974","date":"2026-06-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:32974"},{"id":"RHSA-2026:32980","date":"2026-06-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:32980"},{"id":"RHSA-2026:32987","date":"2026-06-29","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:32987"},{"id":"RHSA-2026:32997","date":"2026-06-29","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:32997"},{"id":"BSI:WID-SEC-2022-0717","date":"2026-06-28","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0717"},{"id":"BSI:WID-SEC-2022-1312","date":"2026-06-28","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1312"},{"id":"BSI:WID-SEC-2022-1776","date":"2026-06-28","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1776"},{"id":"BSI:WID-SEC-2022-2043","date":"2026-06-28","title":"Python: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2043"},{"id":"BSI:WID-SEC-2023-0126","date":"2026-06-28","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0126"},{"id":"BSI:WID-SEC-2023-0175","date":"2026-06-28","title":"libpng: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0175"},{"id":"BSI:WID-SEC-2023-2853","date":"2026-06-28","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2853"},{"id":"BSI:WID-SEC-2026-0708","date":"2026-06-28","title":"Hitachi Virtual Storage Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0708"},{"id":"BSI:WID-SEC-2026-1157","date":"2026-06-28","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1157"},{"id":"BSI:WID-SEC-2026-1871","date":"2026-06-28","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1871"},{"id":"RHSA-2026:30650","date":"2026-06-28","title":"multicluster engine for Kubernetes v2.8.8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30650"},{"id":"RHSA-2026:30651","date":"2026-06-28","title":"Red Hat Advanced Cluster Management for Kubernetes v2.13.9 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30651"},{"id":"BSI:WID-SEC-2022-2228","date":"2026-06-28","title":"binutils: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2228"},{"id":"BSI:WID-SEC-2022-2411","date":"2026-06-28","title":"FreeRADIUS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2411"},{"id":"BSI:WID-SEC-2023-0324","date":"2026-06-28","title":"PostgreSQL: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0324"},{"id":"BSI:WID-SEC-2024-3054","date":"2026-06-28","title":"Splunk Add-on for Amazon Web Services: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3054"},{"id":"BSI:WID-SEC-2026-1201","date":"2026-06-28","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1201"},{"id":"BSI:WID-SEC-2025-1266","date":"2026-06-28","title":"libarchive: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1266"},{"id":"RHSA-2026:30647","date":"2026-06-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30647"},{"id":"RHSA-2026:30649","date":"2026-06-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30649"},{"id":"RHSA-2026:30652","date":"2026-06-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30652"},{"id":"RHSA-2026:30814","date":"2026-06-28","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30814"},{"id":"IBM:7278246","date":"2026-06-27","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2026.","source_url":"https://www.ibm.com/support/pages/node/7278246"},{"id":"GHSA-72R4-9C5J-MJ57","date":"2026-06-27","title":"pnpm: `patch-remove` could delete project-selected files outside the patches directory","source_url":"https://github.com/advisories/GHSA-72r4-9c5j-mj57"},{"id":"GHSA-FR4H-3CPH-29XV","date":"2026-06-27","title":"pnpm: Hoisted install imports lockfile alias outside node_modules","source_url":"https://github.com/advisories/GHSA-fr4h-3cph-29xv"},{"id":"GHSA-QRV3-253H-G69C","date":"2026-06-27","title":"pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config","source_url":"https://github.com/advisories/GHSA-qrv3-253h-g69c"},{"id":"GHSA-WW5P-J6CJ-6MQQ","date":"2026-06-27","title":"Nezha Dashboard: DDNS and Notification credential exposure via unredacted list API","source_url":"https://github.com/advisories/GHSA-ww5p-j6cj-6mqq"},{"id":"GHSA-5CGQ-3RG8-M6CV","date":"2026-06-26","title":"golang.org/x/crypto/ssh/knownhosts vulnerable to auth bypass via unenforced @revoked status","source_url":"https://github.com/advisories/GHSA-5cgq-3rg8-m6cv"},{"id":"GHSA-89GR-R52H-F8RX","date":"2026-06-26","title":"golang.org/x/crypto/ssh: FIDO/U2F security key physical presence check can be bypassed","source_url":"https://github.com/advisories/GHSA-89gr-r52h-f8rx"},{"id":"GHSA-F5WC-C3C7-36MC","date":"2026-06-26","title":"golang.org/x/crypto/ssh/agent doesn't drop invoking agent constraints when forwarding keys","source_url":"https://github.com/advisories/GHSA-f5wc-c3c7-36mc"},{"id":"GHSA-JPPX-RXG9-JMRX","date":"2026-06-26","title":"golang.org/x/crypto/ssh/agent doesn't enforce invoking key constraints","source_url":"https://github.com/advisories/GHSA-jppx-rxg9-jmrx"},{"id":"GHSA-RM3J-F69W-WQMQ","date":"2026-06-26","title":"golang.org/x/crypto/ssh vulnerable to infinite loop on large channel writes","source_url":"https://github.com/advisories/GHSA-rm3j-f69w-wqmq"},{"id":"GHSA-V2WP-FRMC-5Q3V","date":"2026-06-26","title":"Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise","source_url":"https://github.com/advisories/GHSA-v2wp-frmc-5q3v"},{"id":"GHSA-VGWF-H737-FF37","date":"2026-06-26","title":"golang.org/x/crypto/ssh: Invoking client can cause server deadlock on unexpected responses","source_url":"https://github.com/advisories/GHSA-vgwf-h737-ff37"},{"id":"GHSA-X527-X647-Q7GG","date":"2026-06-26","title":"golang.org/x/crypto/ssh: Invoking VerifiedPublicKeyCallback permissions skip enforcement","source_url":"https://github.com/advisories/GHSA-x527-x647-q7gg"},{"id":"IBM:7278006","date":"2026-06-26","title":"Security Bulletin: Vulnerabilities in cryptography, pyOpenSSL & golang affect IBM Storage Protect Plus","source_url":"https://www.ibm.com/support/pages/node/7278006"},{"id":"IBM:7278086","date":"2026-06-26","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7278086"},{"id":"BSI:WID-SEC-2026-2085","date":"2026-06-26","title":"WSO2 API Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2085"},{"id":"BSI:WID-SEC-2026-2087","date":"2026-06-26","title":"Google Cloud Platform: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2087"},{"id":"BSI:WID-SEC-2026-2089","date":"2026-06-26","title":"Coolify: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2089"},{"id":"BSI:WID-SEC-2026-2091","date":"2026-06-26","title":"PowerDNS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2091"},{"id":"BSI:WID-SEC-2026-2096","date":"2026-06-26","title":"Fluentd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2096"},{"id":"GHSA-Q4H4-GMJ2-QVW2","date":"2026-06-26","title":"golang.org/x/crypto/ssh: Invoking byte arithmetic causes underflow and panic","source_url":"https://github.com/advisories/GHSA-q4h4-gmj2-qvw2"},{"id":"GHSA-W879-237Q-WC7R","date":"2026-06-26","title":"golang.org/x/crypto/ssh: Invoking pathological RSA/DSA parameters may cause DoS","source_url":"https://github.com/advisories/GHSA-w879-237q-wc7r"},{"id":"BSI:WID-SEC-2026-2082","date":"2026-06-26","title":"Aqua Security Trivy: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2082"},{"id":"BSI:WID-SEC-2026-2084","date":"2026-06-26","title":"Znuny: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2084"},{"id":"BSI:WID-SEC-2026-2086","date":"2026-06-26","title":"Tenable Security Nessus: Mehrere Schwachstellen ermöglichen SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2086"},{"id":"BSI:WID-SEC-2026-2090","date":"2026-06-26","title":"OpenCTI: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2090"},{"id":"BSI:WID-SEC-2026-2094","date":"2026-06-26","title":"Digium Certified Asterisk: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2094"},{"id":"BSI:WID-SEC-2026-2095","date":"2026-06-26","title":"Bitwarden: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2095"},{"id":"BSI:WID-SEC-2026-2097","date":"2026-06-26","title":"Apache Airflow FTP Provider: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2097"},{"id":"GHSA-45GG-VH54-H5M9","date":"2026-06-26","title":"golang.org/x/crypto/ssh vulnerable to invoking bypass of certificate restrictions","source_url":"https://github.com/advisories/GHSA-45gg-vh54-h5m9"},{"id":"GHSA-78MQ-XCR3-XM33","date":"2026-06-26","title":"golang.org/x/crypto/ssh is vulnerable to invoking server panic during CheckHostKey/Authenticate flow","source_url":"https://github.com/advisories/GHSA-78mq-xcr3-xm33"},{"id":"GHSA-9M57-25V3-79X9","date":"2026-06-26","title":"golang.org/x/crypto/ssh/agent: Invoking pathological inputs can lead to client panic","source_url":"https://github.com/advisories/GHSA-9m57-25v3-79x9"},{"id":"GHSA-Q437-G7FV-2JVV","date":"2026-06-26","title":"Lemur user-update path stores plaintext passwords","source_url":"https://github.com/advisories/GHSA-q437-g7fv-2jvv"},{"id":"GHSA-QPW4-5X99-6VJP","date":"2026-06-26","title":"golang.org/x/crypto/ssh: Invoking memory leak when rejecting channels can lead to DoS","source_url":"https://github.com/advisories/GHSA-qpw4-5x99-6vjp"},{"id":"GHSA-R9GP-7F88-9R54","date":"2026-06-26","title":"Lemur: JWT verifier honors attacker-supplied alg, enabling ATO","source_url":"https://github.com/advisories/GHSA-r9gp-7f88-9r54"},{"id":"GHSA-X3VF-MGXJ-7785","date":"2026-06-26","title":"Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>","source_url":"https://github.com/advisories/GHSA-x3vf-mgxj-7785"},{"id":"BSI:WID-SEC-2026-2081","date":"2026-06-26","title":"Devolutions Server: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2081"},{"id":"RHSA-2026:30267","date":"2026-06-26","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30267"},{"id":"RHSA-2026:30268","date":"2026-06-26","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30268"},{"id":"RHSA-2026:30333","date":"2026-06-26","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30333"},{"id":"RHSA-2026:30349","date":"2026-06-26","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30349"},{"id":"RHSA-2026:30354","date":"2026-06-26","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30354"},{"id":"BSI:WID-SEC-2025-0568","date":"2026-06-25","title":"Flowise: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0568"},{"id":"IBM:7277934","date":"2026-06-25","title":"Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to axios (CVE-2025-62718, CVE-2026-40175)","source_url":"https://www.ibm.com/support/pages/node/7277934"},{"id":"IBM:7278011","date":"2026-06-25","title":"Security Bulletin: Vulnerabilities in Spring, Tomcat, Netty, Picomatch might affect IBM Storage Protect Plus","source_url":"https://www.ibm.com/support/pages/node/7278011"},{"id":"RHSA-2026:26528","date":"2026-06-25","title":"OpenShift Container Platform 4.12.92 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26528"},{"id":"RHSA-2026:26542","date":"2026-06-25","title":"OpenShift Container Platform 4.13.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26542"},{"id":"RHSA-2026:30087","date":"2026-06-25","title":"Red Hat AI Inference Server 3.3.5 (Spyre)","source_url":"https://access.redhat.com/errata/RHSA-2026:30087"},{"id":"RHSA-2026:30088","date":"2026-06-25","title":"Red Hat AI Inference Server 3.3.5 (ROCm)","source_url":"https://access.redhat.com/errata/RHSA-2026:30088"},{"id":"RHSA-2026:30089","date":"2026-06-25","title":"Red Hat AI Inference Server 3.3.5 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:30089"},{"id":"BSI:WID-SEC-2023-2873","date":"2026-06-25","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2873"},{"id":"BSI:WID-SEC-2024-1800","date":"2026-06-25","title":"PostgreSQL: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1800"},{"id":"BSI:WID-SEC-2024-3475","date":"2026-06-25","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3475"},{"id":"BSI:WID-SEC-2025-0372","date":"2026-06-25","title":"PostgreSQL: Schwachstelle ermöglicht SQL Injection und Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0372"},{"id":"BSI:WID-SEC-2026-1469","date":"2026-06-25","title":"jq: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1469"},{"id":"BSI:WID-SEC-2026-1924","date":"2026-06-25","title":"Aqua Security Trivy: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1924"},{"id":"BSI:WID-SEC-2026-2004","date":"2026-06-25","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2004"},{"id":"BSI:WID-SEC-2026-2060","date":"2026-06-25","title":"DENX U-Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2060"},{"id":"BSI:WID-SEC-2026-2067","date":"2026-06-25","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2067"},{"id":"BSI:WID-SEC-2026-2069","date":"2026-06-25","title":"ProFTPD: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2069"},{"id":"BSI:WID-SEC-2026-2070","date":"2026-06-25","title":"GitLab CE/EE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2070"},{"id":"BSI:WID-SEC-2026-2071","date":"2026-06-25","title":"Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2071"},{"id":"BSI:WID-SEC-2026-2072","date":"2026-06-25","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2072"},{"id":"BSI:WID-SEC-2026-2079","date":"2026-06-25","title":"RabbitMQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2079"},{"id":"GHSA-G22Q-F7GC-5JHR","date":"2026-06-25","title":"ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop","source_url":"https://github.com/advisories/GHSA-g22q-f7gc-5jhr"},{"id":"GHSA-Q62C-H75R-2XHC","date":"2026-06-25","title":"ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition","source_url":"https://github.com/advisories/GHSA-q62c-h75r-2xhc"},{"id":"IBM:7277920","date":"2026-06-25","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to  Node.js module Apache Thrift (CVE-2026-41636 & CVE-2026-43870)","source_url":"https://www.ibm.com/support/pages/node/7277920"},{"id":"NCSC-2026-0211","date":"2026-06-25","title":"NCSC-2026-0211 Kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0211"},{"id":"RHSA-2026:26527","date":"2026-06-25","title":"OpenShift Container Platform 4.12.92 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26527"},{"id":"RHSA-2026:26529","date":"2026-06-25","title":"OpenShift Container Platform 4.12.92 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26529"},{"id":"RHSA-2026:26541","date":"2026-06-25","title":"OpenShift Container Platform 4.13.68 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26541"},{"id":"RHSA-2026:26543","date":"2026-06-25","title":"OpenShift Container Platform 4.13.68 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26543"},{"id":"RHSA-2026:29702","date":"2026-06-25","title":"runc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29702"},{"id":"RHSA-2026:29703","date":"2026-06-25","title":"containernetworking-plugins security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29703"},{"id":"RHSA-2026:29815","date":"2026-06-25","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29815"},{"id":"RHSA-2026:29817","date":"2026-06-25","title":"redis:6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29817"},{"id":"RHSA-2026:29844","date":"2026-06-25","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29844"},{"id":"RHSA-2026:29854","date":"2026-06-25","title":"Red Hat OpenShift API for Data Protection","source_url":"https://access.redhat.com/errata/RHSA-2026:29854"},{"id":"RHSA-2026:29867","date":"2026-06-25","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29867"},{"id":"RHSA-2026:29874","date":"2026-06-25","title":"nginx security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29874"},{"id":"RHSA-2026:29904","date":"2026-06-25","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29904"},{"id":"RHSA-2026:29940","date":"2026-06-25","title":"thunderbird security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29940"},{"id":"RHSA-2026:29941","date":"2026-06-25","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29941"},{"id":"RHSA-2026:29952","date":"2026-06-25","title":"compat-poppler022 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29952"},{"id":"RHSA-2026:29953","date":"2026-06-25","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29953"},{"id":"RHSA-2026:30004","date":"2026-06-25","title":"gnutls security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30004"},{"id":"RHSA-2026:30044","date":"2026-06-25","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30044"},{"id":"RHSA-2026:30049","date":"2026-06-25","title":"Red Hat build of Keycloak 26.4.13 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30049"},{"id":"RHSA-2026:30050","date":"2026-06-25","title":"Red Hat build of Keycloak 26.4.13 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30050"},{"id":"RHSA-2026:30056","date":"2026-06-25","title":"RHOAI 3.3.4 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:30056"},{"id":"RHSA-2026:30076","date":"2026-06-25","title":"Red Hat Quay 3.12.19","source_url":"https://access.redhat.com/errata/RHSA-2026:30076"},{"id":"RHSA-2026:30078","date":"2026-06-25","title":"Red Hat AI Inference Server Model Optimization Tools 3.3.5 (CUDA)","source_url":"https://access.redhat.com/errata/RHSA-2026:30078"},{"id":"RHSA-2026:30083","date":"2026-06-25","title":"Red Hat build of Keycloak 26.6.4 Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30083"},{"id":"RHSA-2026:30084","date":"2026-06-25","title":"Red Hat build of Keycloak 26.6.4 Images Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30084"},{"id":"RHSA-2026:30085","date":"2026-06-25","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30085"},{"id":"RHSA-2026:30086","date":"2026-06-25","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30086"},{"id":"RHSA-2026:30115","date":"2026-06-25","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:30115"},{"id":"RHSA-2026:30129","date":"2026-06-25","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30129"},{"id":"BSI:WID-SEC-2022-0011","date":"2026-06-25","title":"Python: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0011"},{"id":"BSI:WID-SEC-2022-0491","date":"2026-06-25","title":"Red Hat Advanced Cluster Management: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0491"},{"id":"BSI:WID-SEC-2023-1238","date":"2026-06-25","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen in verschiedenen Komponenten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1238"},{"id":"BSI:WID-SEC-2023-1842","date":"2026-06-25","title":"Samba: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1842"},{"id":"BSI:WID-SEC-2023-2038","date":"2026-06-25","title":"PostgreSQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2038"},{"id":"BSI:WID-SEC-2026-0870","date":"2026-06-25","title":"libpng: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0870"},{"id":"BSI:WID-SEC-2026-1087","date":"2026-06-25","title":"CPython: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1087"},{"id":"BSI:WID-SEC-2026-1169","date":"2026-06-25","title":"Red Hat Enterprise Linux (giflib): Schwachstelle ermöglicht Codeausführung oder DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1169"},{"id":"BSI:WID-SEC-2026-1333","date":"2026-06-25","title":"FRRouting Project FRRouting: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1333"},{"id":"BSI:WID-SEC-2026-1353","date":"2026-06-25","title":"FRRouting Project FRRouting: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1353"},{"id":"BSI:WID-SEC-2026-1370","date":"2026-06-25","title":"Redis: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1370"},{"id":"BSI:WID-SEC-2026-1371","date":"2026-06-25","title":"jq: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1371"},{"id":"BSI:WID-SEC-2026-1449","date":"2026-06-25","title":"jq: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1449"},{"id":"BSI:WID-SEC-2026-1520","date":"2026-06-25","title":"CPython: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1520"},{"id":"BSI:WID-SEC-2026-1985","date":"2026-06-25","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1985"},{"id":"BSI:WID-SEC-2026-2006","date":"2026-06-25","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2006"},{"id":"BSI:WID-SEC-2026-2059","date":"2026-06-25","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2059"},{"id":"BSI:WID-SEC-2026-2066","date":"2026-06-25","title":"OpenBSD: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2066"},{"id":"BSI:WID-SEC-2026-2068","date":"2026-06-25","title":"TortoiseGit: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2068"},{"id":"BSI:WID-SEC-2026-2073","date":"2026-06-25","title":"Snipe-IT: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2073"},{"id":"BSI:WID-SEC-2026-2075","date":"2026-06-25","title":"Zammad: Schwachstelle ermöglicht Löschen von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2075"},{"id":"BSI:WID-SEC-2026-2080","date":"2026-06-25","title":"Drupal: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2080"},{"id":"ICSA-26-176-02","date":"2026-06-25","title":"EVoke Systems Charging Station Management System","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02"},{"id":"ICSA-26-176-03","date":"2026-06-25","title":"Horner Automation Cscape","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03"},{"id":"ICSA-26-176-04","date":"2026-06-25","title":"Daktronics Controller Firmware","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04"},{"id":"ICSA-26-176-05","date":"2026-06-25","title":"H.VIEW HV-500S6 IP Camera","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-05"},{"id":"ICSA-26-176-07","date":"2026-06-25","title":"Schneider Electric PowerLogic P7","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-07"},{"id":"CISCO-SA-FINESSE-RFI-GWPKDC89","date":"2026-06-25","title":"Cisco Finesse Remote File Inclusion Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89"},{"id":"GHSA-2X83-8G95-XH59","date":"2026-06-25","title":"MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps","source_url":"https://github.com/advisories/GHSA-2x83-8g95-xh59"},{"id":"GHSA-54VG-PFH7-JQ95","date":"2026-06-25","title":"Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF","source_url":"https://github.com/advisories/GHSA-54vg-pfh7-jq95"},{"id":"GHSA-CJ9G-3MJ2-G8VV","date":"2026-06-25","title":"MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement","source_url":"https://github.com/advisories/GHSA-cj9g-3mj2-g8vv"},{"id":"IBM:7237138","date":"2026-06-25","title":"Security Bulletin: Due to use of IBM Storage Scale , IBM Cloud Pak System is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7237138"},{"id":"IBM:7277977","date":"2026-06-25","title":"Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench","source_url":"https://www.ibm.com/support/pages/node/7277977"},{"id":"RHSA-2026:29807","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29807"},{"id":"RHSA-2026:29809","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29809"},{"id":"RHSA-2026:29811","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29811"},{"id":"RHSA-2026:29814","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29814"},{"id":"RHSA-2026:29898","date":"2026-06-25","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29898"},{"id":"RHSA-2026:29900","date":"2026-06-25","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29900"},{"id":"RHSA-2026:29901","date":"2026-06-25","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29901"},{"id":"RHSA-2026:29902","date":"2026-06-25","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29902"},{"id":"RHSA-2026:29975","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29975"},{"id":"RHSA-2026:29976","date":"2026-06-25","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29976"},{"id":"RHSA-2026:29980","date":"2026-06-25","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29980"},{"id":"RHSA-2026:29981","date":"2026-06-25","title":"golang security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29981"},{"id":"USN-8472-1","date":"2026-06-25","title":"containerd vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8472-1"},{"id":"USN-8475-1","date":"2026-06-25","title":"AMD Microcode vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8475-1"},{"id":"USN-8476-1","date":"2026-06-25","title":"xrdp vulnerabilities","source_url":"https://ubuntu.com/security/notices/USN-8476-1"},{"id":"USN-8477-1","date":"2026-06-25","title":"tar vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8477-1"},{"id":"BSI:WID-SEC-2026-2078","date":"2026-06-25","title":"PowerDNS Authoritative Server: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2078"},{"id":"IBM:7277074","date":"2026-06-25","title":"Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7277074"},{"id":"RHSA-2026:29770","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29770"},{"id":"RHSA-2026:29950","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29950"},{"id":"RHSA-2026:29954","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29954"},{"id":"RHSA-2026:29986","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29986"},{"id":"RHSA-2026:30132","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30132"},{"id":"RHSA-2026:30134","date":"2026-06-25","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:30134"},{"id":"RHSA-2026:30135","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30135"},{"id":"RHSA-2026:30169","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30169"},{"id":"RHSA-2026:30172","date":"2026-06-25","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:30172"},{"id":"BSI:WID-SEC-2026-2041","date":"2026-06-24","title":"Budibase: Schwachstelle ermöglicht SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2041"},{"id":"GHSA-6C99-87FR-6Q7R","date":"2026-06-24","title":"OpenAM: Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage","source_url":"https://github.com/advisories/GHSA-6c99-87fr-6q7r"},{"id":"GHSA-P462-XXWX-PQF4","date":"2026-06-24","title":"OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints","source_url":"https://github.com/advisories/GHSA-p462-xxwx-pqf4"},{"id":"RHSA-2026:28738","date":"2026-06-24","title":"kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28738"},{"id":"RHSA-2026:28740","date":"2026-06-24","title":"kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28740"},{"id":"RHSA-2026:28741","date":"2026-06-24","title":"kpatch-patch-5_14_0-687_10_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28741"},{"id":"RHSA-2026:28742","date":"2026-06-24","title":"kpatch-patch-6_12_0-211_16_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28742"},{"id":"RHSA-2026:28748","date":"2026-06-24","title":"kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28748"},{"id":"RHSA-2026:28749","date":"2026-06-24","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28749"},{"id":"RHSA-2026:28750","date":"2026-06-24","title":"kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28750"},{"id":"BSI:WID-SEC-2026-1846","date":"2026-06-24","title":"Microsoft Exchange: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1846"},{"id":"BSI:WID-SEC-2026-2043","date":"2026-06-24","title":"Red Hat Ansible Automation Platform (EDA): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2043"},{"id":"BSI:WID-SEC-2026-2048","date":"2026-06-24","title":"Google Cloud Service Mesh und Envoy Proxy: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2048"},{"id":"BSI:WID-SEC-2026-2055","date":"2026-06-24","title":"Arista EOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2055"},{"id":"BSI:WID-SEC-2026-2057","date":"2026-06-24","title":"IBM DB2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2057"},{"id":"GHSA-7FQ5-7WR8-RJWJ","date":"2026-06-24","title":"OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination","source_url":"https://github.com/advisories/GHSA-7fq5-7wr8-rjwj"},{"id":"GHSA-PWPJ-P52H-Q484","date":"2026-06-24","title":"Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection","source_url":"https://github.com/advisories/GHSA-pwpj-p52h-q484"},{"id":"NCSC-2026-0210","date":"2026-06-24","title":"NCSC-2026-0210 Kwetsbaarheden verholpen in libssh2 door libssh","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0210"},{"id":"RHSA-2026:26997","date":"2026-06-24","title":"OpenShift Container Platform 4.18.45 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26997"},{"id":"RHSA-2026:26999","date":"2026-06-24","title":"OpenShift Container Platform 4.19.35 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26999"},{"id":"RHSA-2026:27001","date":"2026-06-24","title":"OpenShift Container Platform 4.18.45 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27001"},{"id":"RHSA-2026:27004","date":"2026-06-24","title":"OpenShift Container Platform 4.19.35 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27004"},{"id":"RHSA-2026:28921","date":"2026-06-24","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28921"},{"id":"RHSA-2026:28923","date":"2026-06-24","title":"tigervnc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28923"},{"id":"RHSA-2026:28960","date":"2026-06-24","title":"RHOAI 2.25.8 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:28960"},{"id":"RHSA-2026:28973","date":"2026-06-24","title":"nginx security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28973"},{"id":"RHSA-2026:28998","date":"2026-06-24","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28998"},{"id":"RHSA-2026:28999","date":"2026-06-24","title":"postgresql:12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28999"},{"id":"RHSA-2026:29035","date":"2026-06-24","title":"skopeo security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29035"},{"id":"RHSA-2026:29110","date":"2026-06-24","title":"bind security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29110"},{"id":"RHSA-2026:29151","date":"2026-06-24","title":"nginx:1.26 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29151"},{"id":"RHSA-2026:29182","date":"2026-06-24","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29182"},{"id":"RHSA-2026:29195","date":"2026-06-24","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29195"},{"id":"RHSA-2026:29197","date":"2026-06-24","title":"A Subscription Management tool for finding and reporting Red Hat product usage","source_url":"https://access.redhat.com/errata/RHSA-2026:29197"},{"id":"RHSA-2026:29210","date":"2026-06-24","title":"perl-IO-Compress security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29210"},{"id":"RHSA-2026:29212","date":"2026-06-24","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29212"},{"id":"RHSA-2026:29455","date":"2026-06-24","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29455"},{"id":"BSI:WID-SEC-2025-0717","date":"2026-06-24","title":"Flowise: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0717"},{"id":"BSI:WID-SEC-2026-0674","date":"2026-06-24","title":"Adobe Acrobat DC: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0674"},{"id":"BSI:WID-SEC-2026-1931","date":"2026-06-24","title":"Cacti: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1931"},{"id":"BSI:WID-SEC-2026-1949","date":"2026-06-24","title":"Oracle VM VirtualBox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1949"},{"id":"BSI:WID-SEC-2026-2042","date":"2026-06-24","title":"dnsmasq: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2042"},{"id":"BSI:WID-SEC-2026-2045","date":"2026-06-24","title":"rsyslog: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2045"},{"id":"BSI:WID-SEC-2026-2046","date":"2026-06-24","title":"dhcpcd: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2046"},{"id":"BSI:WID-SEC-2026-2049","date":"2026-06-24","title":"Red Hat Enterprise Linux (keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2049"},{"id":"BSI:WID-SEC-2026-2051","date":"2026-06-24","title":"Snipe-IT: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2051"},{"id":"BSI:WID-SEC-2026-2053","date":"2026-06-24","title":"GStreamer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2053"},{"id":"BSI:WID-SEC-2026-2054","date":"2026-06-24","title":"Fortra File Integrity Monitoring: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2054"},{"id":"BSI:WID-SEC-2026-2061","date":"2026-06-24","title":"libpng: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2061"},{"id":"GHSA-44WP-G8F4-F4V5","date":"2026-06-24","title":"Filament: Unauthenticated temporary file upload on auth pages","source_url":"https://github.com/advisories/GHSA-44wp-g8f4-f4v5"},{"id":"GHSA-F2R5-5M7W-P5CX","date":"2026-06-24","title":"opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent","source_url":"https://github.com/advisories/GHSA-f2r5-5m7w-p5cx"},{"id":"GHSA-PRJ9-97MP-MWH2","date":"2026-06-24","title":"OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering","source_url":"https://github.com/advisories/GHSA-prj9-97mp-mwh2"},{"id":"RHSA-2026:28832","date":"2026-06-24","title":"openssl-fips-provider security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28832"},{"id":"RHSA-2026:28911","date":"2026-06-24","title":"coreutils security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28911"},{"id":"RHSA-2026:28922","date":"2026-06-24","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28922"},{"id":"RHSA-2026:29016","date":"2026-06-24","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29016"},{"id":"RHSA-2026:29018","date":"2026-06-24","title":"libpng12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29018"},{"id":"RHSA-2026:29019","date":"2026-06-24","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29019"},{"id":"RHSA-2026:29020","date":"2026-06-24","title":"libpng12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29020"},{"id":"RHSA-2026:29021","date":"2026-06-24","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29021"},{"id":"RHSA-2026:29022","date":"2026-06-24","title":"libpng12 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:29022"},{"id":"BSI:WID-SEC-2026-2047","date":"2026-06-24","title":"GnuPG: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2047"},{"id":"GHSA-6MMJ-JHQJ-6C6Q","date":"2026-06-24","title":"Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL","source_url":"https://github.com/advisories/GHSA-6mmj-jhqj-6c6q"},{"id":"GHSA-F637-W7P2-M7FX","date":"2026-06-24","title":"OliveTin: ValidateArgumentType API Endpoint's Missing Authentication Allows Action and Argument Enumeration","source_url":"https://github.com/advisories/GHSA-f637-w7p2-m7fx"},{"id":"GHSA-X667-R589-43M7","date":"2026-06-24","title":"Snipe-IT has Improper Authorization in File Deletion (IDOR)","source_url":"https://github.com/advisories/GHSA-x667-r589-43m7"},{"id":"RHSA-2026:28727","date":"2026-06-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:28727"},{"id":"RHSA-2026:29009","date":"2026-06-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29009"},{"id":"RHSA-2026:29012","date":"2026-06-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29012"},{"id":"RHSA-2026:29017","date":"2026-06-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29017"},{"id":"RHSA-2026:29203","date":"2026-06-24","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:29203"},{"id":"GHSA-8QV3-P479-CJ62","date":"2026-06-23","title":"Budibase has nonymous NoSQL operator injection via published-app query templates","source_url":"https://github.com/advisories/GHSA-8qv3-p479-cj62"},{"id":"GHSA-PHV5-334H-MXCW","date":"2026-06-23","title":"motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal","source_url":"https://github.com/advisories/GHSA-phv5-334h-mxcw"},{"id":"GHSA-QXVG-H7Q2-HCXH","date":"2026-06-23","title":"motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)","source_url":"https://github.com/advisories/GHSA-qxvg-h7q2-hcxh"},{"id":"IBM:7277245","date":"2026-06-23","title":"Security Bulletin: Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system","source_url":"https://www.ibm.com/support/pages/node/7277245"},{"id":"IBM:7277487","date":"2026-06-23","title":"Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub","source_url":"https://www.ibm.com/support/pages/node/7277487"},{"id":"IBM:7277491","date":"2026-06-23","title":"Security Bulletin: IBM HTTP Server shipped with IBM OpenPages is vulnerable to multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7277491"},{"id":"IBM:7277526","date":"2026-06-23","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-9.0.115.jar","source_url":"https://www.ibm.com/support/pages/node/7277526"},{"id":"IBM:7277546","date":"2026-06-23","title":"Security Bulletin: IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)","source_url":"https://www.ibm.com/support/pages/node/7277546"},{"id":"IBM:7277559","date":"2026-06-23","title":"Security Bulletin: Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows","source_url":"https://www.ibm.com/support/pages/node/7277559"},{"id":"IBM:7277570","date":"2026-06-23","title":"Security Bulletin: Unauthenticated Cross-User MCP Resource Access and Tool Execution via Streamable Transport Authorization Bypass","source_url":"https://www.ibm.com/support/pages/node/7277570"},{"id":"RHSA-2026:28376","date":"2026-06-23","title":"Red Hat Ansible Automation Platform 2.5 Product Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28376"},{"id":"RHSA-2026:28377","date":"2026-06-23","title":"Red Hat Ansible Automation Platform 2.6 Product Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28377"},{"id":"RHSA-2026:28440","date":"2026-06-23","title":"Red Hat Ansible Automation Platform 2.7 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28440"},{"id":"RHSA-2026:28492","date":"2026-06-23","title":"Red Hat Ansible Automation Platform 2.6 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28492"},{"id":"RHSA-2026:28497","date":"2026-06-23","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28497"},{"id":"BSI:WID-SEC-2025-2488","date":"2026-06-23","title":"Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2488"},{"id":"BSI:WID-SEC-2025-2591","date":"2026-06-23","title":"Flowise: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2591"},{"id":"BSI:WID-SEC-2025-2644","date":"2026-06-23","title":"Pega Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2644"},{"id":"BSI:WID-SEC-2026-1855","date":"2026-06-23","title":"QEMU: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1855"},{"id":"BSI:WID-SEC-2026-1860","date":"2026-06-23","title":"vllm: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1860"},{"id":"BSI:WID-SEC-2026-1875","date":"2026-06-23","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1875"},{"id":"BSI:WID-SEC-2026-1930","date":"2026-06-23","title":"Angular: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1930"},{"id":"BSI:WID-SEC-2026-1946","date":"2026-06-23","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1946"},{"id":"BSI:WID-SEC-2026-1970","date":"2026-06-23","title":"Langflow: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1970"},{"id":"BSI:WID-SEC-2026-1974","date":"2026-06-23","title":"vllm: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1974"},{"id":"BSI:WID-SEC-2026-1975","date":"2026-06-23","title":"LiteLLM: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1975"},{"id":"BSI:WID-SEC-2026-2009","date":"2026-06-23","title":"Google Cloud Platform (GKE containerd): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2009"},{"id":"BSI:WID-SEC-2026-2035","date":"2026-06-23","title":"MISP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2035"},{"id":"BSI:WID-SEC-2026-2038","date":"2026-06-23","title":"Angular: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2038"},{"id":"GHSA-35C4-RVC8-FRHM","date":"2026-06-23","title":"Budibase: POST /api/attachments/:datasourceId/url is unauthenticated and lets anonymous callers mint S3 PUT pre-signed URLs using stored datasource IAM credentials","source_url":"https://github.com/advisories/GHSA-35c4-rvc8-frhm"},{"id":"GHSA-3VWC-QWHC-3MJ7","date":"2026-06-23","title":"Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration","source_url":"https://github.com/advisories/GHSA-3vwc-qwhc-3mj7"},{"id":"GHSA-77G9-363W-RCCQ","date":"2026-06-23","title":"Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository","source_url":"https://github.com/advisories/GHSA-77g9-363w-rccq"},{"id":"GHSA-J4H9-PM27-4RFW","date":"2026-06-23","title":"OctoPrint has possible file exfiltration via query parameters on upload endpoints","source_url":"https://github.com/advisories/GHSA-j4h9-pm27-4rfw"},{"id":"GHSA-JJ36-R9W3-3PFH","date":"2026-06-23","title":"Budibase: Unauthenticated S3 signed upload URL generation allows arbitrary writes with stored datasource credentials","source_url":"https://github.com/advisories/GHSA-jj36-r9w3-3pfh"},{"id":"GHSA-RW9Q-97R9-8GVH","date":"2026-06-23","title":"motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read","source_url":"https://github.com/advisories/GHSA-rw9q-97r9-8gvh"},{"id":"GHSA-WC3F-XC32-435F","date":"2026-06-23","title":"AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink","source_url":"https://github.com/advisories/GHSA-wc3f-xc32-435f"},{"id":"IBM:7276777","date":"2026-06-23","title":"Security Bulletin: Multiple Vulnerabilities affects IBM License Metric Tool v9","source_url":"https://www.ibm.com/support/pages/node/7276777"},{"id":"IBM:7277420","date":"2026-06-23","title":"Security Bulletin: IBM® Db2® federated server is affected by multiple vulnerabilities in log4j v2.25.3.","source_url":"https://www.ibm.com/support/pages/node/7277420"},{"id":"IBM:7277483","date":"2026-06-23","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in FasterXML jackson-databind","source_url":"https://www.ibm.com/support/pages/node/7277483"},{"id":"IBM:7277511","date":"2026-06-23","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in follow-redirects","source_url":"https://www.ibm.com/support/pages/node/7277511"},{"id":"IBM:7277528","date":"2026-06-23","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by an authentication/authentization bypass vulnerability","source_url":"https://www.ibm.com/support/pages/node/7277528"},{"id":"IBM:7277531","date":"2026-06-23","title":"Security Bulletin: IBM WebSphere Application Server Liberty is affected by multiple vulnerabilities due to Neethi (CVE-2026-42402, CVE-2026-42403, CVE-2026-42404)","source_url":"https://www.ibm.com/support/pages/node/7277531"},{"id":"IBM:7277536","date":"2026-06-23","title":"Security Bulletin: IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability (CVE-2026-11806)","source_url":"https://www.ibm.com/support/pages/node/7277536"},{"id":"IBM:7277540","date":"2026-06-23","title":"Security Bulletin: IBM Maximo Application Suite uses marked-14.0.0.tgz which is vulnerable to CVE-2026-41680","source_url":"https://www.ibm.com/support/pages/node/7277540"},{"id":"IBM:7277541","date":"2026-06-23","title":"Security Bulletin: IBM Maximo Application Suite uses uuid-9.0.1.tgz which is vulnerable to CVE-2026-41907.","source_url":"https://www.ibm.com/support/pages/node/7277541"},{"id":"IBM:7277544","date":"2026-06-23","title":"Security Bulletin: IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-11536)","source_url":"https://www.ibm.com/support/pages/node/7277544"},{"id":"IBM:7277550","date":"2026-06-23","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling (CVE-2026-11541)","source_url":"https://www.ibm.com/support/pages/node/7277550"},{"id":"IBM:7277555","date":"2026-06-23","title":"Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server CVE-2026-9006","source_url":"https://www.ibm.com/support/pages/node/7277555"},{"id":"IBM:7277556","date":"2026-06-23","title":"Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-10845)","source_url":"https://www.ibm.com/support/pages/node/7277556"},{"id":"IBM:7277560","date":"2026-06-23","title":"Security Bulletin: DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component","source_url":"https://www.ibm.com/support/pages/node/7277560"},{"id":"IBM:7277561","date":"2026-06-23","title":"Security Bulletin: SSRF via HTTP Redirect Following in Langflow API Request Component","source_url":"https://www.ibm.com/support/pages/node/7277561"},{"id":"RHSA-2026:27009","date":"2026-06-23","title":"OpenShift Container Platform 4.22.2 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27009"},{"id":"RHSA-2026:27010","date":"2026-06-23","title":"OpenShift Container Platform 4.22.2 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:27010"},{"id":"RHSA-2026:27044","date":"2026-06-23","title":"OpenShift Container Platform 4.21.21 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27044"},{"id":"RHSA-2026:27063","date":"2026-06-23","title":"OpenShift Container Platform 4.20.26 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27063"},{"id":"RHSA-2026:28053","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28053"},{"id":"RHSA-2026:28054","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28054"},{"id":"RHSA-2026:28055","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28055"},{"id":"RHSA-2026:28056","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28056"},{"id":"RHSA-2026:28057","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28057"},{"id":"RHSA-2026:28058","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28058"},{"id":"RHSA-2026:28074","date":"2026-06-23","title":"skopeo security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28074"},{"id":"RHSA-2026:28114","date":"2026-06-23","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28114"},{"id":"RHSA-2026:28132","date":"2026-06-23","title":"samba security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28132"},{"id":"RHSA-2026:28133","date":"2026-06-23","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28133"},{"id":"RHSA-2026:28139","date":"2026-06-23","title":"redis security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"id":"RHSA-2026:28142","date":"2026-06-23","title":"redis:7 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28142"},{"id":"RHSA-2026:28143","date":"2026-06-23","title":"postgresql:16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28143"},{"id":"RHSA-2026:28146","date":"2026-06-23","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28146"},{"id":"RHSA-2026:28147","date":"2026-06-23","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28147"},{"id":"RHSA-2026:28148","date":"2026-06-23","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28148"},{"id":"RHSA-2026:28157","date":"2026-06-23","title":"python3.14-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28157"},{"id":"RHSA-2026:28158","date":"2026-06-23","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28158"},{"id":"RHSA-2026:28159","date":"2026-06-23","title":"python3.12-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28159"},{"id":"RHSA-2026:28196","date":"2026-06-23","title":"Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.6.12","source_url":"https://access.redhat.com/errata/RHSA-2026:28196"},{"id":"RHSA-2026:28198","date":"2026-06-23","title":"Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12","source_url":"https://access.redhat.com/errata/RHSA-2026:28198"},{"id":"RHSA-2026:28208","date":"2026-06-23","title":"postgresql:13 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28208"},{"id":"RHSA-2026:28212","date":"2026-06-23","title":"nginx:1.24 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28212"},{"id":"RHSA-2026:28227","date":"2026-06-23","title":".NET 8.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28227"},{"id":"RHSA-2026:28247","date":"2026-06-23","title":"python3.14 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:28247"},{"id":"RHSA-2026:28385","date":"2026-06-23","title":"Satellite 6.18.6 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28385"},{"id":"RHSA-2026:28405","date":"2026-06-23","title":"satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:28405"},{"id":"RHSA-2026:28438","date":"2026-06-23","title":"satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview","source_url":"https://access.redhat.com/errata/RHSA-2026:28438"},{"id":"RHSA-2026:28441","date":"2026-06-23","title":"Red Hat Openshift Mirror Registry v2.0.11","source_url":"https://access.redhat.com/errata/RHSA-2026:28441"},{"id":"RHSA-2026:28571","date":"2026-06-23","title":"Red Hat Quay 3.9.23","source_url":"https://access.redhat.com/errata/RHSA-2026:28571"},{"id":"RHSA-2026:28573","date":"2026-06-23","title":"Red Hat Offline Knowledge Portal security and content update","source_url":"https://access.redhat.com/errata/RHSA-2026:28573"},{"id":"RHSA-2026:28581","date":"2026-06-23","title":"python3.14 security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:28581"},{"id":"BSI:WID-SEC-2023-0350","date":"2026-06-23","title":"libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0350"},{"id":"BSI:WID-SEC-2025-0401","date":"2026-06-23","title":"ffmpeg: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0401"},{"id":"BSI:WID-SEC-2025-1204","date":"2026-06-23","title":"systemd-coredump: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1204"},{"id":"BSI:WID-SEC-2025-2497","date":"2026-06-23","title":"libarchive: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2497"},{"id":"BSI:WID-SEC-2025-2525","date":"2026-06-23","title":"libTIFF: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2525"},{"id":"BSI:WID-SEC-2026-0749","date":"2026-06-23","title":"Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0749"},{"id":"BSI:WID-SEC-2026-1254","date":"2026-06-23","title":"Red Hat Hardened Images RPMs (Storable for Perl): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1254"},{"id":"BSI:WID-SEC-2026-1856","date":"2026-06-23","title":"Red Hat Quay: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1856"},{"id":"BSI:WID-SEC-2026-1865","date":"2026-06-23","title":"Langflow: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1865"},{"id":"BSI:WID-SEC-2026-1889","date":"2026-06-23","title":"vllm: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1889"},{"id":"BSI:WID-SEC-2026-1911","date":"2026-06-23","title":"vllm: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1911"},{"id":"BSI:WID-SEC-2026-1958","date":"2026-06-23","title":"LangChain: Schwachstelle ermöglicht Offenlegung von Informationen und Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1958"},{"id":"BSI:WID-SEC-2026-2032","date":"2026-06-23","title":"Google Cloud Logging und Cloud Console App Engine: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2032"},{"id":"BSI:WID-SEC-2026-2033","date":"2026-06-23","title":"Budibase: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2033"},{"id":"BSI:WID-SEC-2026-2034","date":"2026-06-23","title":"OpenCTI: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2034"},{"id":"BSI:WID-SEC-2026-2036","date":"2026-06-23","title":"dnsmasq: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2036"},{"id":"BSI:WID-SEC-2026-2037","date":"2026-06-23","title":"libxml2: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2037"},{"id":"BSI:WID-SEC-2026-2039","date":"2026-06-23","title":"OpenSSH: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2039"},{"id":"GHSA-29HF-RM4X-XXPH","date":"2026-06-23","title":"Mise's local credential_command executes untrusted config","source_url":"https://github.com/advisories/GHSA-29hf-rm4x-xxph"},{"id":"GHSA-7CQP-7CFV-6C3Q","date":"2026-06-23","title":"AVideo Meet lugin: anonymous-to-admin stored XSS via unescaped participant User-Agent in getMeetInfo.json.php Participants panel","source_url":"https://github.com/advisories/GHSA-7cqp-7cfv-6c3q"},{"id":"GHSA-F94H-J2QG-FXW3","date":"2026-06-23","title":"mise HTTP backend uses raw version path for install symlink destination","source_url":"https://github.com/advisories/GHSA-f94h-j2qg-fxw3"},{"id":"GHSA-J67X-Q29F-QCVV","date":"2026-06-23","title":"motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution","source_url":"https://github.com/advisories/GHSA-j67x-q29f-qcvv"},{"id":"IBM:7269429","date":"2026-06-23","title":"Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core-2.17.2 (CVE-2025-68161)","source_url":"https://www.ibm.com/support/pages/node/7269429"},{"id":"IBM:7277423","date":"2026-06-23","title":"Security Bulletin: IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user (CVE-2026-11906)","source_url":"https://www.ibm.com/support/pages/node/7277423"},{"id":"IBM:7277484","date":"2026-06-23","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in Apache PDFBox","source_url":"https://www.ibm.com/support/pages/node/7277484"},{"id":"IBM:7277575","date":"2026-06-23","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains (CVE-2026-12084)","source_url":"https://www.ibm.com/support/pages/node/7277575"},{"id":"IBM:7277576","date":"2026-06-23","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a  Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-12086)","source_url":"https://www.ibm.com/support/pages/node/7277576"},{"id":"IBM:7277577","date":"2026-06-23","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability (CVE-2026-12085)","source_url":"https://www.ibm.com/support/pages/node/7277577"},{"id":"RHSA-2026:28209","date":"2026-06-23","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28209"},{"id":"RHSA-2026:28210","date":"2026-06-23","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28210"},{"id":"RHSA-2026:28231","date":"2026-06-23","title":"opencryptoki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28231"},{"id":"RHSA-2026:28233","date":"2026-06-23","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28233"},{"id":"RHSA-2026:28236","date":"2026-06-23","title":"libsolv security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28236"},{"id":"RHSA-2026:28243","date":"2026-06-23","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28243"},{"id":"RHSA-2026:28244","date":"2026-06-23","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28244"},{"id":"RHSA-2026:28255","date":"2026-06-23","title":"libpng security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28255"},{"id":"RHSA-2026:28256","date":"2026-06-23","title":"opencryptoki security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28256"},{"id":"RHSA-2026:28290","date":"2026-06-23","title":"libreoffice security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28290"},{"id":"RHSA-2026:28456","date":"2026-06-23","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28456"},{"id":"RHSA-2026:28457","date":"2026-06-23","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28457"},{"id":"RHSA-2026:28458","date":"2026-06-23","title":"libpng15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28458"},{"id":"RHSA-2026:28553","date":"2026-06-23","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28553"},{"id":"RHSA-2026:28582","date":"2026-06-23","title":"keylime security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28582"},{"id":"RHSA-2026:28584","date":"2026-06-23","title":"libxslt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28584"},{"id":"RHSA-2026:28211","date":"2026-06-23","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:28211"},{"id":"RHSA-2026:28234","date":"2026-06-23","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28234"},{"id":"RHSA-2026:28235","date":"2026-06-23","title":"libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28235"},{"id":"RHSA-2026:28253","date":"2026-06-23","title":"libtasn1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28253"},{"id":"RHSA-2026:28254","date":"2026-06-23","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28254"},{"id":"RHSA-2026:28491","date":"2026-06-23","title":"Red Hat Hardened Images RPMs Security Update","source_url":"https://access.redhat.com/errata/RHSA-2026:28491"},{"id":"IBM:7277383","date":"2026-06-22","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7277383"},{"id":"IBM:7277386","date":"2026-06-22","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7277386"},{"id":"IBM:7277390","date":"2026-06-22","title":"Security Bulletin: Multiple Vulnerabilities in watsonx.data","source_url":"https://www.ibm.com/support/pages/node/7277390"},{"id":"IBM:7277405","date":"2026-06-22","title":"Security Bulletin: Critical XXE Vulnerability in Apache Tika Affecting Content Collector for Email, File Systems, and Microsoft SharePoint (CVE-2025-66516)","source_url":"https://www.ibm.com/support/pages/node/7277405"},{"id":"RHSA-2026:27719","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27719"},{"id":"RHSA-2026:27729","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27729"},{"id":"BSI:WID-SEC-2024-1851","date":"2026-06-22","title":"QEMU: Schwachstelle ermöglicht Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1851"},{"id":"BSI:WID-SEC-2026-1358","date":"2026-06-22","title":"Red Hat Enterprise Linux (corosync): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1358"},{"id":"BSI:WID-SEC-2026-1956","date":"2026-06-22","title":"Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1956"},{"id":"BSI:WID-SEC-2026-1999","date":"2026-06-22","title":"Tinyproxy: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1999"},{"id":"IBM:7277265","date":"2026-06-22","title":"Security Bulletin: Critical XXE Vulnerability in Apache Tika Affecting Content Collector for Email, File Systems, and Microsoft SharePoint (CVE-2025-54988)","source_url":"https://www.ibm.com/support/pages/node/7277265"},{"id":"IBM:7277266","date":"2026-06-22","title":"Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint","source_url":"https://www.ibm.com/support/pages/node/7277266"},{"id":"IBM:7277316","date":"2026-06-22","title":"Security Bulletin: Vulnerability in Lodash affects IBM watsonx Assistant Cartridge and  IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7277316"},{"id":"IBM:7277406","date":"2026-06-22","title":"Security Bulletin: Multiple vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.","source_url":"https://www.ibm.com/support/pages/node/7277406"},{"id":"RHSA-2026:27200","date":"2026-06-22","title":"Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27200"},{"id":"RHSA-2026:27201","date":"2026-06-22","title":"Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27201"},{"id":"RHSA-2026:27704","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27704"},{"id":"RHSA-2026:27705","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27705"},{"id":"RHSA-2026:27706","date":"2026-06-22","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27706"},{"id":"RHSA-2026:27707","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27707"},{"id":"RHSA-2026:27708","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27708"},{"id":"RHSA-2026:27709","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27709"},{"id":"RHSA-2026:27712","date":"2026-06-22","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27712"},{"id":"RHSA-2026:27713","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27713"},{"id":"RHSA-2026:27715","date":"2026-06-22","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27715"},{"id":"RHSA-2026:27716","date":"2026-06-22","title":"redis security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"id":"RHSA-2026:27717","date":"2026-06-22","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27717"},{"id":"RHSA-2026:27718","date":"2026-06-22","title":"postgresql16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27718"},{"id":"RHSA-2026:27720","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27720"},{"id":"RHSA-2026:27721","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27721"},{"id":"RHSA-2026:27722","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27722"},{"id":"RHSA-2026:27723","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27723"},{"id":"RHSA-2026:27724","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27724"},{"id":"RHSA-2026:27725","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27725"},{"id":"RHSA-2026:27727","date":"2026-06-22","title":"poppler security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27727"},{"id":"RHSA-2026:27728","date":"2026-06-22","title":"webkitgtk4 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27728"},{"id":"RHSA-2026:27731","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27731"},{"id":"RHSA-2026:27733","date":"2026-06-22","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27733"},{"id":"RHSA-2026:27734","date":"2026-06-22","title":"firefox security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27734"},{"id":"RHSA-2026:27735","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27735"},{"id":"RHSA-2026:27738","date":"2026-06-22","title":"libpq security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27738"},{"id":"RHSA-2026:27741","date":"2026-06-22","title":"postgresql security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27741"},{"id":"RHSA-2026:27742","date":"2026-06-22","title":"postgresql18 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27742"},{"id":"RHSA-2026:27743","date":"2026-06-22","title":"postgresql16 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27743"},{"id":"RHSA-2026:27784","date":"2026-06-22","title":"RHOAI 3.4.1 - Red Hat OpenShift AI","source_url":"https://access.redhat.com/errata/RHSA-2026:27784"},{"id":"RHSA-2026:27785","date":"2026-06-22","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27785"},{"id":"RHSA-2026:27787","date":"2026-06-22","title":"redis:6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27787"},{"id":"RHSA-2026:27789","date":"2026-06-22","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27789"},{"id":"RHSA-2026:27804","date":"2026-06-22","title":"webkit2gtk3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27804"},{"id":"RHSA-2026:27811","date":"2026-06-22","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27811"},{"id":"RHSA-2026:27812","date":"2026-06-22","title":"kernel-rt security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27812"},{"id":"RHSA-2026:27819","date":"2026-06-22","title":"evince security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27819"},{"id":"RHSA-2026:27842","date":"2026-06-22","title":"memcached security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27842"},{"id":"RHSA-2026:27856","date":"2026-06-22","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27856"},{"id":"RHSA-2026:27862","date":"2026-06-22","title":"memcached security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27862"},{"id":"RHSA-2026:27892","date":"2026-06-22","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27892"},{"id":"RHSA-2026:27893","date":"2026-06-22","title":"OpenShift Virtualization v4.18 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27893"},{"id":"RHSA-2026:27901","date":"2026-06-22","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27901"},{"id":"RHSA-2026:27903","date":"2026-06-22","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27903"},{"id":"RHSA-2026:27913","date":"2026-06-22","title":"OpenShift Virtualization v4.18 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27913"},{"id":"RHSA-2026:27914","date":"2026-06-22","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27914"},{"id":"RHSA-2026:27929","date":"2026-06-22","title":"python3.14-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27929"},{"id":"RHSA-2026:27941","date":"2026-06-22","title":"OpenShift Virtualization v4.22 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27941"},{"id":"RHSA-2026:27944","date":"2026-06-22","title":"OpenShift Virtualization v4.14 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27944"},{"id":"RHSA-2026:27957","date":"2026-06-22","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27957"},{"id":"RHSA-2026:27983","date":"2026-06-22","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27983"},{"id":"RHSA-2026:27998","date":"2026-06-22","title":"Cost Management Metrics Operator Update","source_url":"https://access.redhat.com/errata/RHSA-2026:27998"},{"id":"RHSA-2026:28000","date":"2026-06-22","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28000"},{"id":"RHSA-2026:28002","date":"2026-06-22","title":"OpenShift Virtualization v4.17 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:28002"},{"id":"RHSA-2026:28007","date":"2026-06-22","title":".NET 8.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28007"},{"id":"RHSA-2026:28009","date":"2026-06-22","title":".NET 9.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28009"},{"id":"RHSA-2026:28010","date":"2026-06-22","title":"Red Hat build of Cryostat security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28010"},{"id":"RHSA-2026:28011","date":"2026-06-22","title":".NET 8.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28011"},{"id":"RHSA-2026:28037","date":"2026-06-22","title":"postgresql:15 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28037"},{"id":"RHSA-2026:28038","date":"2026-06-22","title":"gvisor-tap-vsock security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28038"},{"id":"RHSA-2026:28042","date":"2026-06-22","title":"Red Hat OpenStack Platform 17.1 (python-pyasn1) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28042"},{"id":"RHSA-2026:28043","date":"2026-06-22","title":"Red Hat OpenStack Platform 17.1 (python-urllib3) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28043"},{"id":"RHSA-2026:28044","date":"2026-06-22","title":"Red Hat OpenStack Platform 17.1 (openstack-keystone) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28044"},{"id":"RHSA-2026:28047","date":"2026-06-22","title":"Red Hat OpenStack Platform 17.1 (etcd) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28047"},{"id":"RHSA-2026:28049","date":"2026-06-22","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28049"},{"id":"RHSA-2026:28050","date":"2026-06-22","title":"vim security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28050"},{"id":"RHSA-2026:28051","date":"2026-06-22","title":".NET 9.0 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28051"},{"id":"CISCO-SA-UCCE-PCCE-XSS-2JVYG3UD","date":"2026-06-22","title":"Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucce-pcce-xss-2JVyg3uD"},{"id":"IBM:7148474","date":"2026-06-22","title":"Security Bulletin: Multiple Vulnerabilities identified in IBM Cloud Pak System","source_url":"https://www.ibm.com/support/pages/node/7148474"},{"id":"IBM:7277337","date":"2026-06-22","title":"Security Bulletin: Vulnerability in NanoHTTPD affects IBM watsonx Assistant Cartridge and  IBM watsonx Orchestrate with watsonx Assistant Cartridge.","source_url":"https://www.ibm.com/support/pages/node/7277337"},{"id":"IBM:7277375","date":"2026-06-22","title":"Security Bulletin: DataStage on Cloud Pak for Data is vulnerability to man-in-the-middle attacks due to the log4j package (CVE-2025-68161)","source_url":"https://www.ibm.com/support/pages/node/7277375"},{"id":"RHSA-2026:27711","date":"2026-06-22","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27711"},{"id":"RHSA-2026:27732","date":"2026-06-22","title":"yggdrasil-worker-package-manager security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27732"},{"id":"RHSA-2026:27740","date":"2026-06-22","title":"golang-github-openprinting-ipp-usb security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27740"},{"id":"RHSA-2026:27744","date":"2026-06-22","title":"openssl-fips-provider security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27744"},{"id":"RHSA-2026:27745","date":"2026-06-22","title":"openssl-fips-provider security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27745"},{"id":"RHSA-2026:27746","date":"2026-06-22","title":"openssl-fips-provider security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27746"},{"id":"RHSA-2026:27872","date":"2026-06-22","title":"OpenShift Virtualization v4.19 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27872"},{"id":"RHSA-2026:27875","date":"2026-06-22","title":"OpenShift Virtualization v4.18 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27875"},{"id":"RHSA-2026:27879","date":"2026-06-22","title":"OpenShift Virtualization v4.21 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27879"},{"id":"RHSA-2026:27967","date":"2026-06-22","title":"OpenShift Virtualization v4.20 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:27967"},{"id":"RHSA-2026:28001","date":"2026-06-22","title":"OpenShift Virtualization v4.17 Images","source_url":"https://access.redhat.com/errata/RHSA-2026:28001"},{"id":"RHSA-2026:28036","date":"2026-06-22","title":"crun security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28036"},{"id":"RHSA-2026:28046","date":"2026-06-22","title":"Red Hat OpenStack Platform 17.1 (golang-uber-multierr) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:28046"},{"id":"RHSA-2026:27736","date":"2026-06-22","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27736"},{"id":"RHSA-2026:27737","date":"2026-06-22","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27737"},{"id":"RHSA-2026:27739","date":"2026-06-22","title":"libxml2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27739"},{"id":"IBM:7276677","date":"2026-06-21","title":"Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software","source_url":"https://www.ibm.com/support/pages/node/7276677"},{"id":"IBM:7277225","date":"2026-06-20","title":"Security Bulletin: Multiple Security Vulnerabilities in third-Party libraries used by IBM Tivoli Netcool Configuration Manager","source_url":"https://www.ibm.com/support/pages/node/7277225"},{"id":"GHSA-F4XH-W4CJ-QXQ8","date":"2026-06-20","title":"LangSmith SDK TracingMiddleware: Arbitrary server-side file read","source_url":"https://github.com/advisories/GHSA-f4xh-w4cj-qxq8"},{"id":"BSI:WID-SEC-2026-2002","date":"2026-06-19","title":"Drupal Core: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2002"},{"id":"BSI:WID-SEC-2026-2013","date":"2026-06-19","title":"Gogs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2013"},{"id":"IBM:7276757","date":"2026-06-19","title":"Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to  SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions","source_url":"https://www.ibm.com/support/pages/node/7276757"},{"id":"IBM:7277095","date":"2026-06-19","title":"Security Bulletin: Due to the use of zlib, IBM EntireX is vulnerable to Improper Validation of Specified Quantity in Input vulnerabilities (CVE-2026-3381, CVE-2026-27171).","source_url":"https://www.ibm.com/support/pages/node/7277095"},{"id":"IBM:7277096","date":"2026-06-19","title":"Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images","source_url":"https://www.ibm.com/support/pages/node/7277096"},{"id":"IBM:7277103","date":"2026-06-19","title":"Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7277103"},{"id":"IBM:7277104","date":"2026-06-19","title":"Security Bulletin: IBM ApplinX is vulnerable to multiple vulnerabilities due to the use of Bouncy Castle library (CVE-2023-33202, CVE-2025-8916, CVE-2026-5588, CVE-2025-14813, CVE-2026-5598, CVE-2026-0636)","source_url":"https://www.ibm.com/support/pages/node/7277104"},{"id":"IBM:7277112","date":"2026-06-19","title":"Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7277112"},{"id":"IBM:7277134","date":"2026-06-19","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a HTTP Request/Response Smuggling Vulnerability in Eclipse Jetty (CVE-2026-2332)","source_url":"https://www.ibm.com/support/pages/node/7277134"},{"id":"IBM:7277153","date":"2026-06-19","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7277153"},{"id":"BSI:WID-SEC-2026-2005","date":"2026-06-19","title":"pgAdmin: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2005"},{"id":"BSI:WID-SEC-2026-2014","date":"2026-06-19","title":"Webmin: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2014"},{"id":"IBM:7276372","date":"2026-06-19","title":"Security Bulletin: A vulnerability in com.google.code.gson:gson may affect IBM Engineering Workflow Management (CVE-2022-25647)","source_url":"https://www.ibm.com/support/pages/node/7276372"},{"id":"IBM:7277089","date":"2026-06-19","title":"Security Bulletin: IBM Verify Identity Protection Self-Hosted is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7277089"},{"id":"IBM:7277115","date":"2026-06-19","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)","source_url":"https://www.ibm.com/support/pages/node/7277115"},{"id":"IBM:7277116","date":"2026-06-19","title":"Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)","source_url":"https://www.ibm.com/support/pages/node/7277116"},{"id":"IBM:7277132","date":"2026-06-19","title":"Security Bulletin: IBM DevOps Deploy / UrbanCode Deploy (UCD) is affected by a HTTP Request/Response Smuggling vulnerablity in Apache Tomcat (CVE-2026-24880)","source_url":"https://www.ibm.com/support/pages/node/7277132"},{"id":"IBM:7277133","date":"2026-06-19","title":"Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a HTTP Request Smullging Vulnerability in Netty (CVE-2026-33870)","source_url":"https://www.ibm.com/support/pages/node/7277133"},{"id":"IBM:7277154","date":"2026-06-19","title":"Security Bulletin: Vulnerabilities exists in IBM Netezza Software","source_url":"https://www.ibm.com/support/pages/node/7277154"},{"id":"NCSC-2026-0198","date":"2026-06-19","title":"NCSC-2026-0198 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform","source_url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0198"},{"id":"RHSA-2026:27288","date":"2026-06-19","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27288"},{"id":"RHSA-2026:27353","date":"2026-06-19","title":"kernel security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27353"},{"id":"RHSA-2026:27354","date":"2026-06-19","title":"kernel-rt security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27354"},{"id":"RHSA-2026:27355","date":"2026-06-19","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2026:27355"},{"id":"BSI:WID-SEC-2024-3572","date":"2026-06-19","title":"ffmpeg: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3572"},{"id":"BSI:WID-SEC-2025-2740","date":"2026-06-19","title":"ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2740"},{"id":"BSI:WID-SEC-2026-1878","date":"2026-06-19","title":"Hitachi Storage: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1878"},{"id":"BSI:WID-SEC-2026-1920","date":"2026-06-19","title":"Squid: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1920"},{"id":"BSI:WID-SEC-2026-2003","date":"2026-06-19","title":"OpenBSD: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2003"},{"id":"BSI:WID-SEC-2026-2007","date":"2026-06-19","title":"libssh2: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2007"},{"id":"BSI:WID-SEC-2026-2008","date":"2026-06-19","title":"expat: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2008"},{"id":"BSI:WID-SEC-2026-2010","date":"2026-06-19","title":"OpenTofu: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2010"},{"id":"BSI:WID-SEC-2026-2015","date":"2026-06-19","title":"ffmpeg: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2015"},{"id":"IBM:7276370","date":"2026-06-19","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities bootstrap-3.4.1.tgz observed","source_url":"https://www.ibm.com/support/pages/node/7276370"},{"id":"IBM:7276371","date":"2026-06-19","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed","source_url":"https://www.ibm.com/support/pages/node/7276371"},{"id":"RHSA-2026:27171","date":"2026-06-19","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27171"},{"id":"RHSA-2026:27197","date":"2026-06-19","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:27197"},{"id":"BSI:WID-SEC-2026-1991","date":"2026-06-18","title":"PTC FlexPLM: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1991"},{"id":"IBM:7274563","date":"2026-06-18","title":"Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to Buffer overflow in OMR","source_url":"https://www.ibm.com/support/pages/node/7274563"},{"id":"IBM:7276895","date":"2026-06-18","title":"Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276895"},{"id":"RHSA-2026:25044","date":"2026-06-18","title":"OpenShift Container Platform 4.16.64 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:25044"},{"id":"RHSA-2026:27125","date":"2026-06-18","title":"Red Hat Directory Server 13.2 container image update","source_url":"https://access.redhat.com/errata/RHSA-2026:27125"},{"id":"RHSA-2026:27126","date":"2026-06-18","title":"Red Hat OpenShift distributed tracing platform (Tempo) 3.10.0 release","source_url":"https://access.redhat.com/errata/RHSA-2026:27126"},{"id":"BSI:WID-SEC-2026-1948","date":"2026-06-18","title":"Red Hat OpenShift Service Mesh (envoy): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1948"},{"id":"IBM:7276898","date":"2026-06-18","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276898"},{"id":"IBM:7276903","date":"2026-06-18","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities when using the Web Server Plug-ins","source_url":"https://www.ibm.com/support/pages/node/7276903"},{"id":"IBM:7276904","date":"2026-06-18","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an authentication bypass vulnerability","source_url":"https://www.ibm.com/support/pages/node/7276904"},{"id":"IBM:7276906","date":"2026-06-18","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by server-side request forgery","source_url":"https://www.ibm.com/support/pages/node/7276906"},{"id":"RHSA-2026:26989","date":"2026-06-18","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26989"},{"id":"RHSA-2026:26990","date":"2026-06-18","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26990"},{"id":"RHSA-2026:26994","date":"2026-06-18","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26994"},{"id":"IBM:7272765","date":"2026-06-17","title":"Security Bulletin: Multiple Vulnerabilities in NLTK bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage","source_url":"https://www.ibm.com/support/pages/node/7272765"},{"id":"IBM:7272779","date":"2026-06-17","title":"Security Bulletin: Vulnerability in gRPC-Go bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage","source_url":"https://www.ibm.com/support/pages/node/7272779"},{"id":"IBM:7274740","date":"2026-06-17","title":"Security Bulletin: IBM WebSphere Application Server is affected by an identity spoofing vulnerability (CVE-2026-8644)","source_url":"https://www.ibm.com/support/pages/node/7274740"},{"id":"IBM:7276761","date":"2026-06-17","title":"Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by broken or risky algorithm.","source_url":"https://www.ibm.com/support/pages/node/7276761"},{"id":"IBM:7276765","date":"2026-06-17","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in the cryptography package","source_url":"https://www.ibm.com/support/pages/node/7276765"},{"id":"IBM:7276767","date":"2026-06-17","title":"Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud multiple vulnerabilities addressed","source_url":"https://www.ibm.com/support/pages/node/7276767"},{"id":"IBM:7276778","date":"2026-06-17","title":"Security Bulletin: IBM webMethods BPM is vulnerable to Deserialization of Untrusted Data","source_url":"https://www.ibm.com/support/pages/node/7276778"},{"id":"IBM:7276807","date":"2026-06-17","title":"Security Bulletin: Vulnerability in Eclipes OMR affectecting Host On-Demand","source_url":"https://www.ibm.com/support/pages/node/7276807"},{"id":"IBM:7276809","date":"2026-06-17","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements in Output Used by a Downstream Component (&apos;Injection&apos;) (CVE-2026-27727)","source_url":"https://www.ibm.com/support/pages/node/7276809"},{"id":"IBM:7276816","date":"2026-06-17","title":"Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276816"},{"id":"IBM:7276818","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar","source_url":"https://www.ibm.com/support/pages/node/7276818"},{"id":"BSI:WID-SEC-2026-1606","date":"2026-06-17","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1606"},{"id":"IBM:7270654","date":"2026-06-17","title":"Security Bulletin: Vulnerability in edk2 affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7270654"},{"id":"IBM:7272763","date":"2026-06-17","title":"Security Bulletin: Vulnerability in Python-Multipart bundled with IBM Fusion, IBM Fusion HCI and IBM Fusion Content-Aware Storage","source_url":"https://www.ibm.com/support/pages/node/7272763"},{"id":"IBM:7276763","date":"2026-06-17","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities in Vim","source_url":"https://www.ibm.com/support/pages/node/7276763"},{"id":"IBM:7276812","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in postgresql-42.6.1.jar","source_url":"https://www.ibm.com/support/pages/node/7276812"},{"id":"IBM:7276813","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in tomcat-embed-core-11.0.20.jar","source_url":"https://www.ibm.com/support/pages/node/7276813"},{"id":"IBM:7276814","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pygments-2.19.2-py3-none-any.whl","source_url":"https://www.ibm.com/support/pages/node/7276814"},{"id":"IBM:7276815","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-11.0.18.jar","source_url":"https://www.ibm.com/support/pages/node/7276815"},{"id":"IBM:7276831","date":"2026-06-17","title":"Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server Web Server Plug-ins shipped with WebSphere Service Registry and Repository (CVE-2026-10852, CVE-2026-8858 and CVE-2026-9072)","source_url":"https://www.ibm.com/support/pages/node/7276831"},{"id":"IBM:7276832","date":"2026-06-17","title":"Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-10845, CVE-2026-8646, CVE-2026-9320, CVE-2026-9071 and CVE-2026-9006)","source_url":"https://www.ibm.com/support/pages/node/7276832"},{"id":"RHSA-2026:26546","date":"2026-06-17","title":"RHACS 4.9.8 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:26546"},{"id":"RHSA-2026:26547","date":"2026-06-17","title":"RHACS 4.10.4 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:26547"},{"id":"RHSA-2026:26636","date":"2026-06-17","title":"Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update","source_url":"https://access.redhat.com/errata/RHSA-2026:26636"},{"id":"CISCO-SA-CNC-INJ-QNMEEMXK","date":"2026-06-17","title":"Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnc-inj-QNMeEmxk"},{"id":"CISCO-SA-UMBRELLA-PRIV-ESC-F4WJB7AU","date":"2026-06-17","title":"Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-priv-esc-F4wJB7AU"},{"id":"CISCO-SA-WEBEX-APP-REDIRECT-KOYXHFFH","date":"2026-06-17","title":"Cisco Webex App Open Redirect Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-redirect-KOyxhffH"},{"id":"IBM:7276759","date":"2026-06-17","title":"Security Bulletin: IBM B2B Advanced Communications is vulnerable to man-in-the-middle attack due to log4j-core (CVE-2025-68161)","source_url":"https://www.ibm.com/support/pages/node/7276759"},{"id":"IBM:7276817","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pyjwt-2.12.1-py3-none-any.whl","source_url":"https://www.ibm.com/support/pages/node/7276817"},{"id":"IBM:7276819","date":"2026-06-17","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in pypdf-6.11.0-py3-none-any.whl","source_url":"https://www.ibm.com/support/pages/node/7276819"},{"id":"RHSA-2026:26573","date":"2026-06-17","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26573"},{"id":"RHSA-2026:26638","date":"2026-06-17","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26638"},{"id":"RHSA-2026:26713","date":"2026-06-17","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26713"},{"id":"CISCO-SA-SDWAN-RPA-EHCHTZK","date":"2026-06-16","title":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk"},{"id":"IBM:7276565","date":"2026-06-16","title":"Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server","source_url":"https://www.ibm.com/support/pages/node/7276565"},{"id":"IBM:7276571","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Certificate Validation (CVE-2026-40971, CVE-2026-40974)","source_url":"https://www.ibm.com/support/pages/node/7276571"},{"id":"IBM:7276572","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Use of a Broken or Risky Cryptographic Algorithm, Covert Timing Channel (CVE-2025-14813, CVE-2026-5598)","source_url":"https://www.ibm.com/support/pages/node/7276572"},{"id":"IBM:7276573","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements used in an Expression Language Statement (&apos;Expression Language Injection&apos;) (CVE-2026-40477, CVE-2026-40478)","source_url":"https://www.ibm.com/support/pages/node/7276573"},{"id":"IBM:7276574","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests (&apos;HTTP Request/Response Smuggling&apos;) (CVE-2026-2332)","source_url":"https://www.ibm.com/support/pages/node/7276574"},{"id":"IBM:7276575","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests (&apos;HTTP Request/Response Smuggling&apos;), URL Redirection to Untrusted Site (&apos;Open Redirect&apos;), and 3 more (CVE-2026-24880, CVE-2026-25854, and 3 more)","source_url":"https://www.ibm.com/support/pages/node/7276575"},{"id":"IBM:7276576","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;) (CVE-2024-1597)","source_url":"https://www.ibm.com/support/pages/node/7276576"},{"id":"IBM:7276577","date":"2026-06-16","title":"Security Bulletin: MongoDB Enterprised Advanced affected by: Direct Request (&apos;Forced Browsing&apos;) (CVE-2026-22732)","source_url":"https://www.ibm.com/support/pages/node/7276577"},{"id":"IBM:7276589","date":"2026-06-16","title":"Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276589"},{"id":"IBM:7276618","date":"2026-06-16","title":"Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway","source_url":"https://www.ibm.com/support/pages/node/7276618"},{"id":"IBM:7270299","date":"2026-06-16","title":"Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities (CVE-2026-23193, CVE-2026-23231, CVE-2026-3497)","source_url":"https://www.ibm.com/support/pages/node/7270299"},{"id":"IBM:7276525","date":"2026-06-16","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by insufficient verification of data authenticity in PyJWT","source_url":"https://www.ibm.com/support/pages/node/7276525"},{"id":"IBM:7276527","date":"2026-06-16","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Test management is impacted by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276527"},{"id":"IBM:7276541","date":"2026-06-16","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js module path-to-regexp","source_url":"https://www.ibm.com/support/pages/node/7276541"},{"id":"IBM:7276542","date":"2026-06-16","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules fast-uri and protobufjs (CVE-2026-6322, CVE-2026-45740 & CVE-2026-6321)","source_url":"https://www.ibm.com/support/pages/node/7276542"},{"id":"IBM:7276560","date":"2026-06-16","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)","source_url":"https://www.ibm.com/support/pages/node/7276560"},{"id":"IBM:7276579","date":"2026-06-16","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)","source_url":"https://www.ibm.com/support/pages/node/7276579"},{"id":"IBM:7276597","date":"2026-06-16","title":"Security Bulletin: IBM WebSphere Application Server is affected by an authentication bypass vulnerability (CVE-2026-10845)","source_url":"https://www.ibm.com/support/pages/node/7276597"},{"id":"IBM:7276600","date":"2026-06-16","title":"Security Bulletin: IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006)","source_url":"https://www.ibm.com/support/pages/node/7276600"},{"id":"IBM:7276616","date":"2026-06-16","title":"Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU","source_url":"https://www.ibm.com/support/pages/node/7276616"},{"id":"IBM:7276620","date":"2026-06-16","title":"Security Bulletin: Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Apr 2026 - Includes OpenJDK April 2026 CPU plus CVE-2026-6918","source_url":"https://www.ibm.com/support/pages/node/7276620"},{"id":"IBM:7276625","date":"2026-06-16","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex","source_url":"https://www.ibm.com/support/pages/node/7276625"},{"id":"RHSA-2026:26206","date":"2026-06-16","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:26206"},{"id":"CISCO-SA-SDWAN-RPA2-V69WY2SW","date":"2026-06-16","title":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW"},{"id":"IBM:7275917","date":"2026-06-16","title":"Security Bulletin: Security Vulnerabilities were found in IBM Security Verify Directory (CVE-2018-2799, CVE-2022-23437)","source_url":"https://www.ibm.com/support/pages/node/7275917"},{"id":"IBM:7276548","date":"2026-06-16","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js module file-type ( CVE-2026-31808 )","source_url":"https://www.ibm.com/support/pages/node/7276548"},{"id":"IBM:7276609","date":"2026-06-16","title":"Security Bulletin: Multiple Vulnerabilities in IBM Datacap","source_url":"https://www.ibm.com/support/pages/node/7276609"},{"id":"IBM:7276619","date":"2026-06-16","title":"Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Netty","source_url":"https://www.ibm.com/support/pages/node/7276619"},{"id":"RHSA-2026:26223","date":"2026-06-16","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:26223"},{"id":"IBM:7276303","date":"2026-06-15","title":"Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7276303"},{"id":"IBM:7276304","date":"2026-06-15","title":"Security Bulletin: Security vulnerability has been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7276304"},{"id":"IBM:7276309","date":"2026-06-15","title":"Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925","source_url":"https://www.ibm.com/support/pages/node/7276309"},{"id":"IBM:7276311","date":"2026-06-15","title":"Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-1605","source_url":"https://www.ibm.com/support/pages/node/7276311"},{"id":"IBM:7276318","date":"2026-06-15","title":"Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pillow-11.3.0  which is vulnerable to CVE-2026-40192","source_url":"https://www.ibm.com/support/pages/node/7276318"},{"id":"IBM:7276392","date":"2026-06-15","title":"Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to multiple issues","source_url":"https://www.ibm.com/support/pages/node/7276392"},{"id":"RHSA-2026:25902","date":"2026-06-15","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:25902"},{"id":"RHSA-2026:26072","date":"2026-06-15","title":"Kiali 1.73.32 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:26072"},{"id":"RHSA-2026:26077","date":"2026-06-15","title":"Kiali 2.11.12 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:26077"},{"id":"RHSA-2026:26079","date":"2026-06-15","title":"Kiali 2.17.9 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:26079"},{"id":"RHSA-2026:26080","date":"2026-06-15","title":"Kiali 2.4.18 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:26080"},{"id":"RHSA-2026:26090","date":"2026-06-15","title":"Kiali 2.22.5 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:26090"},{"id":"CISCO-SA-SDWAN-ARBFW-C2RZVQ","date":"2026-06-15","title":"Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ"},{"id":"IBM:7276306","date":"2026-06-15","title":"Security Bulletin: Security vulnerability has been identified in dojo library shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-1000665)","source_url":"https://www.ibm.com/support/pages/node/7276306"},{"id":"IBM:7276310","date":"2026-06-15","title":"Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2025-11143","source_url":"https://www.ibm.com/support/pages/node/7276310"},{"id":"IBM:7276319","date":"2026-06-15","title":"Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by CVE-2025-48924","source_url":"https://www.ibm.com/support/pages/node/7276319"},{"id":"IBM:7274493","date":"2026-06-12","title":"Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026","source_url":"https://www.ibm.com/support/pages/node/7274493"},{"id":"IBM:7275788","date":"2026-06-12","title":"Security Bulletin: Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking","source_url":"https://www.ibm.com/support/pages/node/7275788"},{"id":"IBM:7276074","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)","source_url":"https://www.ibm.com/support/pages/node/7276074"},{"id":"IBM:7276077","date":"2026-06-12","title":"Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7276077"},{"id":"IBM:7276102","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7276102"},{"id":"IBM:7276103","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7276103"},{"id":"IBM:7276105","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition","source_url":"https://www.ibm.com/support/pages/node/7276105"},{"id":"IBM:7276117","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabilities in IBM Software Support App","source_url":"https://www.ibm.com/support/pages/node/7276117"},{"id":"IBM:7270882","date":"2026-06-12","title":"Security Bulletin: Langflow OSS Unauthenticated IDOR on Image Downloads","source_url":"https://www.ibm.com/support/pages/node/7270882"},{"id":"IBM:7271099","date":"2026-06-12","title":"Security Bulletin: Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint","source_url":"https://www.ibm.com/support/pages/node/7271099"},{"id":"IBM:7276078","date":"2026-06-12","title":"Security Bulletin: IBM Event Streams is affected by multiple vulnerabilities in Java SE (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933).","source_url":"https://www.ibm.com/support/pages/node/7276078"},{"id":"IBM:7276084","date":"2026-06-12","title":"Security Bulletin: The IBM Common Licensing product using WebSphere Application Server Liberty is affected by a remote code execution vulnerability (CVE-2025-14914)","source_url":"https://www.ibm.com/support/pages/node/7276084"},{"id":"IBM:7276090","date":"2026-06-12","title":"Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.x) Platform - Multiple Vulnerabilities in IBM Java","source_url":"https://www.ibm.com/support/pages/node/7276090"},{"id":"IBM:7276097","date":"2026-06-12","title":"Security Bulletin: Multiple vulnerabbilities exist in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager IP Edition core components","source_url":"https://www.ibm.com/support/pages/node/7276097"},{"id":"IBM:7276123","date":"2026-06-12","title":"Security Bulletin: Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.","source_url":"https://www.ibm.com/support/pages/node/7276123"},{"id":"IBM:7276185","date":"2026-06-12","title":"Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway","source_url":"https://www.ibm.com/support/pages/node/7276185"},{"id":"IBM:7276187","date":"2026-06-12","title":"Security Bulletin: Security Vulnerability in Spring Boot Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-22235)","source_url":"https://www.ibm.com/support/pages/node/7276187"},{"id":"IBM:7276189","date":"2026-06-12","title":"Security Bulletin: Security Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-41248)","source_url":"https://www.ibm.com/support/pages/node/7276189"},{"id":"IBM:7276193","date":"2026-06-12","title":"Security Bulletin: Security Vulnerability in Spring Cloud Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-41235)","source_url":"https://www.ibm.com/support/pages/node/7276193"},{"id":"IBM:7271097","date":"2026-06-12","title":"Security Bulletin: Arbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API","source_url":"https://www.ibm.com/support/pages/node/7271097"},{"id":"IBM:7271101","date":"2026-06-12","title":"Security Bulletin: upload filename directly from the multipart Content-Disposition header without sanitization","source_url":"https://www.ibm.com/support/pages/node/7271101"},{"id":"IBM:7276076","date":"2026-06-12","title":"Security Bulletin: IBM TRIRIGA Cross-Site Scripting Vulnerability","source_url":"https://www.ibm.com/support/pages/node/7276076"},{"id":"IBM:7276116","date":"2026-06-12","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed","source_url":"https://www.ibm.com/support/pages/node/7276116"},{"id":"IBM:7276191","date":"2026-06-12","title":"Security Bulletin: Security Vulnerability in Nimbus Jose JWT Affects  IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-53864)","source_url":"https://www.ibm.com/support/pages/node/7276191"},{"id":"RHSA-2026:25503","date":"2026-06-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25503"},{"id":"RHSA-2026:25504","date":"2026-06-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25504"},{"id":"RHSA-2026:25532","date":"2026-06-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25532"},{"id":"RHSA-2026:25535","date":"2026-06-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25535"},{"id":"IBM:7275896","date":"2026-06-11","title":"Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7275896"},{"id":"IBM:7275937","date":"2026-06-11","title":"Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition","source_url":"https://www.ibm.com/support/pages/node/7275937"},{"id":"IBM:7275902","date":"2026-06-11","title":"Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in Eclipse Paho Java client library","source_url":"https://www.ibm.com/support/pages/node/7275902"},{"id":"BSI:WID-SEC-2026-1067","date":"2026-06-11","title":"Apache log4j: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1067"},{"id":"RHSA-2026:25238","date":"2026-06-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25238"},{"id":"RHSA-2026:25245","date":"2026-06-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25245"},{"id":"CERT-EU-SA2026-007","date":"2026-06-10","title":"2026-007 Critical Vulnerability in Windows Netlogon","source_url":"https://cert.europa.eu/publications/security-advisories/2026-007/"},{"id":"CERT-EU-SA2026-008","date":"2026-06-10","title":"2026-008 Critical vulnerabilities in Ivanti Sentry","source_url":"https://cert.europa.eu/publications/security-advisories/2026-008/"},{"id":"IBM:7275772","date":"2026-06-10","title":"Security Bulletin: IBM Cloud Pak for Data System 1.0 is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7275772"},{"id":"IBM:7275767","date":"2026-06-10","title":"Security Bulletin: Vulnerabilities in kernel affects IBM Netezza Appliance","source_url":"https://www.ibm.com/support/pages/node/7275767"},{"id":"IBM:7275786","date":"2026-06-10","title":"Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)","source_url":"https://www.ibm.com/support/pages/node/7275786"},{"id":"IBM:7275805","date":"2026-06-10","title":"Security Bulletin: IBM Maximo Scheduler Optimizer uses path-to-regexp-0.1.12.tgz which is vulnerable to CVE-2026-4867","source_url":"https://www.ibm.com/support/pages/node/7275805"},{"id":"IBM:7275798","date":"2026-06-10","title":"Security Bulletin: IBM Maximo Scheduler Optimizer uses dompurify-3.2.4.tgz which is vulnerable to CVE-2025-15599, CVE-2026-0540","source_url":"https://www.ibm.com/support/pages/node/7275798"},{"id":"IBM:7275782","date":"2026-06-10","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server traditional is affected by remote code execution.","source_url":"https://www.ibm.com/support/pages/node/7275782"},{"id":"IBM:7275783","date":"2026-06-10","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server traditional is affected by remote code execution","source_url":"https://www.ibm.com/support/pages/node/7275783"},{"id":"IBM:7275784","date":"2026-06-10","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by an identity spoofing vulnerability","source_url":"https://www.ibm.com/support/pages/node/7275784"},{"id":"IBM:7275785","date":"2026-06-10","title":"Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by multiple vulnerabilities when using when using Web Server Plug-ins.","source_url":"https://www.ibm.com/support/pages/node/7275785"},{"id":"RHSA-2026:25039","date":"2026-06-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25039"},{"id":"RHSA-2026:25138","date":"2026-06-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25138"},{"id":"RHSA-2026:25143","date":"2026-06-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25143"},{"id":"RHSA-2026:25145","date":"2026-06-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:25145"},{"id":"IBM:7275557","date":"2026-06-09","title":"Security Bulletin: IBM Automation Decision Services for May 2026- Multiple CVEs addressed","source_url":"https://www.ibm.com/support/pages/node/7275557"},{"id":"IBM:7275630","date":"2026-06-09","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in lodash-4.17.21.tgz","source_url":"https://www.ibm.com/support/pages/node/7275630"},{"id":"IBM:7275565","date":"2026-06-09","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to FTP command injection and denial of service due to Node.js module basic-ftp ( CVE-2026-39983 & CVE-2026-41324 )","source_url":"https://www.ibm.com/support/pages/node/7275565"},{"id":"IBM:7275568","date":"2026-06-09","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to xmldom (CVE-2026-41672, CVE-2026-41673, CVE-2026-41674 & CVE-2026-41675)","source_url":"https://www.ibm.com/support/pages/node/7275568"},{"id":"RHSA-2026:24853","date":"2026-06-09","title":"Red Hat Quay 3.15.5","source_url":"https://access.redhat.com/errata/RHSA-2026:24853"},{"id":"IBM:7275566","date":"2026-06-09","title":"Security Bulletin: IBM App Connect Enterprise is vulnerable to Uncontrolled Recursion due to Node.js module yaml (CVE-2026-33532)","source_url":"https://www.ibm.com/support/pages/node/7275566"},{"id":"USN-8403-1","date":"2026-06-08","title":"Kea DHCP vulnerability","source_url":"https://ubuntu.com/security/notices/USN-8403-1"},{"id":"RHSA-2026:24577","date":"2026-06-08","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:24577"},{"id":"RHSA-2026:24009","date":"2026-06-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:24009"},{"id":"RHSA-2026:23992","date":"2026-06-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:23992"},{"id":"RHSA-2026:24000","date":"2026-06-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:24000"},{"id":"RHSA-2026:24014","date":"2026-06-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:24014"},{"id":"RHSA-2026:24069","date":"2026-06-07","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:24069"},{"id":"IBM:7275305","date":"2026-06-06","title":"Security Bulletin: Due to use of spring-boot-autoconfigure-3.5.13.jar, IBM Sterling Connect:Direct Web Services is vulnerable to not perform hostname verification.","source_url":"https://www.ibm.com/support/pages/node/7275305"},{"id":"IBM:7275303","date":"2026-06-06","title":"Security Bulletin: Due to use of spring-webmvc-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable toDenial of Service attacks.","source_url":"https://www.ibm.com/support/pages/node/7275303"},{"id":"IBM:7275304","date":"2026-06-06","title":"Security Bulletin: Due to use of spring-security-core-6.5.9.jar, IBM Sterling Connect:Direct Web Services is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition","source_url":"https://www.ibm.com/support/pages/node/7275304"},{"id":"IBM:7275306","date":"2026-06-06","title":"Security Bulletin: Due to use of spring-web-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable to allows an attacker to consume available disk space.","source_url":"https://www.ibm.com/support/pages/node/7275306"},{"id":"IBM:7273112","date":"2026-06-05","title":"Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in Axios","source_url":"https://www.ibm.com/support/pages/node/7273112"},{"id":"IBM:7275232","date":"2026-06-05","title":"Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)","source_url":"https://www.ibm.com/support/pages/node/7275232"},{"id":"IBM:7275242","date":"2026-06-05","title":"Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in simple-git","source_url":"https://www.ibm.com/support/pages/node/7275242"},{"id":"IBM:7275244","date":"2026-06-05","title":"Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7275244"},{"id":"IBM:7275252","date":"2026-06-05","title":"Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-8644, CVE-2026-9311, CVE-2026-9330 and CVE-2026-9319)","source_url":"https://www.ibm.com/support/pages/node/7275252"},{"id":"IBM:7275256","date":"2026-06-05","title":"Security Bulletin: A vulnerability in the Axios package affects IBM® Db2® Big SQL on IBM Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7275256"},{"id":"IBM:7275270","date":"2026-06-05","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI, Cluster Export Services (CES) S3 or HDFS layer are now fixed in 5.2.3.8 and 6.0.1.0 or higher","source_url":"https://www.ibm.com/support/pages/node/7275270"},{"id":"IBM:7275257","date":"2026-06-05","title":"Security Bulletin: Multiple vulnerabilities in the minimatch package affects IBM® Db2® Big SQL on IBM Cloud Pak for Data.","source_url":"https://www.ibm.com/support/pages/node/7275257"},{"id":"IBM:7275269","date":"2026-06-05","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI, Cloudkit or HDFS layer are now fixed in 5.2.3.7 and 6.0.1.0 or higher","source_url":"https://www.ibm.com/support/pages/node/7275269"},{"id":"IBM:7275236","date":"2026-06-05","title":"Security Bulletin: IBM watsonx.ai on Cloud Pak for Data  is vulnerable to  python-Python-3.12.0b4 (Publicly disclosed vulnerability found by Mend)  due to python pip package ( CVE-2023-5752, PRISMA-2022-0168)","source_url":"https://www.ibm.com/support/pages/node/7275236"},{"id":"IBM:7275286","date":"2026-06-05","title":"Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Container Storage Interface (CSI) are now fixed in Storage Scale Container Native 5.2.3.8 / CSI 2.14.7 and Storage Scale Container Native 6.0.1.0 / CSI 3.1.0 or higher","source_url":"https://www.ibm.com/support/pages/node/7275286"},{"id":"IBM:7275142","date":"2026-06-04","title":"Security Bulletin: IBM Security SOAR is using a component with a known vulnerability  (CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036)","source_url":"https://www.ibm.com/support/pages/node/7275142"},{"id":"IBM:7275143","date":"2026-06-04","title":"Security Bulletin: IBM Security SOAR is using a component with a known vulnerability  (CVE-2026-42264)","source_url":"https://www.ibm.com/support/pages/node/7275143"},{"id":"IBM:7275160","date":"2026-06-04","title":"Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI","source_url":"https://www.ibm.com/support/pages/node/7275160"},{"id":"IBM:7241535","date":"2026-06-04","title":"Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationRuntime and IntegrationServer operands that  use Kafka are vulnerable to loss of confidentiality (CVE-2025-27817, CVE-2025-27818)","source_url":"https://www.ibm.com/support/pages/node/7241535"},{"id":"IBM:7275111","date":"2026-06-04","title":"Security Bulletin: A vulnerability has been identified in the Netty framework used by IBM DevOps Plan (CVE-2025-58057)","source_url":"https://www.ibm.com/support/pages/node/7275111"},{"id":"IBM:7275211","date":"2026-06-04","title":"Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator","source_url":"https://www.ibm.com/support/pages/node/7275211"},{"id":"IBM:7275107","date":"2026-06-04","title":"Security Bulletin: IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty (CVE-2025-67735)","source_url":"https://www.ibm.com/support/pages/node/7275107"},{"id":"IBM:7275125","date":"2026-06-04","title":"Security Bulletin: Security Vulnerabilities have been identified in IBM WebSphere Application Server bundled with IBM Financial Transaction Manager for Check Services","source_url":"https://www.ibm.com/support/pages/node/7275125"},{"id":"RHSA-2026:23262","date":"2026-06-04","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:23262"},{"id":"RHSA-2026:23264","date":"2026-06-04","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:23264"},{"id":"RHSA-2026:23423","date":"2026-06-04","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:23423"},{"id":"IBM:7274207","date":"2026-06-03","title":"Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7274207"},{"id":"RHSA-2026:22714","date":"2026-06-03","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:22714"},{"id":"RHSA-2026:22840","date":"2026-06-03","title":"Red Hat Quay 3.10.22","source_url":"https://access.redhat.com/errata/RHSA-2026:22840"},{"id":"RHSA-2026:22937","date":"2026-06-03","title":"image-builder security update","source_url":"https://access.redhat.com/errata/RHSA-2026:22937"},{"id":"RHSA-2026:22962","date":"2026-06-03","title":"Red Hat Web Terminal Operator 1.13.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:22962"},{"id":"CISCO-SA-WEBEX-XSS-JW3NEQZS","date":"2026-06-03","title":"Cisco Webex Meetings Cross-Site Scripting Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-jw3NeQzS"},{"id":"IBM:7274966","date":"2026-06-03","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an identity spoofing vulnerability","source_url":"https://www.ibm.com/support/pages/node/7274966"},{"id":"IBM:7274967","date":"2026-06-03","title":"Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by remote code execution","source_url":"https://www.ibm.com/support/pages/node/7274967"},{"id":"IBM:7275015","date":"2026-06-03","title":"Security Bulletin: CockroachDB PostgreSQL for IBM VPC is vulnerable to SQL injection when executing special statements (CVE-2026-9837)","source_url":"https://www.ibm.com/support/pages/node/7275015"},{"id":"RHSA-2026:22878","date":"2026-06-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:22878"},{"id":"RHSA-2026:22934","date":"2026-06-03","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:22934"},{"id":"RHSA-2026:22382","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.21.6 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22382"},{"id":"RHSA-2026:22383","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.20.13 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22383"},{"id":"RHSA-2026:22388","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.18.23 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22388"},{"id":"RHSA-2026:22389","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.19.18 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22389"},{"id":"RHSA-2026:22390","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.17.27 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22390"},{"id":"RHSA-2026:22393","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.15.29 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22393"},{"id":"RHSA-2026:22394","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.16.29 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22394"},{"id":"RHSA-2026:22396","date":"2026-06-02","title":"Red Hat OpenShift Data Foundation 4.14.33 security, enhancement & bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:22396"},{"id":"RHSA-2026:22380","date":"2026-06-02","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:22380"},{"id":"RHSA-2026:22465","date":"2026-06-02","title":"Red Hat Quay 3.17.2","source_url":"https://access.redhat.com/errata/RHSA-2026:22465"},{"id":"RHSA-2026:22629","date":"2026-06-02","title":"Red Hat Quay 3.12.18","source_url":"https://access.redhat.com/errata/RHSA-2026:22629"},{"id":"IBM:7274859","date":"2026-06-02","title":"Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-9319)","source_url":"https://www.ibm.com/support/pages/node/7274859"},{"id":"IBM:7274862","date":"2026-06-02","title":"Security Bulletin: Due to use of core-18.2.14.tgz, IBM Sterling Connect:Direct Web Services is affected by cross-site scripting (XSS) issue.","source_url":"https://www.ibm.com/support/pages/node/7274862"},{"id":"IBM:7274872","date":"2026-06-02","title":"Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Node.js","source_url":"https://www.ibm.com/support/pages/node/7274872"},{"id":"IBM:7274697","date":"2026-06-01","title":"Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.","source_url":"https://www.ibm.com/support/pages/node/7274697"},{"id":"IBM:7274738","date":"2026-06-01","title":"Security Bulletin: IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-9319)","source_url":"https://www.ibm.com/support/pages/node/7274738"},{"id":"IBM:7274756","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in golang.org/x/net-v0.48.0","source_url":"https://www.ibm.com/support/pages/node/7274756"},{"id":"IBM:7274757","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in path-to-regexp-0.1.12.tgz","source_url":"https://www.ibm.com/support/pages/node/7274757"},{"id":"IBM:7274758","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in axios-1.12.2.tgz","source_url":"https://www.ibm.com/support/pages/node/7274758"},{"id":"RHSA-2026:22131","date":"2026-06-01","title":"resource-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:22131"},{"id":"BSI:WID-SEC-2026-1121","date":"2026-06-01","title":"CPython: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1121"},{"id":"IBM:7274754","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in flask-3.1.2-py3-none-any.whl","source_url":"https://www.ibm.com/support/pages/node/7274754"},{"id":"IBM:7274755","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lodash-4.17.21.tgz","source_url":"https://www.ibm.com/support/pages/node/7274755"},{"id":"IBM:7274759","date":"2026-06-01","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in WebSphere Application Server Liberty","source_url":"https://www.ibm.com/support/pages/node/7274759"},{"id":"IBM:7274562","date":"2026-05-30","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in axios (CVE-2026-25639)","source_url":"https://www.ibm.com/support/pages/node/7274562"},{"id":"IBM:7274558","date":"2026-05-30","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-57752 and CVE-2025-55173)","source_url":"https://www.ibm.com/support/pages/node/7274558"},{"id":"IBM:7274559","date":"2026-05-30","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-48068)","source_url":"https://www.ibm.com/support/pages/node/7274559"},{"id":"IBM:7274560","date":"2026-05-30","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Lodash and Lodash-es (CVE-2025-13465)","source_url":"https://www.ibm.com/support/pages/node/7274560"},{"id":"IBM:7274561","date":"2026-05-30","title":"Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in pytest (CVE-2025-71176)","source_url":"https://www.ibm.com/support/pages/node/7274561"},{"id":"IBM:7274514","date":"2026-05-29","title":"Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager","source_url":"https://www.ibm.com/support/pages/node/7274514"},{"id":"IBM:7274519","date":"2026-05-29","title":"Security Bulletin: Multiple Vulnerabilities in IBM Aspera Enterprise WebApps","source_url":"https://www.ibm.com/support/pages/node/7274519"},{"id":"IBM:7274547","date":"2026-05-29","title":"Security Bulletin: Multiple Vulnerabilities in IBM Aspera Enterprise WebApps","source_url":"https://www.ibm.com/support/pages/node/7274547"},{"id":"IBM:7274517","date":"2026-05-29","title":"Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service (DoS) due to Apache Commons FileUpload","source_url":"https://www.ibm.com/support/pages/node/7274517"},{"id":"RHSA-2026:20087","date":"2026-05-29","title":"OpenShift Container Platform 4.16.63 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:20087"},{"id":"IBM:7274214","date":"2026-05-27","title":"Security Bulletin: IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator (CVE-2026-7770)","source_url":"https://www.ibm.com/support/pages/node/7274214"},{"id":"RHSA-2026:21333","date":"2026-05-27","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:21333"},{"id":"IBM:7274065","date":"2026-05-26","title":"Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities","source_url":"https://www.ibm.com/support/pages/node/7274065"},{"id":"IBM:7274072","date":"2026-05-26","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using Web Server Plug-ins (CVE-2026-8633, CVE-2026-8620)","source_url":"https://www.ibm.com/support/pages/node/7274072"},{"id":"RHSA-2026:20889","date":"2026-05-26","title":"RHACS 4.10.3 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:20889"},{"id":"RHSA-2026:20938","date":"2026-05-26","title":"RHACS 4.9.7 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:20938"},{"id":"RHSA-2026:21017","date":"2026-05-26","title":"Red Hat Quay 3.14.8","source_url":"https://access.redhat.com/errata/RHSA-2026:21017"},{"id":"RHSA-2026:21182","date":"2026-05-26","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:21182"},{"id":"RHSA-2026:20454","date":"2026-05-25","title":"Kiali 1.73.31 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:20454"},{"id":"RHSA-2026:20455","date":"2026-05-25","title":"Kiali 2.17.8 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:20455"},{"id":"RHSA-2026:20456","date":"2026-05-25","title":"Kiali 2.4.17 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:20456"},{"id":"RHSA-2026:20457","date":"2026-05-25","title":"Kiali 2.11.11 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:20457"},{"id":"RHSA-2026:20460","date":"2026-05-25","title":"Kiali 2.22.4 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:20460"},{"id":"IBM:7273898","date":"2026-05-24","title":"Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring","source_url":"https://www.ibm.com/support/pages/node/7273898"},{"id":"RHSA-2026:20356","date":"2026-05-23","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:20356"},{"id":"IBM:7273764","date":"2026-05-22","title":"Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, CVE-2026-33523, CVE-2026-41080, CVE-2026-33857, CVE-2026-34","source_url":"https://www.ibm.com/support/pages/node/7273764"},{"id":"GHSA-4J38-F5CW-54H7","date":"2026-05-21","title":"Twig: The `spaceless` filter implicitly marks its output as safe","source_url":"https://github.com/advisories/GHSA-4j38-f5cw-54h7"},{"id":"IBM:7273686","date":"2026-05-21","title":"Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a runtime panic condition in go-git [CVE-2026-33762]","source_url":"https://www.ibm.com/support/pages/node/7273686"},{"id":"CISCO-SA-CSW-PNBSA-G8WENUY","date":"2026-05-20","title":"Cisco Secure Workload Unauthorized API Access Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy"},{"id":"RHSA-2026:17598","date":"2026-05-20","title":"OpenShift Container Platform 4.17.54 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:17598"},{"id":"CISCO-SA-BGP-IEFAB-3HB2PWTX","date":"2026-05-20","title":"Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgp-iefab-3hb2pwtx"},{"id":"CISCO-SA-TEBBOT-CMDINJ-WN3YQ5GN","date":"2026-05-20","title":"Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tebbot-cmdinj-wN3yQ5gn"},{"id":"CISCO-SA-TEVACERT-RCE-RMJVEYM5","date":"2026-05-20","title":"Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tevacert-rce-RMJVEym5"},{"id":"IBM:7271877","date":"2026-05-19","title":"Security Bulletin: IBM WebSphere Automation is vulnerable to CVE-2026-35554 which affects the kakfa client library","source_url":"https://www.ibm.com/support/pages/node/7271877"},{"id":"RHSA-2026:19375","date":"2026-05-19","title":"Red Hat Quay 3.16.4","source_url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"id":"CISCO-SA-ASAFTD-PERSIST-CISAED25-03","date":"2026-05-19","title":"Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-CISAED25-03"},{"id":"GHSA-JH9G-8JQW-M2QX","date":"2026-05-19","title":"Open WebUI Exposes System Prompt to Regular User [Non-Admin]","source_url":"https://github.com/advisories/GHSA-jh9g-8jqw-m2qx"},{"id":"IBM:7273424","date":"2026-05-19","title":"Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)","source_url":"https://www.ibm.com/support/pages/node/7273424"},{"id":"RHSA-2026:19358","date":"2026-05-19","title":"freerdp security update","source_url":"https://access.redhat.com/errata/RHSA-2026:19358"},{"id":"GHSA-3653-68V6-RQ57","date":"2026-05-18","title":"HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint","source_url":"https://github.com/advisories/GHSA-3653-68v6-rq57"},{"id":"GHSA-J8P6-96VP-F3R9","date":"2026-05-18","title":"OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages","source_url":"https://github.com/advisories/GHSA-j8p6-96vp-f3r9"},{"id":"IBM:7273327","date":"2026-05-18","title":"Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pyasn1-0.6.2-py3-none-any.whl","source_url":"https://www.ibm.com/support/pages/node/7273327"},{"id":"BSI:WID-SEC-2026-0979","date":"2026-05-18","title":"OpenSSH: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0979"},{"id":"GHSA-FJQ3-FFVR-VM46","date":"2026-05-18","title":"OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure","source_url":"https://github.com/advisories/GHSA-fjq3-ffvr-vm46"},{"id":"CISCO-SA-SDWAN-MLTVNPS2-JXPWM7R","date":"2026-05-14","title":"Cisco Catalyst SD-WAN Manager Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R"},{"id":"CISCO-SA-NSO-DOS-7EGQYC","date":"2026-05-14","title":"Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-dos-7Egqyc"},{"id":"BSI:WID-SEC-2026-1513","date":"2026-05-12","title":"Kiali für Red Hat OpenShift Service Mesh (Axios, Go, Follow-redirects): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1513"},{"id":"RHSA-2026:16476","date":"2026-05-12","title":"Kiali 1.73.30 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:16476"},{"id":"RHSA-2026:16497","date":"2026-05-12","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:16497"},{"id":"RHSA-2026:16532","date":"2026-05-12","title":"Kiali 2.11.10 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:16532"},{"id":"RHSA-2026:16534","date":"2026-05-12","title":"Kiali 2.4.16 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:16534"},{"id":"RHSA-2026:16535","date":"2026-05-12","title":"Kiali 2.17.7 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:16535"},{"id":"RHSA-2026:16542","date":"2026-05-12","title":"Kiali 2.22.3 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:16542"},{"id":"RHSA-2026:16341","date":"2026-05-12","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:16341"},{"id":"BSI:WID-SEC-2026-0062","date":"2026-05-11","title":"Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Datenmanipulation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0062"},{"id":"RHSA-2026:15976","date":"2026-05-11","title":"kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:15976"},{"id":"RHSA-2026:15862","date":"2026-05-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:15862"},{"id":"RHSA-2026:14835","date":"2026-05-07","title":"Satellite 6.18.5 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:14835"},{"id":"RHSA-2026:14873","date":"2026-05-07","title":"Satellite 6.17.8 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:14873"},{"id":"RHSA-2026:14874","date":"2026-05-07","title":"Satellite 6.16.8 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:14874"},{"id":"CERT-EU-SA2026-006","date":"2026-05-06","title":"2026-006 Critical Vulnerability in PAN-OS","source_url":"https://cert.europa.eu/publications/security-advisories/2026-006/"},{"id":"CISCO-SA-IOT-FND-DOS-N8N26Q4U","date":"2026-05-06","title":"Cisco IoT Field Network Director Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iot-fnd-dos-n8N26Q4u"},{"id":"CISCO-SA-UNITY-RCE-SSRF-HENHUASY","date":"2026-05-06","title":"Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy"},{"id":"RHSA-2026:12282","date":"2026-05-06","title":"OpenShift Container Platform 4.12.88 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:12282"},{"id":"RHSA-2026:12283","date":"2026-05-06","title":"OpenShift Container Platform 4.12.88 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:12283"},{"id":"RHSA-2026:14316","date":"2026-05-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"id":"CISCO-SA-ECE-LITE-AGENT-BCGSN8EB","date":"2026-05-06","title":"Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-lite-agent-BCgSN8eb"},{"id":"CISCO-SA-ISE-UNAUTH-BYPASS-UXJRXGPB","date":"2026-05-06","title":"Cisco Identity Services Engine Authentication Bypass Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb"},{"id":"CISCO-SA-PI-UNAUTH-INFODISCL-LFNLGMEY","date":"2026-05-06","title":"Cisco Prime Infrastructure Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmey"},{"id":"CISCO-SA-SG350-SNMP-DOS-GEFZR2TJ","date":"2026-05-06","title":"Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sg350-snmp-dos-GEFZr2Tj"},{"id":"CISCO-SA-SLIDO-IDOR-CPSFMKXN","date":"2026-05-06","title":"Cisco Slido Insecure Direct Object Reference Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-slido-idor-CpsFmKxN"},{"id":"RHSA-2026:14217","date":"2026-05-06","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:14217"},{"id":"RHSA-2026:13791","date":"2026-05-05","title":"RHACS 4.9.6 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:13791"},{"id":"RHSA-2026:13829","date":"2026-05-05","title":"RHACS 4.10.2 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:13829"},{"id":"RHSA-2026:13508","date":"2026-05-04","title":"Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:13508"},{"id":"RHSA-2026:13512","date":"2026-05-04","title":"Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2026:13512"},{"id":"RHSA-2026:13545","date":"2026-05-04","title":"Red Hat Ansible Automation Platform 2.6 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"id":"RHSA-2026:13553","date":"2026-05-04","title":"Red Hat Ansible Automation Platform 2.5 Container Release Update","source_url":"https://access.redhat.com/errata/RHSA-2026:13553"},{"id":"CERT-EU-SA2026-005","date":"2026-04-30","title":"2026-005 High Vulnerability in the Linux Kernel (&#34;Copy Fail&#34;)","source_url":"https://cert.europa.eu/publications/security-advisories/2026-005/"},{"id":"RHSA-2026:11996","date":"2026-04-30","title":"Red Hat Quay 3.9.21","source_url":"https://access.redhat.com/errata/RHSA-2026:11996"},{"id":"RHSA-2026:12220","date":"2026-04-30","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:12220"},{"id":"RHSA-2026:11856","date":"2026-04-29","title":"Red Hat Quay 3.12.17","source_url":"https://access.redhat.com/errata/RHSA-2026:11856"},{"id":"RHSA-2026:11916","date":"2026-04-29","title":"Red Hat Quay 3.10.21","source_url":"https://access.redhat.com/errata/RHSA-2026:11916"},{"id":"RHSA-2026:7885","date":"2026-04-29","title":"Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7885"},{"id":"CISCO-SA-ISE-RCE-TRAVERSAL-8BYNDVRZ","date":"2026-04-28","title":"Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZ"},{"id":"RHSA-2026:11403","date":"2026-04-28","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:11403"},{"id":"RHSA-2026:10754","date":"2026-04-27","title":"RHUI 4.11.4 security update - python-pyOpenSSL","source_url":"https://access.redhat.com/errata/RHSA-2026:10754"},{"id":"RHSA-2026:10999","date":"2026-04-27","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:10999"},{"id":"CISCO-SA-ACI-CLOUDSEC-ENC-VS5WN2SX","date":"2026-04-24","title":"Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-cloudsec-enc-Vs5Wn2sX"},{"id":"RHSA-2026:10135","date":"2026-04-24","title":"Red Hat buildah-2:1.41.8-3.el9_7.src +20: 1 vulnerability addressed","source_url":"https://access.redhat.com/errata/RHSA-2026:10135"},{"id":"RHSA-2026:10130","date":"2026-04-23","title":"RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release","source_url":"https://access.redhat.com/errata/RHSA-2026:10130"},{"id":"RHSA-2026:10175","date":"2026-04-23","title":"Red Hat OpenShift Dev Spaces 3.27.1 Release.","source_url":"https://access.redhat.com/errata/RHSA-2026:10175"},{"id":"RHSA-2026:9742","date":"2026-04-22","title":"Red Hat Developer Hub 1.8.6 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:9742"},{"id":"CISCO-SA-CIMC-CMD-INJ-3HKN3BVT","date":"2026-04-22","title":"Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt"},{"id":"RHSA-2026:8448","date":"2026-04-22","title":"OpenShift Container Platform 4.18.38 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:8448"},{"id":"RHSA-2026:8449","date":"2026-04-22","title":"OpenShift Container Platform 4.18.38 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:8449"},{"id":"RHSA-2026:9695","date":"2026-04-22","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:9695"},{"id":"RHSA-2026:9872","date":"2026-04-22","title":"DevWorkspace Operator 0.40.1 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:9872"},{"id":"BSI:WID-SEC-2026-0244","date":"2026-04-22","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0244"},{"id":"CISCO-SA-CIMC-XSS-A2TKGVAB","date":"2026-04-22","title":"Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVAB"},{"id":"IBM:7270422","date":"2026-04-22","title":"Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-4917, CVE-2026-4918, CVE-2026-4919)","source_url":"https://www.ibm.com/support/pages/node/7270422"},{"id":"RHSA-2026:9385","date":"2026-04-21","title":"Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release","source_url":"https://access.redhat.com/errata/RHSA-2026:9385"},{"id":"RHSA-2026:9388","date":"2026-04-21","title":"Red Hat build of OpenTelemetry 3.9.2 release","source_url":"https://access.redhat.com/errata/RHSA-2026:9388"},{"id":"RHSA-2026:9435","date":"2026-04-21","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:9435"},{"id":"RHSA-2026:9440","date":"2026-04-21","title":"Red Hat OpenShift Service Mesh 3.0.10","source_url":"https://access.redhat.com/errata/RHSA-2026:9440"},{"id":"RHSA-2026:9448","date":"2026-04-21","title":"Red Hat OpenShift Service Mesh 3.1.7","source_url":"https://access.redhat.com/errata/RHSA-2026:9448"},{"id":"RHSA-2026:9453","date":"2026-04-21","title":"Red Hat OpenShift Service Mesh 3.2.4","source_url":"https://access.redhat.com/errata/RHSA-2026:9453"},{"id":"RHSA-2026:9461","date":"2026-04-21","title":"Red Hat OpenShift Service Mesh 3.3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:9461"},{"id":"RHSA-2026:9455","date":"2026-04-21","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:9455"},{"id":"RHSA-2026:9031","date":"2026-04-20","title":"python-urllib3 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:9031"},{"id":"RHSA-2026:9077","date":"2026-04-20","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:9077"},{"id":"RHSA-2026:9097","date":"2026-04-20","title":"runc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:9097"},{"id":"BSI:WID-SEC-2026-0211","date":"2026-04-20","title":"avahi-daemon: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0211"},{"id":"RHSA-2026:8483","date":"2026-04-16","title":"Kiali 1.73.29 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:8483"},{"id":"RHSA-2026:8484","date":"2026-04-16","title":"Kiali 2.4.15 for Red Hat OpenShift Service Mesh 3.0","source_url":"https://access.redhat.com/errata/RHSA-2026:8484"},{"id":"RHSA-2026:8490","date":"2026-04-16","title":"Kiali 2.11.9 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:8490"},{"id":"RHSA-2026:8491","date":"2026-04-16","title":"Kiali 2.17.6 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:8491"},{"id":"RHSA-2026:8493","date":"2026-04-16","title":"Kiali 2.22.2 for Red Hat OpenShift Service Mesh 3.3","source_url":"https://access.redhat.com/errata/RHSA-2026:8493"},{"id":"RHSA-2026:8501","date":"2026-04-16","title":"Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:8501"},{"id":"RHSA-2026:7249","date":"2026-04-16","title":"OpenShift Container Platform 4.19.28 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7249"},{"id":"RHSA-2026:7250","date":"2026-04-16","title":"OpenShift Container Platform 4.19.28 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:7250"},{"id":"RHSA-2026:8433","date":"2026-04-16","title":"OpenShift Compliance Operator bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:8433"},{"id":"RHSA-2026:8437","date":"2026-04-16","title":"RHTAS 1.4 - GA Release of Model Transparency","source_url":"https://access.redhat.com/errata/RHSA-2026:8437"},{"id":"RHSA-2026:8459","date":"2026-04-16","title":"Red Hat thunderbird-0:140.9.1-1.el9_7.src +12: 5 vulnerabilities addressed","source_url":"https://access.redhat.com/errata/RHSA-2026:8459"},{"id":"RHSA-2026:7238","date":"2026-04-16","title":"OpenShift Container Platform 4.13.65 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7238"},{"id":"RHSA-2026:7252","date":"2026-04-16","title":"OpenShift Container Platform 4.13.65 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7252"},{"id":"RHSA-2026:7253","date":"2026-04-16","title":"OpenShift Container Platform 4.13.65 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:7253"},{"id":"RHSA-2026:7245","date":"2026-04-15","title":"OpenShift Container Platform 4.21.10 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7245"},{"id":"RHSA-2026:8229","date":"2026-04-15","title":"Red Hat Advanced Cluster Management for Kubernetes v2.13.6 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:8229"},{"id":"RHSA-2026:8337","date":"2026-04-15","title":"Red Hat Web Terminal Operator 1.14.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:8337"},{"id":"RHSA-2026:8338","date":"2026-04-15","title":"Red Hat Web Terminal Operator 1.13.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:8338"},{"id":"RHSA-2026:7992","date":"2026-04-14","title":"golang-github-openprinting-ipp-usb security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7992"},{"id":"RHSA-2026:8151","date":"2026-04-14","title":"Submariner v0.22 security fixes and container updates","source_url":"https://access.redhat.com/errata/RHSA-2026:8151"},{"id":"RHSA-2026:8167","date":"2026-04-14","title":"Red Hat Web Terminal Operator 1.15.0 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:8167"},{"id":"RHSA-2026:7676","date":"2026-04-13","title":"rhc security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7676"},{"id":"RHSA-2026:7879","date":"2026-04-13","title":"go-toolset:rhel8 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7879"},{"id":"RHSA-2026:7883","date":"2026-04-13","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7883"},{"id":"RHSA-2026:7942","date":"2026-04-13","title":"HawtIO 4.3.1 for Red Hat build of Apache Camel 4 Release and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7942"},{"id":"RHSA-2026:7701","date":"2026-04-13","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7701"},{"id":"RHSA-2026:7634","date":"2026-04-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7634"},{"id":"RHSA-2026:7655","date":"2026-04-11","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7655"},{"id":"RHSA-2026:7378","date":"2026-04-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7378"},{"id":"RHSA-2026:7553","date":"2026-04-10","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7553"},{"id":"RHSA-2026:6554","date":"2026-04-09","title":"OpenShift Container Platform 4.18.37 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:6554"},{"id":"RHSA-2026:6564","date":"2026-04-09","title":"OpenShift Container Platform 4.20.18 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:6564"},{"id":"RHSA-2026:7224","date":"2026-04-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7224"},{"id":"RHSA-2026:7259","date":"2026-04-09","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7259"},{"id":"RHSA-2026:7295","date":"2026-04-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7295"},{"id":"RHSA-2026:6493","date":"2026-04-09","title":"OpenShift Container Platform 4.12.87 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:6493"},{"id":"RHSA-2026:7305","date":"2026-04-09","title":"Red Hat Hardened Images RPMs bug fix and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2026:7305"},{"id":"RHSA-2026:7005","date":"2026-04-08","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2026:7005"},{"id":"RHSA-2026:7110","date":"2026-04-08","title":"RHACS 4.8.10 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:7110"},{"id":"RHSA-2026:7128","date":"2026-04-08","title":"RHACS 4.9.5 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2026:7128"},{"id":"RHSA-2026:6802","date":"2026-04-07","title":"Red Hat Developer Hub 1.9.3 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:6802"},{"id":"BSI:WID-SEC-2026-0782","date":"2026-04-02","title":"WebKitGTK: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0782"},{"id":"BSI:WID-SEC-2026-0904","date":"2026-04-02","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0904"},{"id":"BSI:WID-SEC-2026-0935","date":"2026-04-02","title":"Red Hat Ansible Automation Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0935"},{"id":"BSI:WID-SEC-2026-0957","date":"2026-04-02","title":"IGEL UMS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0957"},{"id":"BSI:WID-SEC-2026-0958","date":"2026-04-02","title":"Devolutions Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0958"},{"id":"BSI:WID-SEC-2026-0959","date":"2026-04-02","title":"VertiGIS FM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0959"},{"id":"BSI:WID-SEC-2026-0960","date":"2026-04-02","title":"HCL BigFix Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0960"},{"id":"RHSA-2026:6428","date":"2026-04-02","title":"Network Observability 1.11.1 for OpenShift","source_url":"https://access.redhat.com/errata/RHSA-2026:6428"},{"id":"BSI:WID-SEC-2024-0699","date":"2026-04-02","title":"Linux-Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0699"},{"id":"BSI:WID-SEC-2024-1451","date":"2026-04-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1451"},{"id":"BSI:WID-SEC-2024-1721","date":"2026-04-02","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1721"},{"id":"BSI:WID-SEC-2024-3134","date":"2026-04-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3134"},{"id":"BSI:WID-SEC-2024-3575","date":"2026-04-02","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3575"},{"id":"BSI:WID-SEC-2026-0479","date":"2026-04-02","title":"Red Hat OpenShift Service Mesh (Kiali): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0479"},{"id":"BSI:WID-SEC-2026-0480","date":"2026-04-02","title":"Red Hat Enterprise Linux (Python Protobuf): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0480"},{"id":"BSI:WID-SEC-2026-0494","date":"2026-04-02","title":"Red Hat Enterprise Linux (389-ds-base): Schwachstelle ermöglicht Codeausführung und potenziell Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0494"},{"id":"BSI:WID-SEC-2026-0556","date":"2026-04-02","title":"vim: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0556"},{"id":"BSI:WID-SEC-2026-0615","date":"2026-04-02","title":"Red Hat Enterprise Linux (nfs-utils): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0615"},{"id":"BSI:WID-SEC-2026-0643","date":"2026-04-02","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0643"},{"id":"BSI:WID-SEC-2026-0704","date":"2026-04-02","title":"Google Cloud Platform Envoy Proxy, Istio und Service Mesh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0704"},{"id":"BSI:WID-SEC-2026-0714","date":"2026-04-02","title":"ImageMagick: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0714"},{"id":"BSI:WID-SEC-2026-0741","date":"2026-04-02","title":"CPython: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0741"},{"id":"BSI:WID-SEC-2026-0744","date":"2026-04-02","title":"ImageMagick: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0744"},{"id":"BSI:WID-SEC-2026-0760","date":"2026-04-02","title":"Xen und Citrix Systems XenServer: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0760"},{"id":"BSI:WID-SEC-2026-0775","date":"2026-04-02","title":"nghttp2: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0775"},{"id":"BSI:WID-SEC-2026-0820","date":"2026-04-02","title":"Checkmk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0820"},{"id":"BSI:WID-SEC-2026-0922","date":"2026-04-02","title":"Docker Desktop Model Runner: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0922"},{"id":"BSI:WID-SEC-2026-0924","date":"2026-04-02","title":"IBM DataPower Gateway: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0924"},{"id":"BSI:WID-SEC-2026-0954","date":"2026-04-02","title":"Drupal (SAML SSO): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0954"},{"id":"BSI:WID-SEC-2026-0955","date":"2026-04-02","title":"Cisco Nexus Dashboard und Insights: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0955"},{"id":"BSI:WID-SEC-2026-0956","date":"2026-04-02","title":"M-Files M-Files Server: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0956"},{"id":"BSI:WID-SEC-2024-3050","date":"2026-04-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3050"},{"id":"BSI:WID-SEC-2026-0499","date":"2026-04-02","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0499"},{"id":"BSI:WID-SEC-2026-0733","date":"2026-04-02","title":"libexpat: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0733"},{"id":"BSI:WID-SEC-2026-0906","date":"2026-04-02","title":"IBM DataPower Gateway: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0906"},{"id":"BSI:WID-SEC-2025-2310","date":"2026-04-01","title":"F5 BIG-IP und F5OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2310"},{"id":"BSI:WID-SEC-2025-2053","date":"2026-04-01","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2053"},{"id":"BSI:WID-SEC-2025-2710","date":"2026-04-01","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2710"},{"id":"BSI:WID-SEC-2025-2747","date":"2026-04-01","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2747"},{"id":"BSI:WID-SEC-2026-0111","date":"2026-04-01","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0111"},{"id":"BSI:WID-SEC-2026-0145","date":"2026-04-01","title":"FreeRDP: Mehrere Schwachstellen ermöglichen DoS und Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0145"},{"id":"BSI:WID-SEC-2026-0711","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0711"},{"id":"BSI:WID-SEC-2026-0727","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0727"},{"id":"BSI:WID-SEC-2026-0743","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0743"},{"id":"BSI:WID-SEC-2026-0929","date":"2026-04-01","title":"IBM Semeru Runtime: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0929"},{"id":"BSI:WID-SEC-2026-0930","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0930"},{"id":"BSI:WID-SEC-2026-0933","date":"2026-04-01","title":"IBM App Connect Enterprise (Hono und Undici): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0933"},{"id":"BSI:WID-SEC-2026-0936","date":"2026-04-01","title":"Joomla CMS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0936"},{"id":"BSI:WID-SEC-2026-0937","date":"2026-04-01","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0937"},{"id":"BSI:WID-SEC-2026-0939","date":"2026-04-01","title":"cPanel cPanel/WHM (perl-YAML-Syck): Schwachstelle ermöglicht Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0939"},{"id":"BSI:WID-SEC-2026-0946","date":"2026-04-01","title":"MediaWiki: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0946"},{"id":"BSI:WID-SEC-2026-0948","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0948"},{"id":"BSI:WID-SEC-2026-0949","date":"2026-04-01","title":"IBM Security Verify Access: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0949"},{"id":"RHSA-2026:5878","date":"2026-04-01","title":"OpenShift Container Platform 4.19.27 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:5878"},{"id":"RHSA-2026:5907","date":"2026-04-01","title":"OpenShift Container Platform 4.17.52 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:5907"},{"id":"BSI:WID-SEC-2025-1265","date":"2026-04-01","title":"Red Hat Enterprise Linux (libxslt): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1265"},{"id":"BSI:WID-SEC-2025-2012","date":"2026-04-01","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2012"},{"id":"BSI:WID-SEC-2025-2045","date":"2026-04-01","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2045"},{"id":"BSI:WID-SEC-2025-2081","date":"2026-04-01","title":"cPanel cPanel/WHM: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2081"},{"id":"BSI:WID-SEC-2025-2166","date":"2026-04-01","title":"OpenSSL und LibreSSL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2166"},{"id":"BSI:WID-SEC-2025-2215","date":"2026-04-01","title":"Ruby: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2215"},{"id":"BSI:WID-SEC-2025-2600","date":"2026-04-01","title":"PostgreSQL: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2600"},{"id":"BSI:WID-SEC-2026-0472","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0472"},{"id":"BSI:WID-SEC-2026-0691","date":"2026-04-01","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0691"},{"id":"BSI:WID-SEC-2026-0735","date":"2026-04-01","title":"Dell Secure Connect Gateway: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0735"},{"id":"BSI:WID-SEC-2026-0878","date":"2026-04-01","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0878"},{"id":"BSI:WID-SEC-2026-0934","date":"2026-04-01","title":"Foxit PDF Editor und Reader: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0934"},{"id":"BSI:WID-SEC-2026-0938","date":"2026-04-01","title":"ZScaler Client Connector: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0938"},{"id":"BSI:WID-SEC-2026-0945","date":"2026-04-01","title":"gdk-pixbuf: Schwachstelle ermöglicht Denial of Service und potenzielle Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0945"},{"id":"BSI:WID-SEC-2026-0947","date":"2026-04-01","title":"CUPS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0947"},{"id":"BSI:WID-SEC-2025-2212","date":"2026-04-01","title":"OpenSSH: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2212"},{"id":"BSI:WID-SEC-2026-0941","date":"2026-04-01","title":"Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0941"},{"id":"BSI:WID-SEC-2026-0943","date":"2026-04-01","title":"IBM DataPower Gateway: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0943"},{"id":"BSI:WID-SEC-2026-0944","date":"2026-04-01","title":"SonicWall Email Security Appliance: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0944"},{"id":"BSI:WID-SEC-2022-1835","date":"2026-03-31","title":"Red Hat Enterprise Linux (python-pillow): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1835"},{"id":"BSI:WID-SEC-2024-0337","date":"2026-03-31","title":"Red Hat Enterprise Linux (Pillow): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0337"},{"id":"BSI:WID-SEC-2025-1569","date":"2026-03-31","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1569"},{"id":"BSI:WID-SEC-2025-1858","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1858"},{"id":"BSI:WID-SEC-2025-1976","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1976"},{"id":"BSI:WID-SEC-2025-2077","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2077"},{"id":"BSI:WID-SEC-2025-2107","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2107"},{"id":"BSI:WID-SEC-2025-2170","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2170"},{"id":"BSI:WID-SEC-2025-2227","date":"2026-03-31","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2227"},{"id":"BSI:WID-SEC-2025-2298","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2298"},{"id":"BSI:WID-SEC-2025-2394","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2394"},{"id":"BSI:WID-SEC-2025-2657","date":"2026-03-31","title":"WebKitGTK: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2657"},{"id":"BSI:WID-SEC-2025-2751","date":"2026-03-31","title":"WebKitGTK: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2751"},{"id":"BSI:WID-SEC-2025-2756","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2756"},{"id":"BSI:WID-SEC-2025-2915","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2915"},{"id":"BSI:WID-SEC-2026-0148","date":"2026-03-31","title":"ImageMagick: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0148"},{"id":"BSI:WID-SEC-2026-0915","date":"2026-03-31","title":"Kyocera Printer: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0915"},{"id":"BSI:WID-SEC-2026-0928","date":"2026-03-31","title":"Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0928"},{"id":"BSI:WID-SEC-2026-0931","date":"2026-03-31","title":"nginx-ui: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0931"},{"id":"BSI:WID-SEC-2026-0932","date":"2026-03-31","title":"PowerDNS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0932"},{"id":"RHSA-2026:6226","date":"2026-03-31","title":"Multicluster Global Hub 1.6.2 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:6226"},{"id":"RHSA-2026:6287","date":"2026-03-31","title":"General availability of the satellite/iop-advisor-frontend-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:6287"},{"id":"RHSA-2026:6292","date":"2026-03-31","title":"General availability of the satellite/iop-insights-engine-rhel9 container image","source_url":"https://access.redhat.com/errata/RHSA-2026:6292"},{"id":"BSI:WID-SEC-2024-0184","date":"2026-03-31","title":"Red Hat Enterprise Linux (pillow): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0184"},{"id":"BSI:WID-SEC-2025-2132","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2132"},{"id":"BSI:WID-SEC-2025-2134","date":"2026-03-31","title":"Red Hat Enterprise Linux (Developer Hub): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2134"},{"id":"BSI:WID-SEC-2025-2251","date":"2026-03-31","title":"Red Hat OpenShift GitOps: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2251"},{"id":"BSI:WID-SEC-2025-2432","date":"2026-03-31","title":"Red Hat Ansible Automation Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2432"},{"id":"BSI:WID-SEC-2025-2658","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2658"},{"id":"BSI:WID-SEC-2025-2759","date":"2026-03-31","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2759"},{"id":"BSI:WID-SEC-2025-2765","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2765"},{"id":"BSI:WID-SEC-2025-2798","date":"2026-03-31","title":"Red Hat OpenShift Service Mesh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2798"},{"id":"BSI:WID-SEC-2025-2904","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2904"},{"id":"BSI:WID-SEC-2025-2914","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2914"},{"id":"BSI:WID-SEC-2026-0009","date":"2026-03-31","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0009"},{"id":"BSI:WID-SEC-2026-0114","date":"2026-03-31","title":"Red Hat OpenShift (github.com/sirupsen/logrus): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0114"},{"id":"BSI:WID-SEC-2026-0164","date":"2026-03-31","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0164"},{"id":"BSI:WID-SEC-2026-0195","date":"2026-03-31","title":"Red Hat Enterprise Linux (pcs / tornado): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0195"},{"id":"BSI:WID-SEC-2026-0199","date":"2026-03-31","title":"Red Hat OpenShift Pipelines Operator (Fulcio): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0199"},{"id":"BSI:WID-SEC-2026-0824","date":"2026-03-31","title":"Python: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0824"},{"id":"BSI:WID-SEC-2026-0916","date":"2026-03-31","title":"Apache Airflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0916"},{"id":"BSI:WID-SEC-2026-0919","date":"2026-03-31","title":"Kyverno: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0919"},{"id":"BSI:WID-SEC-2026-0920","date":"2026-03-31","title":"MongoDB: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0920"},{"id":"BSI:WID-SEC-2026-0921","date":"2026-03-31","title":"Symantec Data Loss Prevention: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0921"},{"id":"BSI:WID-SEC-2026-0923","date":"2026-03-31","title":"libarchive: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0923"},{"id":"BSI:WID-SEC-2026-0925","date":"2026-03-31","title":"Synacor Zimbra: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0925"},{"id":"BSI:WID-SEC-2026-0926","date":"2026-03-31","title":"ESET PROTECT: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0926"},{"id":"BSI:WID-SEC-2026-0927","date":"2026-03-31","title":"NoMachine: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0927"},{"id":"BSI:WID-SEC-2026-0917","date":"2026-03-31","title":"OpenSC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0917"},{"id":"BSI:WID-SEC-2026-0836","date":"2026-03-30","title":"Citrix Systems NetScaler: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0836"},{"id":"BSI:WID-SEC-2024-1703","date":"2026-03-30","title":"docker: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1703"},{"id":"BSI:WID-SEC-2024-3367","date":"2026-03-30","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3367"},{"id":"BSI:WID-SEC-2026-0054","date":"2026-03-30","title":"Red Hat JBoss Enterprise Application Platform (Undertow): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0054"},{"id":"BSI:WID-SEC-2026-0234","date":"2026-03-30","title":"OpenSSL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0234"},{"id":"BSI:WID-SEC-2026-0664","date":"2026-03-30","title":"Adobe Creative Cloud Applikationen: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0664"},{"id":"BSI:WID-SEC-2026-0899","date":"2026-03-30","title":"Grafana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0899"},{"id":"BSI:WID-SEC-2026-0900","date":"2026-03-30","title":"Langflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0900"},{"id":"BSI:WID-SEC-2026-0902","date":"2026-03-30","title":"Fleet: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0902"},{"id":"BSI:WID-SEC-2026-0907","date":"2026-03-30","title":"Red Hat Undertow: Mehrere Schwachstellen ermöglichen Umgehung von Sicherheitsmaßnahmen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0907"},{"id":"BSI:WID-SEC-2026-0912","date":"2026-03-30","title":"Foreman: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0912"},{"id":"BSI:WID-SEC-2026-0913","date":"2026-03-30","title":"Red Hat FUSE (libfuse): Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0913"},{"id":"RHSA-2026:6055","date":"2026-03-30","title":"Red Hat OpenShift Builds 1.7.1","source_url":"https://access.redhat.com/errata/RHSA-2026:6055"},{"id":"RHSA-2026:6174","date":"2026-03-30","title":"Red Hat Developer Hub 1.8.5 release.","source_url":"https://access.redhat.com/errata/RHSA-2026:6174"},{"id":"RHSA-2026:6192","date":"2026-03-30","title":"Red Hat OpenShift Dev Spaces 3.27.0 Release.","source_url":"https://access.redhat.com/errata/RHSA-2026:6192"},{"id":"BSI:WID-SEC-2024-3368","date":"2026-03-30","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3368"},{"id":"BSI:WID-SEC-2026-0607","date":"2026-03-30","title":"CPython: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0607"},{"id":"BSI:WID-SEC-2026-0901","date":"2026-03-30","title":"Perl: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0901"},{"id":"BSI:WID-SEC-2026-0903","date":"2026-03-30","title":"IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0903"},{"id":"BSI:WID-SEC-2026-0908","date":"2026-03-30","title":"Wazuh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0908"},{"id":"BSI:WID-SEC-2026-0909","date":"2026-03-30","title":"Tinyproxy: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0909"},{"id":"BSI:WID-SEC-2026-0910","date":"2026-03-30","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0910"},{"id":"BSI:WID-SEC-2026-0911","date":"2026-03-30","title":"WebKitGTK: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0911"},{"id":"BSI:WID-SEC-2026-0905","date":"2026-03-30","title":"Microsoft Edge: Schwachstelle ermöglicht Manipulation von Dateien und die Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0905"},{"id":"BSI:WID-SEC-2026-0914","date":"2026-03-30","title":"FRRouting Project FRRouting: Schwachstelle ermöglicht Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0914"},{"id":"BSI:WID-SEC-2025-2420","date":"2026-03-27","title":"Apache Tomcat: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2420"},{"id":"BSI:WID-SEC-2026-0818","date":"2026-03-27","title":"etcd: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0818"},{"id":"BSI:WID-SEC-2026-0884","date":"2026-03-27","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0884"},{"id":"BSI:WID-SEC-2026-0885","date":"2026-03-27","title":"n8n: Schwachstelle ermöglicht SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0885"},{"id":"BSI:WID-SEC-2026-0888","date":"2026-03-27","title":"tigervnc: Schwachstelle ermöglicht Offenlegung von Informationen, Manipulation von Dateien, und Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0888"},{"id":"BSI:WID-SEC-2026-0890","date":"2026-03-27","title":"vllm: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0890"},{"id":"BSI:WID-SEC-2026-0895","date":"2026-03-27","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0895"},{"id":"BSI:WID-SEC-2024-1888","date":"2026-03-27","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1888"},{"id":"BSI:WID-SEC-2025-1351","date":"2026-03-27","title":"Red Hat Enterprise Linux (kea): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1351"},{"id":"BSI:WID-SEC-2025-2083","date":"2026-03-27","title":"Ruby: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2083"},{"id":"BSI:WID-SEC-2025-2187","date":"2026-03-27","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2187"},{"id":"BSI:WID-SEC-2025-2193","date":"2026-03-27","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2193"},{"id":"BSI:WID-SEC-2025-2428","date":"2026-03-27","title":"FRRouting (ospf_opaque.c): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2428"},{"id":"BSI:WID-SEC-2025-2706","date":"2026-03-27","title":"Python: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2706"},{"id":"BSI:WID-SEC-2025-2737","date":"2026-03-27","title":"libpng: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2737"},{"id":"BSI:WID-SEC-2025-2741","date":"2026-03-27","title":"cPython: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2741"},{"id":"BSI:WID-SEC-2026-0008","date":"2026-03-27","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0008"},{"id":"BSI:WID-SEC-2026-0756","date":"2026-03-27","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0756"},{"id":"BSI:WID-SEC-2026-0886","date":"2026-03-27","title":"Grafana: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0886"},{"id":"BSI:WID-SEC-2026-0887","date":"2026-03-27","title":"Internet Systems Consortium Kea: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0887"},{"id":"BSI:WID-SEC-2026-0889","date":"2026-03-27","title":"Siemens SICAM: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0889"},{"id":"BSI:WID-SEC-2026-0891","date":"2026-03-27","title":"Dovecot: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0891"},{"id":"BSI:WID-SEC-2026-0892","date":"2026-03-27","title":"WatchGuard Firebox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0892"},{"id":"BSI:WID-SEC-2026-0893","date":"2026-03-27","title":"SmarterTools SmarterMail: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0893"},{"id":"BSI:WID-SEC-2026-0896","date":"2026-03-27","title":"LangChain: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0896"},{"id":"BSI:WID-SEC-2025-2468","date":"2026-03-27","title":"CPython: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2468"},{"id":"BSI:WID-SEC-2025-1481","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1481"},{"id":"BSI:WID-SEC-2025-1757","date":"2026-03-26","title":"Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsmechanismen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1757"},{"id":"BSI:WID-SEC-2025-2051","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2051"},{"id":"BSI:WID-SEC-2025-2246","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2246"},{"id":"BSI:WID-SEC-2025-2249","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2249"},{"id":"BSI:WID-SEC-2025-2340","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2340"},{"id":"BSI:WID-SEC-2025-2886","date":"2026-03-26","title":"Red Hat Enterprise Linux (git-lfs, opentelemetry-collector): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2886"},{"id":"BSI:WID-SEC-2025-2916","date":"2026-03-26","title":"Net-SNMP: Schwachstelle ermöglicht Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2916"},{"id":"BSI:WID-SEC-2026-0497","date":"2026-03-26","title":"Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0497"},{"id":"BSI:WID-SEC-2026-0530","date":"2026-03-26","title":"Drupal Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0530"},{"id":"BSI:WID-SEC-2026-0544","date":"2026-03-26","title":"IBM QRadar SIEM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0544"},{"id":"BSI:WID-SEC-2026-0862","date":"2026-03-26","title":"RealObjects PDFreactor: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0862"},{"id":"BSI:WID-SEC-2026-0864","date":"2026-03-26","title":"OpenBao: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0864"},{"id":"BSI:WID-SEC-2026-0866","date":"2026-03-26","title":"Cisco IOS, Cisco IOS XE und Cisco Secure Firewall Threat Defense: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0866"},{"id":"BSI:WID-SEC-2026-0868","date":"2026-03-26","title":"Langflow: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0868"},{"id":"BSI:WID-SEC-2026-0874","date":"2026-03-26","title":"Cisco IOS und IOS XE Software: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0874"},{"id":"BSI:WID-SEC-2026-0877","date":"2026-03-26","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0877"},{"id":"RHSA-2026:5950","date":"2026-03-26","title":"Red Hat OpenShift Service Mesh 3.1.6","source_url":"https://access.redhat.com/errata/RHSA-2026:5950"},{"id":"RHSA-2026:5968","date":"2026-03-26","title":"Satellite 6.18.4 Async Update","source_url":"https://access.redhat.com/errata/RHSA-2026:5968"},{"id":"BSI:WID-SEC-2024-0591","date":"2026-03-26","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0591"},{"id":"BSI:WID-SEC-2025-1461","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1461"},{"id":"BSI:WID-SEC-2025-1502","date":"2026-03-26","title":"AMD Prozessor: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1502"},{"id":"BSI:WID-SEC-2025-1596","date":"2026-03-26","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service und nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1596"},{"id":"BSI:WID-SEC-2025-1637","date":"2026-03-26","title":"GNU libc: Schwachstelle ermöglicht unspezifischen Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1637"},{"id":"BSI:WID-SEC-2025-1770","date":"2026-03-26","title":"AMD Prozessoren: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1770"},{"id":"BSI:WID-SEC-2025-1862","date":"2026-03-26","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1862"},{"id":"BSI:WID-SEC-2025-1933","date":"2026-03-26","title":"Linux Kernel: Eine Schwachstelle ermöglicht einen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1933"},{"id":"BSI:WID-SEC-2025-2404","date":"2026-03-26","title":"AMD “Zen 5” Prozessoren: Schwachstelle gefährdet Vertraulichkeit und Integrität","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2404"},{"id":"BSI:WID-SEC-2025-2441","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2441"},{"id":"BSI:WID-SEC-2025-2483","date":"2026-03-26","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2483"},{"id":"BSI:WID-SEC-2025-2531","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2531"},{"id":"BSI:WID-SEC-2025-2881","date":"2026-03-26","title":"Red Hat Enterprise Linux (multicluster global hub): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2881"},{"id":"BSI:WID-SEC-2026-0126","date":"2026-03-26","title":"libxml2: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0126"},{"id":"BSI:WID-SEC-2026-0132","date":"2026-03-26","title":"GNU libc: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0132"},{"id":"BSI:WID-SEC-2026-0179","date":"2026-03-26","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0179"},{"id":"BSI:WID-SEC-2026-0198","date":"2026-03-26","title":"Red Hat OpenShift und OpenShift AI (urllib3): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0198"},{"id":"BSI:WID-SEC-2026-0269","date":"2026-03-26","title":"SaltStack Salt: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0269"},{"id":"BSI:WID-SEC-2026-0312","date":"2026-03-26","title":"Drupal (Login Disable): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0312"},{"id":"BSI:WID-SEC-2026-0397","date":"2026-03-26","title":"Drupal Module (UI Icons, Quick Edit): Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0397"},{"id":"BSI:WID-SEC-2026-0405","date":"2026-03-26","title":"Grafana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0405"},{"id":"BSI:WID-SEC-2026-0504","date":"2026-03-26","title":"Mattermost Server und Plugins: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0504"},{"id":"BSI:WID-SEC-2026-0554","date":"2026-03-26","title":"Red Hat Enterprise Linux (udisks): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0554"},{"id":"BSI:WID-SEC-2026-0720","date":"2026-03-26","title":"systemd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0720"},{"id":"BSI:WID-SEC-2026-0867","date":"2026-03-26","title":"IBM InfoSphere Information Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0867"},{"id":"BSI:WID-SEC-2026-0869","date":"2026-03-26","title":"SolarWinds Platform: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0869"},{"id":"BSI:WID-SEC-2026-0871","date":"2026-03-26","title":"IBM Operational Decision Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0871"},{"id":"BSI:WID-SEC-2026-0872","date":"2026-03-26","title":"Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0872"},{"id":"BSI:WID-SEC-2026-0875","date":"2026-03-26","title":"Red Hat Enterprise Linux (ncurses): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0875"},{"id":"BSI:WID-SEC-2026-0876","date":"2026-03-26","title":"Znuny: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0876"},{"id":"BSI:WID-SEC-2026-0879","date":"2026-03-26","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0879"},{"id":"BSI:WID-SEC-2026-0880","date":"2026-03-26","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0880"},{"id":"BSI:WID-SEC-2026-0881","date":"2026-03-26","title":"IBM License Metric Tool: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0881"},{"id":"BSI:WID-SEC-2025-1914","date":"2026-03-26","title":"Linux Kernel: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1914"},{"id":"BSI:WID-SEC-2026-0435","date":"2026-03-26","title":"zlib: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0435"},{"id":"BSI:WID-SEC-2026-0865","date":"2026-03-26","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0865"},{"id":"CERT-EU-SA2026-004","date":"2026-03-25","title":"2026-004 Critical Vulnerability in SharePoint Exploited","source_url":"https://cert.europa.eu/publications/security-advisories/2026-004/"},{"id":"BSI:WID-SEC-2025-1517","date":"2026-03-25","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1517"},{"id":"BSI:WID-SEC-2025-1620","date":"2026-03-25","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1620"},{"id":"BSI:WID-SEC-2026-0168","date":"2026-03-25","title":"Oracle MySQL: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0168"},{"id":"BSI:WID-SEC-2026-0224","date":"2026-03-25","title":"Grafana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0224"},{"id":"BSI:WID-SEC-2026-0280","date":"2026-03-25","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0280"},{"id":"BSI:WID-SEC-2026-0402","date":"2026-03-25","title":"Apple iOS und iPadOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0402"},{"id":"BSI:WID-SEC-2026-0403","date":"2026-03-25","title":"Apple macOS Tahoe, Sequoia und Sonoma: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0403"},{"id":"BSI:WID-SEC-2026-0808","date":"2026-03-25","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0808"},{"id":"BSI:WID-SEC-2026-0837","date":"2026-03-25","title":"Google Chrome: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0837"},{"id":"BSI:WID-SEC-2026-0839","date":"2026-03-25","title":"Ubiquiti UniFi Network Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0839"},{"id":"BSI:WID-SEC-2026-0841","date":"2026-03-25","title":"Langflow: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0841"},{"id":"BSI:WID-SEC-2026-0842","date":"2026-03-25","title":"TIBCO ActiveMatrix: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0842"},{"id":"BSI:WID-SEC-2026-0844","date":"2026-03-25","title":"Hitachi Ops Center: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0844"},{"id":"BSI:WID-SEC-2026-0847","date":"2026-03-25","title":"GitLab: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0847"},{"id":"BSI:WID-SEC-2026-0848","date":"2026-03-25","title":"Apple Safari: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0848"},{"id":"BSI:WID-SEC-2026-0850","date":"2026-03-25","title":"Mozilla Firefox und Mozilla Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0850"},{"id":"BSI:WID-SEC-2026-0851","date":"2026-03-25","title":"IBM InfoSphere Information Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0851"},{"id":"BSI:WID-SEC-2026-0852","date":"2026-03-25","title":"Apple iOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0852"},{"id":"BSI:WID-SEC-2026-0853","date":"2026-03-25","title":"Apple macOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0853"},{"id":"BSI:WID-SEC-2026-0854","date":"2026-03-25","title":"Squid: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0854"},{"id":"BSI:WID-SEC-2026-0856","date":"2026-03-25","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0856"},{"id":"BSI:WID-SEC-2026-0857","date":"2026-03-25","title":"Zabbix: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0857"},{"id":"BSI:WID-SEC-2026-0858","date":"2026-03-25","title":"NATS Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0858"},{"id":"RHSA-2026:5133","date":"2026-03-25","title":"OpenShift Container Platform 4.18.36 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:5133"},{"id":"BSI:WID-SEC-2025-1140","date":"2026-03-25","title":"Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1140"},{"id":"BSI:WID-SEC-2025-1270","date":"2026-03-25","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1270"},{"id":"BSI:WID-SEC-2025-1439","date":"2026-03-25","title":"Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1439"},{"id":"BSI:WID-SEC-2025-1463","date":"2026-03-25","title":"Redis: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1463"},{"id":"BSI:WID-SEC-2025-1613","date":"2026-03-25","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1613"},{"id":"BSI:WID-SEC-2025-1740","date":"2026-03-25","title":"Golang Go: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1740"},{"id":"BSI:WID-SEC-2026-0184","date":"2026-03-25","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0184"},{"id":"BSI:WID-SEC-2026-0194","date":"2026-03-25","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0194"},{"id":"BSI:WID-SEC-2026-0237","date":"2026-03-25","title":"libpng: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0237"},{"id":"BSI:WID-SEC-2026-0301","date":"2026-03-25","title":"IBM App Connect Enterprise: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0301"},{"id":"BSI:WID-SEC-2026-0309","date":"2026-03-25","title":"NGINX OSS und NGINX Plus: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0309"},{"id":"BSI:WID-SEC-2026-0335","date":"2026-03-25","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0335"},{"id":"BSI:WID-SEC-2026-0785","date":"2026-03-25","title":"libarchive: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0785"},{"id":"BSI:WID-SEC-2026-0840","date":"2026-03-25","title":"Harbor: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0840"},{"id":"BSI:WID-SEC-2026-0845","date":"2026-03-25","title":"IBM WebSphere Application Server Liberty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0845"},{"id":"BSI:WID-SEC-2026-0846","date":"2026-03-25","title":"Netty: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0846"},{"id":"BSI:WID-SEC-2026-0855","date":"2026-03-25","title":"Xen: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0855"},{"id":"BSI:WID-SEC-2026-0859","date":"2026-03-25","title":"Apple Xcode: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0859"},{"id":"BSI:WID-SEC-2025-1575","date":"2026-03-25","title":"vim (.tar and .zip): Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1575"},{"id":"BSI:WID-SEC-2025-0427","date":"2026-03-24","title":"Linux Kernel: Schwachstelle ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0427"},{"id":"BSI:WID-SEC-2025-0649","date":"2026-03-24","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0649"},{"id":"BSI:WID-SEC-2025-2927","date":"2026-03-24","title":"NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2927"},{"id":"BSI:WID-SEC-2026-0118","date":"2026-03-24","title":"GNU libc: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0118"},{"id":"BSI:WID-SEC-2026-0501","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0501"},{"id":"BSI:WID-SEC-2026-0542","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0542"},{"id":"BSI:WID-SEC-2026-0557","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0557"},{"id":"BSI:WID-SEC-2026-0573","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0573"},{"id":"BSI:WID-SEC-2026-0586","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0586"},{"id":"BSI:WID-SEC-2026-0778","date":"2026-03-24","title":"Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0778"},{"id":"BSI:WID-SEC-2026-0822","date":"2026-03-24","title":"PTC FlexPLM und Windchill: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0822"},{"id":"BSI:WID-SEC-2026-0829","date":"2026-03-24","title":"VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0829"},{"id":"BSI:WID-SEC-2026-0832","date":"2026-03-24","title":"CODESYS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0832"},{"id":"BSI:WID-SEC-2026-0833","date":"2026-03-24","title":"Ruby on Rails: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0833"},{"id":"BSI:WID-SEC-2026-0834","date":"2026-03-24","title":"Froxlor: Schwachstelle ermöglicht Manipulation von Dateien und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0834"},{"id":"BSI:WID-SEC-2026-0835","date":"2026-03-24","title":"cPanel cPanel/WHM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0835"},{"id":"RHSA-2026:5636","date":"2026-03-24","title":"multicluster engine for Kubernetes v2.7.9 security update","source_url":"https://access.redhat.com/errata/RHSA-2026:5636"},{"id":"BSI:WID-SEC-2025-1965","date":"2026-03-24","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1965"},{"id":"BSI:WID-SEC-2025-2060","date":"2026-03-24","title":"VMware Tanzu Spring Framework und Spring Security: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2060"},{"id":"BSI:WID-SEC-2025-2485","date":"2026-03-24","title":"cURL (wcurl): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2485"},{"id":"BSI:WID-SEC-2026-0306","date":"2026-03-24","title":"Red Hat Enterprise Linux (pyasn1): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0306"},{"id":"BSI:WID-SEC-2026-0639","date":"2026-03-24","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0639"},{"id":"BSI:WID-SEC-2026-0761","date":"2026-03-24","title":"Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0761"},{"id":"BSI:WID-SEC-2026-0770","date":"2026-03-24","title":"Atlassian Jira: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0770"},{"id":"BSI:WID-SEC-2026-0821","date":"2026-03-24","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0821"},{"id":"BSI:WID-SEC-2026-0825","date":"2026-03-24","title":"strongSwan: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0825"},{"id":"BSI:WID-SEC-2026-0826","date":"2026-03-24","title":"Znuny: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0826"},{"id":"BSI:WID-SEC-2026-0827","date":"2026-03-24","title":"binutils: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0827"},{"id":"BSI:WID-SEC-2026-0830","date":"2026-03-24","title":"Red Hat Undertow: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0830"},{"id":"IBM:7266736","date":"2026-03-24","title":"Security Bulletin: IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information (CVE-2026-1014)","source_url":"https://www.ibm.com/support/pages/node/7266736"},{"id":"BSI:WID-SEC-2025-2230","date":"2026-03-24","title":"Python (CPython Zipfile Module): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2230"},{"id":"BSI:WID-SEC-2026-0465","date":"2026-03-24","title":"OpenClaw (safeBins): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0465"},{"id":"BSI:WID-SEC-2026-0828","date":"2026-03-24","title":"MongoDB C Driver: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0828"},{"id":"BSI:WID-SEC-2025-2475","date":"2026-03-23","title":"Apple macOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2475"},{"id":"BSI:WID-SEC-2026-0081","date":"2026-03-23","title":"Microsoft Office Produkte: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0081"},{"id":"BSI:WID-SEC-2026-0734","date":"2026-03-23","title":"GNU InetUtils: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0734"},{"id":"BSI:WID-SEC-2025-1668","date":"2026-03-23","title":"Apple iOS und iPadOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1668"},{"id":"BSI:WID-SEC-2025-1672","date":"2026-03-23","title":"Apple macOS Sequoia, Sonoma und Ventura: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1672"},{"id":"BSI:WID-SEC-2025-2473","date":"2026-03-23","title":"Apple iOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2473"},{"id":"BSI:WID-SEC-2026-0388","date":"2026-03-23","title":"Synacor Zimbra: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0388"},{"id":"BSI:WID-SEC-2026-0427","date":"2026-03-23","title":"Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0427"},{"id":"BSI:WID-SEC-2026-0551","date":"2026-03-23","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0551"},{"id":"BSI:WID-SEC-2026-0812","date":"2026-03-23","title":"MinIO: Schwachstelle ermöglicht Offenlegung von Informationen und Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0812"},{"id":"BSI:WID-SEC-2026-0814","date":"2026-03-23","title":"Linksys MR9600 Router: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0814"},{"id":"BSI:WID-SEC-2026-0815","date":"2026-03-23","title":"MariaDB: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0815"},{"id":"BSI:WID-SEC-2026-0819","date":"2026-03-23","title":"SmarterTools SmarterMail: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0819"},{"id":"BSI:WID-SEC-2026-0823","date":"2026-03-23","title":"Langflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0823"},{"id":"BSI:WID-SEC-2025-1683","date":"2026-03-23","title":"Apple Safari: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1683"},{"id":"BSI:WID-SEC-2025-2608","date":"2026-03-23","title":"Golang Go: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2608"},{"id":"BSI:WID-SEC-2025-2638","date":"2026-03-23","title":"Grub: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2638"},{"id":"BSI:WID-SEC-2026-0279","date":"2026-03-23","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0279"},{"id":"BSI:WID-SEC-2026-0469","date":"2026-03-23","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0469"},{"id":"BSI:WID-SEC-2026-0688","date":"2026-03-23","title":"cPanel cPanel/WHM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0688"},{"id":"BSI:WID-SEC-2026-0738","date":"2026-03-23","title":"Kubernetes: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0738"},{"id":"BSI:WID-SEC-2026-0764","date":"2026-03-23","title":"Grafana Tempo: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0764"},{"id":"BSI:WID-SEC-2026-0769","date":"2026-03-23","title":"Red Hat Enterprise Linux (capstone) und OpenShift (rhcos): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0769"},{"id":"BSI:WID-SEC-2026-0806","date":"2026-03-23","title":"Greenshot: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0806"},{"id":"BSI:WID-SEC-2026-0811","date":"2026-03-23","title":"Uptime Kuma: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0811"},{"id":"BSI:WID-SEC-2026-0813","date":"2026-03-23","title":"PyTorch: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0813"},{"id":"CERT-EU-SA2026-003","date":"2026-03-23","title":"2026-003 Multiple Vulnerabilities in Citrix NetScaler and Citrix ADC","source_url":"https://cert.europa.eu/publications/security-advisories/2026-003/"},{"id":"BSI:WID-SEC-2026-0816","date":"2026-03-23","title":"Apache ActiveMQ Artemis: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0816"},{"id":"BSI:WID-SEC-2026-0747","date":"2026-03-20","title":"Langflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0747"},{"id":"BSI:WID-SEC-2026-0190","date":"2026-03-20","title":"vllm: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0190"},{"id":"BSI:WID-SEC-2026-0490","date":"2026-03-20","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0490"},{"id":"BSI:WID-SEC-2026-0702","date":"2026-03-20","title":"Google Chrome und Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0702"},{"id":"BSI:WID-SEC-2026-0723","date":"2026-03-20","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0723"},{"id":"BSI:WID-SEC-2026-0758","date":"2026-03-20","title":"Canonical Snap: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0758"},{"id":"BSI:WID-SEC-2026-0784","date":"2026-03-20","title":"Ubiquiti UniFi Network Application: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0784"},{"id":"BSI:WID-SEC-2026-0792","date":"2026-03-20","title":"SuiteCRM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0792"},{"id":"BSI:WID-SEC-2026-0793","date":"2026-03-20","title":"Netwrix Password Secure: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0793"},{"id":"BSI:WID-SEC-2026-0794","date":"2026-03-20","title":"Microsoft Azure DevOps, Data Factory and Cloud Shell: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0794"},{"id":"BSI:WID-SEC-2026-0795","date":"2026-03-20","title":"Microsoft 365 Copilot: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0795"},{"id":"BSI:WID-SEC-2026-0797","date":"2026-03-20","title":"VMware Tanzu Spring Security: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0797"},{"id":"BSI:WID-SEC-2026-0799","date":"2026-03-20","title":"VMware Tanzu Spring Boot Actuator: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0799"},{"id":"BSI:WID-SEC-2026-0801","date":"2026-03-20","title":"Kubernetes (ingress-nginx): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und die Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0801"},{"id":"BSI:WID-SEC-2026-0804","date":"2026-03-20","title":"Langflow: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0804"},{"id":"BSI:WID-SEC-2026-0807","date":"2026-03-20","title":"Oracle Fusion Middleware (Identity Manager und Web Services Manager): Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0807"},{"id":"BSI:WID-SEC-2025-2730","date":"2026-03-20","title":"Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2730"},{"id":"BSI:WID-SEC-2025-2884","date":"2026-03-20","title":"QEMU (virtio-crypto): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2884"},{"id":"BSI:WID-SEC-2026-0302","date":"2026-03-20","title":"Red Hat Enterprise Linux (python-wheel): Schwachstelle ermöglicht Privilegieneskalation und Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0302"},{"id":"BSI:WID-SEC-2026-0422","date":"2026-03-20","title":"Mattermost: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0422"},{"id":"BSI:WID-SEC-2026-0482","date":"2026-03-20","title":"libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0482"},{"id":"BSI:WID-SEC-2026-0796","date":"2026-03-20","title":"VMware Tanzu Spring Framework (MVC and WebFlux): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0796"},{"id":"BSI:WID-SEC-2026-0798","date":"2026-03-20","title":"vim: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0798"},{"id":"BSI:WID-SEC-2026-0800","date":"2026-03-20","title":"LogStash: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0800"},{"id":"BSI:WID-SEC-2026-0803","date":"2026-03-20","title":"libarchive: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0803"},{"id":"BSI:WID-SEC-2026-0805","date":"2026-03-20","title":"Kibana: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0805"},{"id":"BSI:WID-SEC-2026-0810","date":"2026-03-20","title":"Atlassian Bamboo Data Center: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0810"},{"id":"BSI:WID-SEC-2026-0507","date":"2026-03-20","title":"util-linux: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0507"},{"id":"BSI:WID-SEC-2025-2911","date":"2026-03-19","title":"Synacor Zimbra: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2911"},{"id":"BSI:WID-SEC-2026-0177","date":"2026-03-19","title":"Atlassian Bamboo, Bitbucket, Confluence und Jira: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0177"},{"id":"BSI:WID-SEC-2026-0546","date":"2026-03-19","title":"Red Hat Enterprise Linux (Valkey): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0546"},{"id":"BSI:WID-SEC-2026-0776","date":"2026-03-19","title":"Budibase: Schwachstelle ermöglicht Umgehung und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0776"},{"id":"BSI:WID-SEC-2026-0777","date":"2026-03-19","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0777"},{"id":"BSI:WID-SEC-2026-0779","date":"2026-03-19","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0779"},{"id":"BSI:WID-SEC-2026-0783","date":"2026-03-19","title":"IBM QRadar SIEM: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0783"},{"id":"BSI:WID-SEC-2026-0787","date":"2026-03-19","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0787"},{"id":"BSI:WID-SEC-2026-0788","date":"2026-03-19","title":"Microsoft Dynamics 365 Customer Engagement: Schwachstelle ermöglicht SQL-Injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0788"},{"id":"BSI:WID-SEC-2026-0789","date":"2026-03-19","title":"Roundcube: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0789"},{"id":"RHSA-2026:4464","date":"2026-03-19","title":"OpenShift Container Platform 4.16.58 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:4464"},{"id":"RHSA-2026:5130","date":"2026-03-19","title":"Kiali 2.17.5 for Red Hat OpenShift Service Mesh 3.2","source_url":"https://access.redhat.com/errata/RHSA-2026:5130"},{"id":"RHSA-2026:5131","date":"2026-03-19","title":"Kiali 2.11.8 for Red Hat OpenShift Service Mesh 3.1","source_url":"https://access.redhat.com/errata/RHSA-2026:5131"},{"id":"RHSA-2026:5132","date":"2026-03-19","title":"Kiali 1.73.28 for Red Hat OpenShift Service Mesh 2.6","source_url":"https://access.redhat.com/errata/RHSA-2026:5132"},{"id":"RHSA-2026:5168","date":"2026-03-19","title":"Red Hat Quay 3.9.19","source_url":"https://access.redhat.com/errata/RHSA-2026:5168"},{"id":"BSI:WID-SEC-2022-2058","date":"2026-03-19","title":"Grub2: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2058"},{"id":"BSI:WID-SEC-2023-1490","date":"2026-03-19","title":"Bouncy Castle: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1490"},{"id":"BSI:WID-SEC-2023-2663","date":"2026-03-19","title":"zlib: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2663"},{"id":"BSI:WID-SEC-2024-1031","date":"2026-03-19","title":"Bouncy Castle: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1031"},{"id":"BSI:WID-SEC-2024-2033","date":"2026-03-19","title":"Red Hat Enterprise Linux (CPython): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2033"},{"id":"BSI:WID-SEC-2025-1405","date":"2026-03-19","title":"FasterXML Jackson: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1405"},{"id":"BSI:WID-SEC-2026-0394","date":"2026-03-19","title":"Keycloak: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0394"},{"id":"BSI:WID-SEC-2026-0508","date":"2026-03-19","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0508"},{"id":"BSI:WID-SEC-2026-0555","date":"2026-03-19","title":"FasterXML Jackson: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0555"},{"id":"BSI:WID-SEC-2026-0565","date":"2026-03-19","title":"FreeType: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0565"},{"id":"BSI:WID-SEC-2026-0579","date":"2026-03-19","title":"Django: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0579"},{"id":"BSI:WID-SEC-2026-0765","date":"2026-03-19","title":"Phoenix Contact FL SWITCH: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0765"},{"id":"BSI:WID-SEC-2026-0766","date":"2026-03-19","title":"Dell integrated Dell Remote Access Controller: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0766"},{"id":"BSI:WID-SEC-2026-0780","date":"2026-03-19","title":"Samba: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0780"},{"id":"BSI:WID-SEC-2026-0781","date":"2026-03-19","title":"Drupal Automated Logout Extension: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0781"},{"id":"BSI:WID-SEC-2025-2897","date":"2026-03-19","title":"Apache log4j: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2897"},{"id":"BSI:WID-SEC-2026-0693","date":"2026-03-19","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0693"},{"id":"BSI:WID-SEC-2026-0786","date":"2026-03-19","title":"xpdf: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0786"},{"id":"BSI:WID-SEC-2026-0791","date":"2026-03-19","title":"Python: Schwachstelle ermöglicht Path Traversal","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0791"},{"id":"BSI:WID-SEC-2022-0262","date":"2026-03-18","title":"Ruby: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0262"},{"id":"BSI:WID-SEC-2022-1141","date":"2026-03-18","title":"QEMU: Schwachstelle ermöglicht Denial of Service und Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1141"},{"id":"BSI:WID-SEC-2026-0438","date":"2026-03-18","title":"Atlassian Bamboo und Confluence (Data Center und Server): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0438"},{"id":"BSI:WID-SEC-2026-0526","date":"2026-03-18","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0526"},{"id":"BSI:WID-SEC-2026-0622","date":"2026-03-18","title":"Keycloak: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0622"},{"id":"BSI:WID-SEC-2026-0762","date":"2026-03-18","title":"Apple iOS, iPadOS und macOS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0762"},{"id":"BSI:WID-SEC-2026-0763","date":"2026-03-18","title":"ConnectWise ScreenConnect: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0763"},{"id":"BSI:WID-SEC-2026-0771","date":"2026-03-18","title":"Wazuh: Mehrere Schwachstellen ermöglichen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0771"},{"id":"BSI:WID-SEC-2026-0772","date":"2026-03-18","title":"IBM App Connect Enterprise (fast-xml-parser): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0772"},{"id":"BSI:WID-SEC-2026-0773","date":"2026-03-18","title":"MongoDB: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0773"},{"id":"RHSA-2026:4434","date":"2026-03-18","title":"OpenShift Container Platform 4.19.26 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2026:4434"},{"id":"RHSA-2026:4435","date":"2026-03-18","title":"OpenShift Container Platform 4.19.26 security and extras update","source_url":"https://access.redhat.com/errata/RHSA-2026:4435"},{"id":"BSI:WID-SEC-2022-0553","date":"2026-03-18","title":"Grub2: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0553"},{"id":"BSI:WID-SEC-2022-1219","date":"2026-03-18","title":"QEMU: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1219"},{"id":"BSI:WID-SEC-2023-1935","date":"2026-03-18","title":"Red Hat Enterprise Linux (Python-requests): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1935"},{"id":"BSI:WID-SEC-2024-3507","date":"2026-03-18","title":"Atlassian Jira Software: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3507"},{"id":"BSI:WID-SEC-2025-2704","date":"2026-03-18","title":"Apache Struts: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2704"},{"id":"BSI:WID-SEC-2026-0064","date":"2026-03-18","title":"Apache Struts (XWork): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0064"},{"id":"BSI:WID-SEC-2026-0416","date":"2026-03-18","title":"Keycloak: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0416"},{"id":"BSI:WID-SEC-2026-0759","date":"2026-03-18","title":"IBM Planning Analytics: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0759"},{"id":"BSI:WID-SEC-2026-0767","date":"2026-03-18","title":"Atlassian Confluence: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0767"},{"id":"BSI:WID-SEC-2026-0768","date":"2026-03-18","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0768"},{"id":"BSI:WID-SEC-2024-3338","date":"2026-03-16","title":"Red Hat OpenShift: Mehrere Schwachstelle","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3338"},{"id":"BSI:WID-SEC-2025-0922","date":"2026-03-16","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0922"},{"id":"BSI:WID-SEC-2025-1050","date":"2026-03-16","title":"Microsoft Windows Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1050"},{"id":"BSI:WID-SEC-2026-0305","date":"2026-03-16","title":"Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0305"},{"id":"BSI:WID-SEC-2026-0728","date":"2026-03-16","title":"Angular: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0728"},{"id":"BSI:WID-SEC-2024-0913","date":"2026-03-16","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0913"},{"id":"BSI:WID-SEC-2024-3089","date":"2026-03-16","title":"Red Hat Enterprise Linux (Cryostat): Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3089"},{"id":"BSI:WID-SEC-2024-3665","date":"2026-03-16","title":"Ruby on Rails: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3665"},{"id":"BSI:WID-SEC-2025-1543","date":"2026-03-16","title":"binutils: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1543"},{"id":"BSI:WID-SEC-2026-0044","date":"2026-03-16","title":"libtasn1: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0044"},{"id":"BSI:WID-SEC-2026-0113","date":"2026-03-16","title":"Red Hat Enterprise Linux (vsftpd): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0113"},{"id":"BSI:WID-SEC-2026-0395","date":"2026-03-16","title":"BusyBox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0395"},{"id":"BSI:WID-SEC-2026-0730","date":"2026-03-16","title":"OpenBSD: Schwachstelle ermöglicht nicht spezifizierten Angriff und potenziell Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0730"},{"id":"BSI:WID-SEC-2026-0731","date":"2026-03-16","title":"NetX: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0731"},{"id":"BSI:WID-SEC-2026-0732","date":"2026-03-16","title":"Microsoft Edge (Android): Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0732"},{"id":"BSI:WID-SEC-2025-0450","date":"2026-03-16","title":"Red Hat OpenShift Service Mesh Containers: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0450"},{"id":"BSI:WID-SEC-2025-2112","date":"2026-03-16","title":"DNSdist: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2112"},{"id":"RHSA-2026:4498","date":"2026-03-12","title":"Logging for Red Hat OpenShift - 6.4.3","source_url":"https://access.redhat.com/errata/RHSA-2026:4498"},{"id":"RHSA-2026:4267","date":"2026-03-11","title":"opentelemetry-collector security update","source_url":"https://access.redhat.com/errata/RHSA-2026:4267"},{"id":"RHSA-2026:4270","date":"2026-03-11","title":"OpenShift Source To Image 1.6.0","source_url":"https://access.redhat.com/errata/RHSA-2026:4270"},{"id":"BSI:WID-SEC-W-2023-2251","date":"2026-03-11","title":"FreeRDP: Mehrere Schwachstellen","source_url":"https://www.freerdp.com/2023/08/31/3_0_0_beta3-release"},{"id":"RHSA-2026:4211","date":"2026-03-10","title":"osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2026:4211"},{"id":"BSI:WID-SEC-2026-0569","date":"2026-03-09","title":"Google Android: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0569"},{"id":"BSI:WID-SEC-2025-1389","date":"2026-03-09","title":"Podman: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1389"},{"id":"BSI:WID-SEC-2025-1974","date":"2026-03-09","title":"Podman: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1974"},{"id":"BSI:WID-SEC-2025-2518","date":"2026-03-09","title":"Red Hat Enterprise Linux (runc): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2518"},{"id":"BSI:WID-SEC-2025-2750","date":"2026-03-09","title":"Apache HTTP Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2750"},{"id":"BSI:WID-SEC-2025-2846","date":"2026-03-09","title":"strongSwan (NetworkManager-Plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2846"},{"id":"BSI:WID-SEC-2026-0326","date":"2026-03-09","title":"Red Hat Self-service automation portal for Ansible Automation Platform: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0326"},{"id":"BSI:WID-SEC-2026-0626","date":"2026-03-09","title":"Flowise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0626"},{"id":"BSI:WID-SEC-2026-0628","date":"2026-03-09","title":"Nextcloud: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0628"},{"id":"BSI:WID-SEC-2025-2365","date":"2026-03-09","title":"Oracle Java SE: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2365"},{"id":"BSI:WID-SEC-2025-2703","date":"2026-03-09","title":"Zabbix: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2703"},{"id":"BSI:WID-SEC-2025-2854","date":"2026-03-09","title":"Roundcube: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2854"},{"id":"BSI:WID-SEC-2026-0265","date":"2026-03-09","title":"expat: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0265"},{"id":"BSI:WID-SEC-2026-0284","date":"2026-03-09","title":"libxml2 (xmllint): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0284"},{"id":"BSI:WID-SEC-2026-0297","date":"2026-03-09","title":"Django: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0297"},{"id":"BSI:WID-SEC-2026-0627","date":"2026-03-09","title":"CoreDNS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0627"},{"id":"BSI:WID-SEC-2026-0629","date":"2026-03-09","title":"Zabbix: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0629"},{"id":"BSI:WID-SEC-2026-0633","date":"2026-03-09","title":"dpkg: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0633"},{"id":"BSI:WID-SEC-2026-0634","date":"2026-03-09","title":"libssh: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0634"},{"id":"BSI:WID-SEC-2026-0636","date":"2026-03-09","title":"Apache Airflow: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0636"},{"id":"BSI:WID-SEC-2026-0637","date":"2026-03-09","title":"UltraVNC: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0637"},{"id":"BSI:WID-SEC-2026-0638","date":"2026-03-09","title":"libpng: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0638"},{"id":"RHSA-2026:4011","date":"2026-03-09","title":"Red Hat kernel-64k-debug-devel-0:5.14.0-570.96.1.el9_6.aarch64 +187: 7 vulnerabilities addressed","source_url":"https://access.redhat.com/errata/RHSA-2026:4011"},{"id":"BSI:WID-SEC-2026-0213","date":"2026-03-09","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0213"},{"id":"BSI:WID-SEC-2026-0357","date":"2026-03-09","title":"Roundcube: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0357"},{"id":"BSI:WID-SEC-2026-0632","date":"2026-03-09","title":"binutils: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0632"},{"id":"BSI:WID-SEC-2026-0635","date":"2026-03-09","title":"Dropbear SSH: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0635"},{"id":"BSI:WID-SEC-2022-0489","date":"2026-03-06","title":"Apple iOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0489"},{"id":"BSI:WID-SEC-2026-0516","date":"2026-03-06","title":"Cisco Catalyst SD-WAN Manager und SD-WAN Controller: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0516"},{"id":"BSI:WID-SEC-2022-1991","date":"2026-03-06","title":"QT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1991"},{"id":"BSI:WID-SEC-2024-1526","date":"2026-03-06","title":"QT: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1526"},{"id":"BSI:WID-SEC-2025-0461","date":"2026-03-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0461"},{"id":"BSI:WID-SEC-2026-0618","date":"2026-03-06","title":"Avira Internet Security Suite: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0618"},{"id":"BSI:WID-SEC-2026-0619","date":"2026-03-06","title":"SmarterTools SmarterMail: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0619"},{"id":"BSI:WID-SEC-2026-0620","date":"2026-03-06","title":"Acronis Cyber Protect und Cyber Protect Cloud Agent: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0620"},{"id":"BSI:WID-SEC-2026-0621","date":"2026-03-06","title":"DriveLock: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0621"},{"id":"BSI:WID-SEC-2026-0623","date":"2026-03-06","title":"Gogs: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0623"},{"id":"BSI:WID-SEC-2026-0625","date":"2026-03-06","title":"Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0625"},{"id":"BSI:WID-SEC-2026-0631","date":"2026-03-06","title":"Apple macOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0631"},{"id":"BSI:WID-SEC-2023-3214","date":"2026-03-06","title":"QT: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3214"},{"id":"BSI:WID-SEC-2024-0434","date":"2026-03-06","title":"less: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0434"},{"id":"BSI:WID-SEC-2024-2067","date":"2026-03-06","title":"Golang Go: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2067"},{"id":"BSI:WID-SEC-2025-0128","date":"2026-03-06","title":"Apache CXF: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0128"},{"id":"BSI:WID-SEC-2025-0362","date":"2026-03-06","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0362"},{"id":"BSI:WID-SEC-2025-1548","date":"2026-03-06","title":"Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1548"},{"id":"BSI:WID-SEC-2026-0034","date":"2026-03-06","title":"Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0034"},{"id":"BSI:WID-SEC-2026-0616","date":"2026-03-06","title":"Microsoft Azure (ACI Confidential Containers): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0616"},{"id":"BSI:WID-SEC-2026-0617","date":"2026-03-06","title":"QT: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0617"},{"id":"BSI:WID-SEC-2026-0624","date":"2026-03-06","title":"FasterXML Jackson: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0624"},{"id":"BSI:WID-SEC-2026-0630","date":"2026-03-06","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0630"},{"id":"BSI:WID-SEC-2025-0172","date":"2026-03-06","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0172"},{"id":"BSI:WID-SEC-2025-2427","date":"2026-03-05","title":"strongSwan (eap-mschapv2 plugin): Schwachstelle ermöglicht Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2427"},{"id":"BSI:WID-SEC-2026-0276","date":"2026-03-05","title":"Rancher Manager und Backup Operator: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0276"},{"id":"BSI:WID-SEC-2026-0287","date":"2026-03-05","title":"vllm: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0287"},{"id":"BSI:WID-SEC-2026-0591","date":"2026-03-05","title":"Apache ActiveMQ/Artemis: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0591"},{"id":"BSI:WID-SEC-2026-0594","date":"2026-03-05","title":"Vaultwarden: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0594"},{"id":"BSI:WID-SEC-2026-0600","date":"2026-03-05","title":"xwiki Blog Application: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0600"},{"id":"BSI:WID-SEC-2026-0601","date":"2026-03-05","title":"Cisco ASA (Adaptive Security Appliance): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0601"},{"id":"BSI:WID-SEC-2026-0603","date":"2026-03-05","title":"Cisco ASA (Adaptive Security Appliance) und Secure Firewall Threat Defense: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0603"},{"id":"BSI:WID-SEC-2026-0609","date":"2026-03-05","title":"ATOSS Staff Efficiency Suite: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0609"},{"id":"BSI:WID-SEC-2025-1423","date":"2026-03-05","title":"libssh: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1423"},{"id":"BSI:WID-SEC-2025-2466","date":"2026-03-05","title":"QEMU e1000 Network Devices: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2466"},{"id":"BSI:WID-SEC-2025-2693","date":"2026-03-05","title":"CUPS: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2693"},{"id":"BSI:WID-SEC-2026-0187","date":"2026-03-05","title":"Red Hat Enterprise Linux (glib): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0187"},{"id":"BSI:WID-SEC-2026-0233","date":"2026-03-05","title":"vllm: Schwachstelle ermöglicht Offenlegung von Informationen und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0233"},{"id":"BSI:WID-SEC-2026-0408","date":"2026-03-05","title":"Red Hat OpenStack Services auf OpenShift (python-eventlet, keystone): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0408"},{"id":"BSI:WID-SEC-2026-0446","date":"2026-03-05","title":"libssh: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0446"},{"id":"BSI:WID-SEC-2026-0520","date":"2026-03-05","title":"Dell PowerScale OneFS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0520"},{"id":"BSI:WID-SEC-2026-0536","date":"2026-03-05","title":"Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0536"},{"id":"BSI:WID-SEC-2026-0568","date":"2026-03-05","title":"Dell PowerScale OneFS: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0568"},{"id":"BSI:WID-SEC-2026-0583","date":"2026-03-05","title":"Aruba ArubaOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0583"},{"id":"BSI:WID-SEC-2026-0592","date":"2026-03-05","title":"Red Hat Developer Hub: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0592"},{"id":"BSI:WID-SEC-2026-0593","date":"2026-03-05","title":"ClamAV: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0593"},{"id":"BSI:WID-SEC-2026-0595","date":"2026-03-05","title":"Ruby: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0595"},{"id":"BSI:WID-SEC-2026-0596","date":"2026-03-05","title":"Checkmk: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0596"},{"id":"BSI:WID-SEC-2026-0598","date":"2026-03-05","title":"Cisco WebEx: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0598"},{"id":"BSI:WID-SEC-2026-0599","date":"2026-03-05","title":"Drupal Extensions: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0599"},{"id":"BSI:WID-SEC-2026-0602","date":"2026-03-05","title":"OpenBSD: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0602"},{"id":"BSI:WID-SEC-2026-0605","date":"2026-03-05","title":"Cisco Secure Firewall Threat Defense: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0605"},{"id":"BSI:WID-SEC-2026-0606","date":"2026-03-05","title":"Checkmk: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0606"},{"id":"BSI:WID-SEC-2026-0608","date":"2026-03-05","title":"Cisco ASA (Adaptive Security Appliance), Secure Firewall Threat Defense, Cisco IOS XE und Cisco Meraki MX: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0608"},{"id":"BSI:WID-SEC-2026-0229","date":"2026-03-05","title":"Citrix Systems XenServer und Xen: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0229"},{"id":"BSI:WID-SEC-2026-0597","date":"2026-03-05","title":"NetApp Data ONTAP: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0597"},{"id":"BSI:WID-SEC-2026-0613","date":"2026-03-05","title":"Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0613"},{"id":"BSI:WID-SEC-2026-0535","date":"2026-03-04","title":"Juniper JUNOS Evolved: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0535"},{"id":"BSI:WID-SEC-2025-2928","date":"2026-03-04","title":"GnuPG: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2928"},{"id":"BSI:WID-SEC-2025-2936","date":"2026-03-04","title":"LangChain: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2936"},{"id":"BSI:WID-SEC-2026-0020","date":"2026-03-04","title":"Google Chrome/Microsoft Edge (Gemini Live Panel): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0020"},{"id":"BSI:WID-SEC-2026-0120","date":"2026-03-04","title":"Red Hat Satellite (satellite/foreman-mcp-server-rhel9): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0120"},{"id":"BSI:WID-SEC-2026-0283","date":"2026-03-04","title":"IBM Tivoli Netcool/OMNIbus: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0283"},{"id":"BSI:WID-SEC-2026-0509","date":"2026-03-04","title":"Trend Micro Apex One: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0509"},{"id":"BSI:WID-SEC-2026-0580","date":"2026-03-04","title":"Proxmox Backup Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0580"},{"id":"BSI:WID-SEC-2026-0581","date":"2026-03-04","title":"Proxmox Virtual Environment: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0581"},{"id":"BSI:WID-SEC-2026-0587","date":"2026-03-04","title":"Trend Micro Apex Central: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0587"},{"id":"BSI:WID-SEC-2026-0588","date":"2026-03-04","title":"Devolutions Server und Remote Desktop Manager: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0588"},{"id":"BSI:WID-SEC-2026-0589","date":"2026-03-04","title":"Pixel Patchday März 2026: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0589"},{"id":"BSI:WID-SEC-2026-0590","date":"2026-03-04","title":"Zammad: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0590"},{"id":"BSI:WID-SEC-2026-0243","date":"2026-03-04","title":"Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0243"},{"id":"BSI:WID-SEC-2026-0492","date":"2026-03-04","title":"Docker Desktop: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0492"},{"id":"BSI:WID-SEC-2026-0582","date":"2026-03-04","title":"Tenable Security Nessus Manager: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0582"},{"id":"BSI:WID-SEC-2026-0584","date":"2026-03-04","title":"IBM MQ: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0584"},{"id":"BSI:WID-SEC-2026-0196","date":"2026-03-04","title":"CPython: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0196"},{"id":"BSI:WID-SEC-2026-0467","date":"2026-03-04","title":"IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0467"},{"id":"BSI:WID-SEC-2026-0585","date":"2026-03-04","title":"MariaDB (Server Audit Plugin): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0585"},{"id":"BSI:WID-SEC-2024-1278","date":"2026-03-03","title":"Android Patchday - June 2024: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1278"},{"id":"BSI:WID-SEC-2024-3579","date":"2026-03-03","title":"Samsung Android: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3579"},{"id":"BSI:WID-SEC-2025-0935","date":"2026-03-03","title":"Red Hat Enterprise Linux (libsoup): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0935"},{"id":"BSI:WID-SEC-2026-0083","date":"2026-03-03","title":"Microsoft Windows : Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0083"},{"id":"BSI:WID-SEC-2026-0149","date":"2026-03-03","title":"Red Hat OpenStack (keystonemiddleware): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0149"},{"id":"BSI:WID-SEC-2026-0572","date":"2026-03-03","title":"Samsung Android: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0572"},{"id":"BSI:WID-SEC-2026-0575","date":"2026-03-03","title":"Pega Platform: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0575"},{"id":"BSI:WID-SEC-2026-0577","date":"2026-03-03","title":"Froxlor: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0577"},{"id":"BSI:WID-SEC-2022-0245","date":"2026-03-03","title":"GNU Mailman: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0245"},{"id":"BSI:WID-SEC-2022-0252","date":"2026-03-03","title":"git: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0252"},{"id":"BSI:WID-SEC-2024-0805","date":"2026-03-03","title":"Grub2: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0805"},{"id":"BSI:WID-SEC-2025-2311","date":"2026-03-03","title":"Red Hat Enterprise Linux (libsoup3): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2311"},{"id":"BSI:WID-SEC-2026-0410","date":"2026-03-03","title":"HAProxy Enterprise, Community und ALOHA (QUIC): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0410"},{"id":"BSI:WID-SEC-2026-0564","date":"2026-03-03","title":"binutils (bfd linker): Mehrere Schwachstellen ermöglichen DoS und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0564"},{"id":"BSI:WID-SEC-2026-0566","date":"2026-03-03","title":"QEMU (qemu-kvm: virtio-snd): Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0566"},{"id":"BSI:WID-SEC-2026-0567","date":"2026-03-03","title":"IBM Storage Scale: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0567"},{"id":"BSI:WID-SEC-2026-0570","date":"2026-03-03","title":"WatchGuard Firebox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0570"},{"id":"BSI:WID-SEC-2026-0571","date":"2026-03-03","title":"OpenBSD: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0571"},{"id":"BSI:WID-SEC-2026-0574","date":"2026-03-03","title":"IBM App Connect Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0574"},{"id":"BSI:WID-SEC-2026-0576","date":"2026-03-03","title":"Samsung Exynos: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0576"},{"id":"BSI:WID-SEC-2026-0563","date":"2026-03-03","title":"Commvault Backup &amp; Recovery: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0563"},{"id":"BSI:WID-SEC-2024-0560","date":"2026-03-02","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0560"},{"id":"BSI:WID-SEC-2025-2110","date":"2026-03-02","title":"LibTiff: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2110"},{"id":"BSI:WID-SEC-2025-2666","date":"2026-03-02","title":"vllm und PyTorch: Schwachstelle ermöglicht DoS und potenzielle Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2666"},{"id":"BSI:WID-SEC-2026-0278","date":"2026-03-02","title":"OpenClaw: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0278"},{"id":"BSI:WID-SEC-2026-0553","date":"2026-03-02","title":"HCL BigFix: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0553"},{"id":"BSI:WID-SEC-2026-0558","date":"2026-03-02","title":"Langflow: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0558"},{"id":"BSI:WID-SEC-2026-0559","date":"2026-03-02","title":"IBM Rational Build Forge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0559"},{"id":"BSI:WID-SEC-2026-0562","date":"2026-03-02","title":"MISP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0562"},{"id":"BSI:WID-SEC-2022-0049","date":"2026-03-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0049"},{"id":"BSI:WID-SEC-2023-2386","date":"2026-03-02","title":"Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2386"},{"id":"BSI:WID-SEC-2024-3474","date":"2026-03-02","title":"avahi: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3474"},{"id":"BSI:WID-SEC-2024-3509","date":"2026-03-02","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3509"},{"id":"BSI:WID-SEC-2024-3756","date":"2026-03-02","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3756"},{"id":"BSI:WID-SEC-2025-0606","date":"2026-03-02","title":"Red Hat Enterprise Linux (Gatekeeper): Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0606"},{"id":"BSI:WID-SEC-2025-0679","date":"2026-03-02","title":"Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0679"},{"id":"BSI:WID-SEC-2025-1385","date":"2026-03-02","title":"libssh: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1385"},{"id":"BSI:WID-SEC-2025-1654","date":"2026-03-02","title":"libTIFF (Tiffmedian, Thumbnail): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1654"},{"id":"BSI:WID-SEC-2025-1998","date":"2026-03-02","title":"ffmpeg: Schwachstelle ermöglicht Codeausführung und potenziell Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1998"},{"id":"BSI:WID-SEC-2025-2652","date":"2026-03-02","title":"Red Hat Satellite: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2652"},{"id":"BSI:WID-SEC-2025-2678","date":"2026-03-02","title":"Foreman: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2678"},{"id":"BSI:WID-SEC-2026-0561","date":"2026-03-02","title":"OpenBSD: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0561"},{"id":"BSI:WID-SEC-2024-3754","date":"2026-03-02","title":"shadow: Schwachstelle ermöglicht Erlangen von Benutzerrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3754"},{"id":"BSI:WID-SEC-2026-0560","date":"2026-03-02","title":"Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0560"},{"id":"BSI:WID-SEC-2026-0231","date":"2026-02-27","title":"GnuPG und Gpg4win: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0231"},{"id":"BSI:WID-SEC-2026-0541","date":"2026-02-27","title":"Google Cloud Platform (Vertex AI Workbench): Schwachstelle ermöglicht Erlangen von Benutzerrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0541"},{"id":"BSI:WID-SEC-2026-0543","date":"2026-02-27","title":"Checkmk: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0543"},{"id":"BSI:WID-SEC-2026-0545","date":"2026-02-27","title":"Kibana: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0545"},{"id":"BSI:WID-SEC-2025-2034","date":"2026-02-27","title":"Erlang/OTP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2034"},{"id":"BSI:WID-SEC-2025-2606","date":"2026-02-27","title":"Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2606"},{"id":"BSI:WID-SEC-2025-2880","date":"2026-02-27","title":"Mattermost Server und Desktop: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2880"},{"id":"BSI:WID-SEC-2026-0072","date":"2026-02-27","title":"Keycloak: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0072"},{"id":"BSI:WID-SEC-2026-0498","date":"2026-02-27","title":"AMD EPYC Series Prozessor: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0498"},{"id":"BSI:WID-SEC-2026-0528","date":"2026-02-27","title":"VMware Workstation und Fusion: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0528"},{"id":"BSI:WID-SEC-2026-0547","date":"2026-02-27","title":"IBM MQ: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0547"},{"id":"BSI:WID-SEC-2026-0549","date":"2026-02-27","title":"VLC für Android: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0549"},{"id":"BSI:WID-SEC-2026-0550","date":"2026-02-27","title":"InetUtils (telnetd): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0550"},{"id":"BSI:WID-SEC-2026-0552","date":"2026-02-27","title":"Fluentd: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0552"},{"id":"BSI:WID-SEC-2025-2685","date":"2026-02-27","title":"Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2685"},{"id":"BSI:WID-SEC-2025-2712","date":"2026-02-27","title":"Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2712"},{"id":"BSI:WID-SEC-2026-0247","date":"2026-02-26","title":"SolarWinds Web Help Desk: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0247"},{"id":"BSI:WID-SEC-2026-0014","date":"2026-02-26","title":"Ubiquiti UniFi Protect: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0014"},{"id":"BSI:WID-SEC-2026-0491","date":"2026-02-26","title":"VMware Aria Operations: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0491"},{"id":"BSI:WID-SEC-2026-0529","date":"2026-02-26","title":"GitLab: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0529"},{"id":"BSI:WID-SEC-2026-0532","date":"2026-02-26","title":"n8n: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0532"},{"id":"BSI:WID-SEC-2026-0533","date":"2026-02-26","title":"IBM License Metric Tool: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0533"},{"id":"BSI:WID-SEC-2026-0534","date":"2026-02-26","title":"Angular SSR und Core: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0534"},{"id":"BSI:WID-SEC-2026-0540","date":"2026-02-26","title":"ServiceNow AI Platform: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0540"},{"id":"CERT-EU-SA2026-002","date":"2026-02-26","title":"2026-002 Multiple Vulnerabilities in Cisco Products","source_url":"https://cert.europa.eu/publications/security-advisories/2026-002/"},{"id":"BSI:WID-SEC-2024-2227","date":"2026-02-26","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2227"},{"id":"BSI:WID-SEC-2025-0991","date":"2026-02-26","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0991"},{"id":"BSI:WID-SEC-2026-0241","date":"2026-02-26","title":"Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0241"},{"id":"BSI:WID-SEC-2026-0488","date":"2026-02-26","title":"BigBlueButton: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0488"},{"id":"BSI:WID-SEC-2026-0512","date":"2026-02-26","title":"Hitachi Configuration Manager: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0512"},{"id":"BSI:WID-SEC-2026-0515","date":"2026-02-26","title":"MongoDB: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0515"},{"id":"BSI:WID-SEC-2026-0517","date":"2026-02-26","title":"IBM WebSphere Application Server und WebSphere Application Server Liberty: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0517"},{"id":"BSI:WID-SEC-2026-0518","date":"2026-02-26","title":"IBM WebSphere Application Server Liberty: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0518"},{"id":"BSI:WID-SEC-2026-0519","date":"2026-02-26","title":"Cisco Application Policy Infrastructure Controller: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0519"},{"id":"BSI:WID-SEC-2026-0521","date":"2026-02-26","title":"Cisco NX-OS Software Link Layer Discovery Protocol: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0521"},{"id":"BSI:WID-SEC-2026-0522","date":"2026-02-26","title":"Cisco FXOS und Unified Computing System (UCS): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0522"},{"id":"BSI:WID-SEC-2026-0523","date":"2026-02-26","title":"Cisco Nexus: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0523"},{"id":"BSI:WID-SEC-2026-0524","date":"2026-02-26","title":"Cisco Unified Computing System (UCS) Manager Software: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0524"},{"id":"BSI:WID-SEC-2026-0527","date":"2026-02-26","title":"cPanel/WHM: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0527"},{"id":"BSI:WID-SEC-2026-0537","date":"2026-02-26","title":"MailPit: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0537"},{"id":"BSI:WID-SEC-2026-0538","date":"2026-02-26","title":"Trellix Endpoint Security: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0538"},{"id":"BSI:WID-SEC-2026-0539","date":"2026-02-26","title":"Octopus Deploy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0539"},{"id":"BSI:WID-SEC-2026-0510","date":"2026-02-26","title":"Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0510"},{"id":"BSI:WID-SEC-2026-0531","date":"2026-02-26","title":"JetBrains TeamCity: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0531"},{"id":"BSI:WID-SEC-2025-0155","date":"2026-02-25","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0155"},{"id":"BSI:WID-SEC-2025-0861","date":"2026-02-25","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0861"},{"id":"BSI:WID-SEC-2025-0932","date":"2026-02-25","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0932"},{"id":"BSI:WID-SEC-2026-0483","date":"2026-02-25","title":"Nvidia Cumulus Linux: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0483"},{"id":"BSI:WID-SEC-2024-0585","date":"2026-02-25","title":"Grafana: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0585"},{"id":"BSI:WID-SEC-2025-0562","date":"2026-02-25","title":"expat: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0562"},{"id":"BSI:WID-SEC-2025-1001","date":"2026-02-25","title":"Intel Prozessoren: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1001"},{"id":"BSI:WID-SEC-2025-1145","date":"2026-02-25","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1145"},{"id":"BSI:WID-SEC-2025-1201","date":"2026-02-25","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1201"},{"id":"BSI:WID-SEC-2025-2023","date":"2026-02-25","title":"cURL: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2023"},{"id":"BSI:WID-SEC-2026-0487","date":"2026-02-25","title":"NATS Server: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0487"},{"id":"BSI:WID-SEC-2026-0495","date":"2026-02-25","title":"SonicWall SonicOS: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0495"},{"id":"BSI:WID-SEC-2026-0500","date":"2026-02-25","title":"Hitachi Configuration Manager: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0500"},{"id":"BSI:WID-SEC-2026-0502","date":"2026-02-25","title":"Apache Superset: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0502"},{"id":"BSI:WID-SEC-2026-0503","date":"2026-02-25","title":"Hitachi Energy RTU500: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0503"},{"id":"BSI:WID-SEC-2026-0505","date":"2026-02-25","title":"Devolutions Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0505"},{"id":"BSI:WID-SEC-2026-0506","date":"2026-02-25","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0506"},{"id":"BSI:WID-SEC-2026-0511","date":"2026-02-25","title":"Hitachi Energy Relion REB500: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0511"},{"id":"BSI:WID-SEC-2026-0513","date":"2026-02-25","title":"WSO2 API Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0513"},{"id":"BSI:WID-SEC-2025-1098","date":"2026-02-25","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1098"},{"id":"BSI:WID-SEC-2025-2672","date":"2026-02-24","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2672"},{"id":"BSI:WID-SEC-2026-0485","date":"2026-02-24","title":"SolarWinds Serv-U: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0485"},{"id":"BSI:WID-SEC-2025-0734","date":"2026-02-24","title":"GIMP: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0734"},{"id":"BSI:WID-SEC-2025-2931","date":"2026-02-24","title":"GIMP: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2931"},{"id":"BSI:WID-SEC-2026-0448","date":"2026-02-24","title":"Red Hat Enterprise Linux (MUNGE): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0448"},{"id":"BSI:WID-SEC-2026-0478","date":"2026-02-24","title":"GIMP: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0478"},{"id":"BSI:WID-SEC-2026-0486","date":"2026-02-24","title":"DrayTek Vigor 300B: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0486"},{"id":"BSI:WID-SEC-2026-0489","date":"2026-02-24","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0489"},{"id":"BSI:WID-SEC-2026-0493","date":"2026-02-24","title":"Apache Airflow: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0493"},{"id":"BSI:WID-SEC-2025-2002","date":"2026-02-24","title":"libssh: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2002"},{"id":"BSI:WID-SEC-2025-1208","date":"2026-02-23","title":"Roundcube: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1208"},{"id":"BSI:WID-SEC-2026-0295","date":"2026-02-23","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0295"},{"id":"BSI:WID-SEC-2026-0474","date":"2026-02-23","title":"Google Cloud Platform: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0474"},{"id":"BSI:WID-SEC-2026-0475","date":"2026-02-23","title":"Microsoft Teams: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0475"},{"id":"BSI:WID-SEC-2026-0476","date":"2026-02-23","title":"D-LINK DWR-M960 Router: Mehrere Schwachstellen ermöglichen Codeausführung und DoS","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0476"},{"id":"BSI:WID-SEC-2025-0625","date":"2026-02-23","title":"Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0625"},{"id":"BSI:WID-SEC-2025-0633","date":"2026-02-23","title":"Gitea: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0633"},{"id":"BSI:WID-SEC-2026-0203","date":"2026-02-23","title":"SmarterTools SmarterMail: Schwachstelle ermöglicht Umgehung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0203"},{"id":"BSI:WID-SEC-2026-0225","date":"2026-02-23","title":"Xen: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0225"},{"id":"BSI:WID-SEC-2026-0473","date":"2026-02-23","title":"Erlang/OTP: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0473"},{"id":"BSI:WID-SEC-2026-0477","date":"2026-02-23","title":"Redis: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0477"},{"id":"BSI:WID-SEC-2025-0545","date":"2026-02-20","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0545"},{"id":"BSI:WID-SEC-2026-0347","date":"2026-02-20","title":"Red Hat Build of Keycloak: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0347"},{"id":"BSI:WID-SEC-2026-0365","date":"2026-02-20","title":"Microsoft Windows Notepad App: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0365"},{"id":"BSI:WID-SEC-2026-0470","date":"2026-02-20","title":"Microsoft Windows Admin Center: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0470"},{"id":"BSI:WID-SEC-2026-0471","date":"2026-02-20","title":"IceWarp EPOS: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0471"},{"id":"BSI:WID-SEC-2025-1470","date":"2026-02-20","title":"Python (CPython): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1470"},{"id":"BSI:WID-SEC-2025-1830","date":"2026-02-20","title":"http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1830"},{"id":"BSI:WID-SEC-2025-1961","date":"2026-02-20","title":"Django (FilteredRelation): Schwachstelle ermöglicht SQL injection","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1961"},{"id":"BSI:WID-SEC-2026-0463","date":"2026-02-20","title":"BigBlueButton: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0463"},{"id":"BSI:WID-SEC-2026-0464","date":"2026-02-20","title":"QEMU: Schwachstelle ermöglicht Denial of Service und die Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0464"},{"id":"BSI:WID-SEC-2026-0466","date":"2026-02-20","title":"Tanium Endpoint Management: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0466"},{"id":"BSI:WID-SEC-2026-0468","date":"2026-02-20","title":"OpenVPN: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0468"},{"id":"BSI:WID-SEC-2026-0437","date":"2026-02-19","title":"Dell RecoverPoint for Virtual Machines: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und potenziell Privilegieneskalation","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0437"},{"id":"BSI:WID-SEC-2022-1354","date":"2026-02-19","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1354"},{"id":"BSI:WID-SEC-2022-2338","date":"2026-02-19","title":"Red Hat Enterprise Linux (Advanced Cluster Management): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2338"},{"id":"BSI:WID-SEC-2023-0328","date":"2026-02-19","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0328"},{"id":"BSI:WID-SEC-2024-3466","date":"2026-02-19","title":"Apache Traffic Server: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3466"},{"id":"BSI:WID-SEC-2024-3619","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3619"},{"id":"BSI:WID-SEC-2025-0544","date":"2026-02-19","title":"Microsoft Azure: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0544"},{"id":"BSI:WID-SEC-2025-0698","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0698"},{"id":"BSI:WID-SEC-2025-1097","date":"2026-02-19","title":"Mozilla Firefox / Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1097"},{"id":"BSI:WID-SEC-2025-1160","date":"2026-02-19","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1160"},{"id":"BSI:WID-SEC-2025-1395","date":"2026-02-19","title":"Mozilla Firefox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1395"},{"id":"BSI:WID-SEC-2025-1623","date":"2026-02-19","title":"Mozilla Firefox , Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1623"},{"id":"BSI:WID-SEC-2025-1866","date":"2026-02-19","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1866"},{"id":"BSI:WID-SEC-2025-2087","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2087"},{"id":"BSI:WID-SEC-2025-2275","date":"2026-02-19","title":"Mozilla Firefox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2275"},{"id":"BSI:WID-SEC-2025-2392","date":"2026-02-19","title":"Internet Systems Consortium BIND: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2392"},{"id":"BSI:WID-SEC-2025-2812","date":"2026-02-19","title":"Mozilla Firefox: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2812"},{"id":"BSI:WID-SEC-2026-0455","date":"2026-02-19","title":"NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von Informationen, Denial of Service und Manipulation von Daten","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0455"},{"id":"BSI:WID-SEC-2026-0456","date":"2026-02-19","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0456"},{"id":"BSI:WID-SEC-2026-0458","date":"2026-02-19","title":"Graylog: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0458"},{"id":"BSI:WID-SEC-2026-0459","date":"2026-02-19","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0459"},{"id":"BSI:WID-SEC-2026-0460","date":"2026-02-19","title":"Microsoft GitHub Enterprise Server: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0460"},{"id":"BSI:WID-SEC-2022-1761","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1761"},{"id":"BSI:WID-SEC-2022-1823","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1823"},{"id":"BSI:WID-SEC-2024-1025","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1025"},{"id":"BSI:WID-SEC-2024-1322","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1322"},{"id":"BSI:WID-SEC-2024-1530","date":"2026-02-19","title":"OpenJPEG: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1530"},{"id":"BSI:WID-SEC-2024-1607","date":"2026-02-19","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1607"},{"id":"BSI:WID-SEC-2025-1055","date":"2026-02-19","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1055"},{"id":"BSI:WID-SEC-2025-1096","date":"2026-02-19","title":"Grafana: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1096"},{"id":"BSI:WID-SEC-2025-1205","date":"2026-02-19","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1205"},{"id":"BSI:WID-SEC-2025-1334","date":"2026-02-19","title":"Apache Commons FileUpload: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1334"},{"id":"BSI:WID-SEC-2025-1578","date":"2026-02-19","title":"Node.js: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1578"},{"id":"BSI:WID-SEC-2025-1846","date":"2026-02-19","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehung von Sicherheitsmechanismen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1846"},{"id":"BSI:WID-SEC-2025-1870","date":"2026-02-19","title":"Keycloak: Schwachstelle ermöglicht Versand beliebiger E-Mails","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1870"},{"id":"BSI:WID-SEC-2025-2074","date":"2026-02-19","title":"Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2074"},{"id":"BSI:WID-SEC-2025-2152","date":"2026-02-19","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2152"},{"id":"BSI:WID-SEC-2025-2489","date":"2026-02-19","title":"cURL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2489"},{"id":"BSI:WID-SEC-2025-2490","date":"2026-02-19","title":"Red Hat OpenShift Container Platform: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2490"},{"id":"BSI:WID-SEC-2025-2566","date":"2026-02-19","title":"Mozilla Firefox und Firefox ESR: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2566"},{"id":"BSI:WID-SEC-2026-0066","date":"2026-02-19","title":"avahi-daemon: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0066"},{"id":"BSI:WID-SEC-2026-0090","date":"2026-02-19","title":"Mozilla Firefox und Thunderbird: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0090"},{"id":"BSI:WID-SEC-2026-0361","date":"2026-02-19","title":"GIMP: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0361"},{"id":"BSI:WID-SEC-2026-0451","date":"2026-02-19","title":"F5 BIG-IP: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0451"},{"id":"BSI:WID-SEC-2026-0453","date":"2026-02-19","title":"Autodesk AutoCAD: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0453"},{"id":"BSI:WID-SEC-2026-0457","date":"2026-02-19","title":"Splunk Splunk Enterprise: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0457"},{"id":"BSI:WID-SEC-2026-0461","date":"2026-02-19","title":"LANCOM LCOS FX: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0461"},{"id":"BSI:WID-SEC-2025-0775","date":"2026-02-19","title":"OpenSSH: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0775"},{"id":"BSI:WID-SEC-2026-0304","date":"2026-02-19","title":"patch: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0304"},{"id":"BSI:WID-SEC-2026-0342","date":"2026-02-19","title":"GIMP: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0342"},{"id":"BSI:WID-SEC-2026-0378","date":"2026-02-19","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0378"},{"id":"BSI:WID-SEC-2026-0450","date":"2026-02-19","title":"Flask: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0450"},{"id":"BSI:WID-SEC-2026-0454","date":"2026-02-19","title":"Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0454"},{"id":"BSI:WID-SEC-2025-2849","date":"2026-02-18","title":"Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2849"},{"id":"BSI:WID-SEC-2025-2858","date":"2026-02-18","title":"Google Chrome/Microsoft Edge: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2858"},{"id":"BSI:WID-SEC-2026-0447","date":"2026-02-18","title":"Moodle: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0447"},{"id":"BSI:WID-SEC-2024-0813","date":"2026-02-18","title":"OpenSSL: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0813"},{"id":"BSI:WID-SEC-2025-2755","date":"2026-02-18","title":"util-linux: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2755"},{"id":"BSI:WID-SEC-2025-2830","date":"2026-02-18","title":"Red Hat Enterprise Linux (libsoup): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2830"},{"id":"BSI:WID-SEC-2025-2887","date":"2026-02-18","title":"PHP: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2887"},{"id":"BSI:WID-SEC-2026-0432","date":"2026-02-18","title":"Arista EOS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0432"},{"id":"BSI:WID-SEC-2026-0441","date":"2026-02-18","title":"OpenClaw: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0441"},{"id":"BSI:WID-SEC-2026-0442","date":"2026-02-18","title":"AMD EPYC Prozessoren: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0442"},{"id":"BSI:WID-SEC-2026-0444","date":"2026-02-18","title":"Dassault SolidWorks eDrawings: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0444"},{"id":"BSI:WID-SEC-2026-0433","date":"2026-02-18","title":"Microsoft Edge: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0433"},{"id":"CERT-EU-SA2026-001","date":"2026-01-30","title":"2026-001 Critical vulnerabilities in Ivanti EPMM","source_url":"https://cert.europa.eu/publications/security-advisories/2026-001/"},{"id":"BSI:WID-SEC-W-2023-2788","date":"2026-01-29","title":"GitLab: Mehrere Schwachstellen","source_url":"https://about.gitlab.com/releases/2023/10/31/security-release-gitlab-16-5-1-16-4-2-16-3-6-released/"},{"id":"RHSA-2026:1332","date":"2026-01-27","title":"fence-agents security update","source_url":"https://access.redhat.com/errata/RHSA-2026:1332"},{"id":"CERT-EU-SA2025-042","date":"2025-12-18","title":"2025-042 Critical Vulnerability in Cisco Secure Email and Web Manager","source_url":"https://cert.europa.eu/publications/security-advisories/2025-042/"},{"id":"BSI:WID-SEC-W-2023-2710","date":"2025-11-24","title":"QT: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.qt.io/blog/security-advisory-loading-invalid-qml-image-source-impacts-qt"},{"id":"BSI:WID-SEC-W-2023-2447","date":"2025-11-23","title":"Ansible: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233810"},{"id":"BSI:WID-SEC-W-2023-2978","date":"2025-11-20","title":"GnuTLS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://seclists.org/oss-sec/2023/q4/226"},{"id":"RHSA-2025:20518","date":"2025-11-11","title":"kernel security update","source_url":"https://access.redhat.com/errata/RHSA-2025:20518"},{"id":"BSI:WID-SEC-W-2023-2503","date":"2025-10-27","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://seclists.org/oss-sec/2023/q3/242"},{"id":"BSI:WID-SEC-W-2023-2917","date":"2025-09-03","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen","source_url":"https://securitydocs.business.xerox.com/wp-content/uploads/2023/11/XRX23-016_FFPSv7-S10_MediaInstall_Nov2023.pdf"},{"id":"BSI:WID-SEC-W-2023-2351","date":"2025-08-20","title":"gcc: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233236"},{"id":"BSI:WID-SEC-W-2023-2625","date":"2025-08-06","title":"IBM QRadar SIEM: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7049133"},{"id":"BSI:WID-SEC-W-2023-2749","date":"2025-08-04","title":"X.Org X11: Mehrere Schwachstellen","source_url":"https://seclists.org/oss-sec/2023/q4/181"},{"id":"BSI:WID-SEC-W-2023-2415","date":"2025-07-20","title":"Oracle Linux: Schwachstelle ermöglicht Denial of Service","source_url":"https://linux.oracle.com/cve/CVE-2023-22024.html"},{"id":"BSI:WID-SEC-W-2023-2516","date":"2025-07-16","title":"Golang Go: Mehre Schwachstellen","source_url":"https://groups.google.com/g/golang-announce/c/2dWHvJVFA9s/m/lF9Srr_QAAAJ"},{"id":"BSI:WID-SEC-W-2023-2543","date":"2025-06-10","title":"GNU libc: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://github.com/advisories/GHSA-m77w-6vjw-wh2f"},{"id":"RHSA-2025:8479","date":"2025-06-04","title":"RHODF-4.16-RHEL-9 security update","source_url":"https://access.redhat.com/errata/RHSA-2025:8479"},{"id":"RHSA-2025:8510","date":"2025-06-04","title":"Migration Toolkit for Containers (MTC) 1.8.7 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2025:8510"},{"id":"BSI:WID-SEC-W-2023-2402","date":"2025-06-03","title":"CUPS: Schwachstelle ermöglicht Codeausführung","source_url":"https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h"},{"id":"RHSA-2025:8384","date":"2025-06-02","title":"Red Hat multicluster global hub 1.4.1 bug fixes and container updates","source_url":"https://access.redhat.com/errata/RHSA-2025:8384"},{"id":"RHSA-2025:8390","date":"2025-06-02","title":"Multicluster Engine for Kubernetes 2.4.9 security updates and bug fixes","source_url":"https://access.redhat.com/errata/RHSA-2025:8390"},{"id":"RHSA-2025:8392","date":"2025-06-02","title":"Red Hat Advanced Cluster Management 2.9.9 bug fixes and container updates","source_url":"https://access.redhat.com/errata/RHSA-2025:8392"},{"id":"BSI:WID-SEC-W-2023-2280","date":"2025-05-29","title":"Golang Go: Mehrere Schwachstellen","source_url":"https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM"},{"id":"RHSA-2025:7624","date":"2025-05-14","title":"Satellite 6 Client Bug Fix Update","source_url":"https://access.redhat.com/errata/RHSA-2025:7624"},{"id":"RHSA-2025:7118","date":"2025-05-13","title":"osbuild and osbuild-composer security update","source_url":"https://access.redhat.com/errata/RHSA-2025:7118"},{"id":"BSI:WID-SEC-W-2023-2598","date":"2025-05-13","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-3rm2-4q4r-254r"},{"id":"RHSA-2025:7256","date":"2025-05-13","title":"git-lfs security update","source_url":"https://access.redhat.com/errata/RHSA-2025:7256"},{"id":"BSI:WID-SEC-W-2023-2787","date":"2025-05-01","title":"Mozilla NSS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238677"},{"id":"BSI:WID-SEC-W-2023-2799","date":"2025-05-01","title":"QEMU: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247283"},{"id":"BSI:WID-SEC-W-2023-2302","date":"2025-04-10","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://gitlab.com/qemu-project/qemu/-/issues/1813"},{"id":"BSI:WID-SEC-W-2023-2500","date":"2025-04-09","title":"OpenSC: Mehrere Schwachstellen","source_url":"https://github.com/OpenSC/OpenSC/wiki/OpenSC-security-advisories"},{"id":"RHSA-2025:2416","date":"2025-03-05","title":"Streams for Apache Kafka 2.9.0 release and security update","source_url":"https://access.redhat.com/errata/RHSA-2025:2416"},{"id":"BSI:WID-SEC-W-2023-2816","date":"2025-02-12","title":"Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Codeausführung","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247629"},{"id":"BSI:WID-SEC-W-2023-2589","date":"2024-12-09","title":"avahi: Mehre Schwachstellen","source_url":"https://seclists.org/oss-sec/2023/q4/59"},{"id":"BSI:WID-SEC-W-2023-2274","date":"2024-12-08","title":"SaltStack Salt: Mehrere Schwachstellen","source_url":"https://saltproject.io/security-announcements/2023-08-10-advisory/"},{"id":"BSI:WID-SEC-W-2023-2769","date":"2024-12-08","title":"SaltStack Salt: Schwachstelle ermöglicht Codeausführung","source_url":"https://saltproject.io/security-announcements/2023-10-27-advisory/"},{"id":"BSI:WID-SEC-W-2023-2263","date":"2024-11-27","title":"FRRouting Project FRRouting: Schwachstelle ermöglicht Denial of Service","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41909"},{"id":"BSI:WID-SEC-W-2023-2748","date":"2024-11-27","title":"FRRouting: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46753"},{"id":"RHSA-2024:10133","date":"2024-11-21","title":"rhc-worker-script security update","source_url":"https://access.redhat.com/errata/RHSA-2024:10133"},{"id":"RHSA-2024:9551","date":"2024-11-13","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2024:9551"},{"id":"RHSA-2024:8974","date":"2024-11-06","title":"Red Hat Advanced Cluster Management 2.12.0 security and bug fixes","source_url":"https://access.redhat.com/errata/RHSA-2024:8974"},{"id":"RHSA-2024:8847","date":"2024-11-05","title":"grafana-pcp security update","source_url":"https://access.redhat.com/errata/RHSA-2024:8847"},{"id":"RHSA-2024:8678","date":"2024-10-30","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2024:8678"},{"id":"BSI:WID-SEC-W-2023-2835","date":"2024-10-23","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://ubuntu.com/security/notices/USN-6572-1"},{"id":"RHSA-2024:8327","date":"2024-10-22","title":"grafana security update","source_url":"https://access.redhat.com/errata/RHSA-2024:8327"},{"id":"BSI:WID-SEC-W-2023-2782","date":"2024-10-15","title":"Red Hat OpenShift distributed tracing: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://bodhi.fedoraproject.org/updates/FEDORA-2024-5ecc250449"},{"id":"BSI:WID-SEC-W-2023-2238","date":"2024-10-14","title":"Broadcom Brocade SANnav: Mehrere Schwachstellen","source_url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22506"},{"id":"BSI:WID-SEC-W-2023-2856","date":"2024-10-14","title":"Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://lists.suse.com/pipermail/sle-security-updates/2023-December/017307.html"},{"id":"BSI:WID-SEC-W-2023-2638","date":"2024-10-03","title":"Zabbix: Mehrere Schwachstellen","source_url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00012.html"},{"id":"RHSA-2024:7184","date":"2024-10-03","title":"OpenShift Container Platform 4.14.38 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:7184"},{"id":"RHSA-2024:7502","date":"2024-10-02","title":"go-toolset:rhel8 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:7502"},{"id":"RHSA-2024:7550","date":"2024-10-02","title":"golang security update","source_url":"https://access.redhat.com/errata/RHSA-2024:7550"},{"id":"BSI:WID-SEC-W-2023-2513","date":"2024-10-01","title":"Hashicorp Vault: Mehrere Schwachstellen","source_url":"https://discuss.hashicorp.com/t/hcsec-2023-29-vault-enterprise-s-sentinel-rgp-policies-allowed-for-cross-namespace-denial-of-service/58653"},{"id":"BSI:WID-SEC-W-2023-2871","date":"2024-10-01","title":"Hashicorp Vault: Schwachstelle ermöglicht Denial of Service","source_url":"https://discuss.hashicorp.com/t/hcsec-2023-33-vault-requests-triggering-policy-checks-may-lead-to-unbounded-memory-consumption/59926"},{"id":"BSI:WID-SEC-W-2023-2268","date":"2024-09-22","title":"Xen: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://xenbits.xen.org/xsa/advisory-437.html"},{"id":"BSI:WID-SEC-W-2023-2736","date":"2024-09-16","title":"IBM WebSphere Application Server: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.ibm.com/support/pages/node/7105533"},{"id":"BSI:WID-SEC-W-2023-2307","date":"2024-09-11","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238312"},{"id":"BSI:WID-SEC-W-2023-2560","date":"2024-09-09","title":"Wireshark: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://bodhi.fedoraproject.org/updates/FEDORA-2024-fdc7dfb959"},{"id":"RHSA-2024:4959","date":"2024-08-07","title":"OpenShift Container Platform 4.14.34 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:4959"},{"id":"BSI:WID-SEC-W-2023-2727","date":"2024-08-05","title":"RabbitMQ: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/advisories/GHSA-mm8h-8587-p46h"},{"id":"BSI:WID-SEC-2024-1718","date":"2024-08-02","title":"Red Hat OpenShift (GitOps): Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1718"},{"id":"RHSA-2024:4677","date":"2024-07-25","title":"OpenShift Container Platform 4.12.61 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2024:4677"},{"id":"BSI:WID-SEC-W-2023-2646","date":"2024-07-17","title":"Grafana: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://grafana.com/blog/2023/10/13/grafana-security-release-new-versions-of-grafana-with-a-medium-severity-security-fix-for-cve-2023-4822/"},{"id":"RHSA-2024:4468","date":"2024-07-16","title":"OpenShift Container Platform 4.16.3 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:4468"},{"id":"BSI:WID-SEC-W-2023-2256","date":"2024-07-11","title":"Python: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://ubuntu.com/security/notices/USN-6547-1"},{"id":"BSI:WID-SEC-W-2023-2314","date":"2024-07-03","title":"GNU libc: Schwachstelle ermöglicht Denial of Service","source_url":"https://ubuntu.com/security/notices/USN-6541-2"},{"id":"BSI:WID-SEC-2024-1521","date":"2024-07-03","title":"TCP/IP Stack: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1521"},{"id":"BSI:WID-SEC-W-2023-2518","date":"2024-07-01","title":"Red Hat JBoss Data Grid: Mehre Schwachstellen","source_url":"https://security.netapp.com/advisory/ntap-20240125-0004/"},{"id":"BSI:WID-SEC-2024-1452","date":"2024-06-25","title":"pgAdmin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1452"},{"id":"RHSA-2024:3494","date":"2024-06-05","title":"OpenShift Container Platform 4.13.43 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:3494"},{"id":"RHSA-2024:3479","date":"2024-05-29","title":"Red Hat OpenStack Platform 16.2 director Operator container images security update","source_url":"https://access.redhat.com/errata/RHSA-2024:3479"},{"id":"BSI:WID-SEC-W-2023-2857","date":"2024-05-22","title":"VLC: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47359"},{"id":"RHSA-2024:2944","date":"2024-05-21","title":"AMQ Broker 7.12.0.OPR.1.GA Container Images release and security update","source_url":"https://access.redhat.com/errata/RHSA-2024:2944"},{"id":"BSI:WID-SEC-W-2023-2353","date":"2024-05-21","title":"Ghostscript: Mehrere Schwachstellen","source_url":"https://ubuntu.com/security/notices/USN-6364-1"},{"id":"BSI:WID-SEC-W-2023-2549","date":"2024-05-15","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://ubuntu.com/security/notices/USN-6607-1"},{"id":"BSI:WID-SEC-W-2023-2818","date":"2024-05-05","title":"MediaWiki: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-qpc2-222x-ppq9"},{"id":"BSI:WID-SEC-W-2023-2234","date":"2024-05-01","title":"HPE Fabric OS: Mehrere Schwachstellen","source_url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22514"},{"id":"BSI:WID-SEC-W-2023-2550","date":"2024-04-29","title":"IBM Rational ClearQuest: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7130904"},{"id":"BSI:WID-SEC-2024-0984","date":"2024-04-28","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0984"},{"id":"RHSA-2024:1891","date":"2024-04-26","title":"OpenShift Container Platform 4.14.22 bug fix and security update","source_url":"https://access.redhat.com/errata/RHSA-2024:1891"},{"id":"BSI:WID-SEC-W-2023-2629","date":"2024-04-21","title":"Red Hat Enterprise Linux (python-reportlab): Schwachstelle ermöglicht Codeausführung","source_url":"https://lists.centos.org/pipermail/centos-announce/2024-February/099226.html"},{"id":"BSI:WID-SEC-W-2023-2821","date":"2024-04-16","title":"Linux Kernel: Mehrere Schwachstellen","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1194"},{"id":"BSI:WID-SEC-W-2023-2645","date":"2024-04-08","title":"Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://ubuntu.com/security/notices/USN-6573-1"},{"id":"IBM:7145534","date":"2024-03-29","title":"Security Bulletin: Updating IBM WebSphere Liberty Profile in Identity Insight for security update","source_url":"https://www.ibm.com/support/pages/node/7145534"},{"id":"IBM:7145433","date":"2024-03-28","title":"Security Bulletin: Updating Java in Identity Insight 9.0.0.1 for security update","source_url":"https://www.ibm.com/support/pages/node/7145433"},{"id":"IBM:7145183","date":"2024-03-25","title":"Security Bulletin: Updating Java in Identity Insight 10.0.0.0 for security update","source_url":"https://www.ibm.com/support/pages/node/7145183"},{"id":"BSI:WID-SEC-W-2023-2859","date":"2024-03-20","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248755"},{"id":"BSI:WID-SEC-W-2023-2380","date":"2024-03-03","title":"Ghostscript: Schwachstelle ermöglicht Codeausführung","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43115"},{"id":"BSI:WID-SEC-W-2023-2685","date":"2024-03-03","title":"Oracle Systems: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixSUNS"},{"id":"BSI:WID-SEC-W-2023-2757","date":"2024-03-03","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm"},{"id":"RHSA-2024:0944","date":"2024-02-28","title":"OpenShift Container Platform 4.14.14 packages and security update","source_url":"https://access.redhat.com/errata/RHSA-2024:0944"},{"id":"RHSA-2024:0948","date":"2024-02-28","title":"OpenShift Container Platform 4.13.35 security update","source_url":"https://access.redhat.com/errata/RHSA-2024:0948"},{"id":"BSI:WID-SEC-W-2023-2387","date":"2024-02-08","title":"Elasticsearch: Schwachstelle ermöglicht Denial of Service","source_url":"https://discuss.elastic.co/t/elasticsearch-8-9-1-7-17-13-security-update/343297"},{"id":"BSI:WID-SEC-W-2023-2270","date":"2024-01-29","title":"Codesys V3: Mehrere Schwachstellen","source_url":"https://search.abb.com/library/Download.aspx?Action=Launch&DocumentID=3ADR011211"},{"id":"BSI:WID-SEC-W-2023-2311","date":"2024-01-22","title":"Wibu-Systems CodeMeter: Schwachstelle ermöglicht Codeausführung und Privilegienerweiterung","source_url":"https://cert-portal.siemens.com/productcert/html/ssa-240541.html"},{"id":"BSI:WID-SEC-W-2023-2740","date":"2024-01-18","title":"VMware vCenter Server: Mehrere Schwachstellen","source_url":"https://www.vmware.com/security/advisories/VMSA-2023-0023.html"},{"id":"BSI:WID-SEC-W-2023-2515","date":"2024-01-18","title":"Linux Kernel: Schwachstelle ermöglicht Codeausführung","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44466"},{"id":"BSI:WID-SEC-W-2023-2368","date":"2024-01-07","title":"IBM Operational Decision Manager: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7032928"},{"id":"BSI:WID-SEC-W-2023-2566","date":"2024-01-01","title":"Red Hat OpenShift: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242173"},{"id":"BSI:WID-SEC-W-2023-2385","date":"2023-12-20","title":"VMware Tanzu Spring Security: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://spring.io/blog/2023/09/18/spring-security-5-8-7-6-0-7-6-1-4-6-2-0-m1-released-including-fixes-for-cve"},{"id":"BSI:WID-SEC-W-2023-2315","date":"2023-12-13","title":"Siemens SIMATIC S7: Schwachstelle ermöglicht Denial of Service","source_url":"https://cert-portal.siemens.com/productcert/html/ssa-711309.html"},{"id":"WID-SEC-W-2023-3124","date":"2023-12-12","title":"FreeBSD OS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3124.json"},{"id":"BSI:WID-SEC-W-2023-2576","date":"2023-12-11","title":"D-LINK DIR-X3260 Router: Mehrere Schwachstellen","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1516/"},{"id":"WID-SEC-W-2023-3096","date":"2023-12-11","title":"D-LINK Router: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3096.json"},{"id":"BSI:WID-SEC-W-2023-2848","date":"2023-12-06","title":"Netgate pfSense: Mehrere Schwachstellen","source_url":"https://docs.netgate.com/downloads/pfSense-SA-23_11.webgui.asc"},{"id":"WID-SEC-W-2023-3070","date":"2023-12-06","title":"Red Hat JBoss A-MQ: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3070.json"},{"id":"WID-SEC-W-2023-3077","date":"2023-12-06","title":"WordPress: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3077.json"},{"id":"WID-SEC-W-2023-3071","date":"2023-12-06","title":"Red Hat JBoss Data Grid: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3071.json"},{"id":"WID-SEC-W-2023-3072","date":"2023-12-06","title":"Red Hat Enterprise Linux(Cryostat): Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3072.json"},{"id":"WID-SEC-W-2023-3073","date":"2023-12-06","title":"Google Android Pixel: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3073.json"},{"id":"WID-SEC-W-2023-3074","date":"2023-12-06","title":"Drupal Group Plugin: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3074.json"},{"id":"WID-SEC-W-2023-3076","date":"2023-12-06","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3076.json"},{"id":"WID-SEC-W-2023-3063","date":"2023-12-05","title":"Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3063.json"},{"id":"BSI:WID-SEC-W-2023-2581","date":"2023-12-05","title":"vim: Schwachstelle ermöglicht Denial of Service","source_url":"https://alas.aws.amazon.com/ALAS-2023-1893.html"},{"id":"WID-SEC-W-2023-3059","date":"2023-12-05","title":"Golang Go: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3059.json"},{"id":"WID-SEC-W-2023-3061","date":"2023-12-05","title":"FreeBSD OS: Schwachstelle ermöglicht Denial of Service","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3061.json"},{"id":"WID-SEC-W-2023-3064","date":"2023-12-05","title":"SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3064.json"},{"id":"WID-SEC-W-2023-3067","date":"2023-12-05","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3067.json"},{"id":"WID-SEC-W-2023-3065","date":"2023-12-05","title":"Cisco ASA (Adaptive Security Appliance): Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3065.json"},{"id":"BSI:WID-SEC-W-2023-2558","date":"2023-12-04","title":"Unify OpenScape Branch und Unify OpenScape SBC: Schwachstelle ermöglicht Umgehung von Sicherheitsmaßnahmen und Ausführung von beliebigem Code mit Root Rechten","source_url":"https://networks.unify.com/security/advisories/OBSO-2310-01.pdf"},{"id":"WID-SEC-W-2023-3038","date":"2023-11-30","title":"Golang Go: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3038.json"},{"id":"WID-SEC-W-2023-3039","date":"2023-11-30","title":"IBM AIX: Schwachstelle ermöglicht Codeausführung","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3039.json"},{"id":"WID-SEC-W-2023-3040","date":"2023-11-30","title":"Notepad++: Mehrere Schwachstellen","source_url":"https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3040.json"},{"id":"BSI:WID-SEC-W-2023-2985","date":"2023-11-28","title":"ownCloud: Mehrere Schwachstellen","source_url":"https://www.greynoise.io/blog/cve-2023-49103-owncloud-critical-vulnerability-quickly-exploited-in-the-wild"},{"id":"BSI:WID-SEC-W-2023-2763","date":"2023-11-27","title":"Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2986","date":"2023-11-21","title":"Elasticsearch: Schwachstelle ermöglicht Denial of Service","source_url":"https://discuss.elastic.co/t/elasticsearch-7-17-14-8-10-3-security-update-esa-2023-24/347708"},{"id":"BSI:WID-SEC-W-2023-2976","date":"2023-11-20","title":"HP Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://support.hp.com/us-en/document/ish_9673365-9673393-16/HPSBHF03884"},{"id":"BSI:WID-SEC-W-2023-2977","date":"2023-11-20","title":"HP Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://support.hp.com/us-en/document/ish_9667621-9667645-16/HPSBHF03862"},{"id":"BSI:WID-SEC-W-2023-2399","date":"2023-11-16","title":"Xen: Schwachstelle ermöglicht Privilegieneskalation, DoS und Offenlegung von Informationen","source_url":"https://lists.suse.com/pipermail/sle-security-updates/2023-November/017058.html"},{"id":"BSI:WID-SEC-W-2023-2937","date":"2023-11-15","title":"Cisco IP Phone: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uipphone-xss-NcmUykqA"},{"id":"BSI:WID-SEC-W-2023-2938","date":"2023-11-15","title":"Cisco Secure Endpoint: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-endpoint-dos-RzOgFKnd"},{"id":"BSI:WID-SEC-W-2023-2939","date":"2023-11-15","title":"Cisco Identity Services Engine (ISE): Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-j-KxpNynR"},{"id":"BSI:WID-SEC-W-2023-2940","date":"2023-11-15","title":"IBM Business Automation Workflow: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://www.ibm.com/support/pages/node/7076337"},{"id":"RHSA-2023:7216","date":"2023-11-15","title":"Red Hat OpenShift Service Mesh Containers for 2.4.5","source_url":"https://access.redhat.com/errata/RHSA-2023:7216"},{"id":"BSI:WID-SEC-W-2023-2913","date":"2023-11-14","title":"Kibana: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://discuss.elastic.co/t/8-11-1-7-17-15-security-update-esa-2023-25/347149"},{"id":"BSI:WID-SEC-W-2023-2915","date":"2023-11-14","title":"Aruba ArubaOS: Mehrere Schwachstellen","source_url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt"},{"id":"BSI:WID-SEC-W-2023-2919","date":"2023-11-14","title":"Adobe Acrobat DC: Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/acrobat/apsb23-54.html"},{"id":"BSI:WID-SEC-W-2023-2921","date":"2023-11-14","title":"Adobe Creative Cloud: Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html"},{"id":"BSI:WID-SEC-W-2023-2622","date":"2023-11-14","title":"Insyde UEFI Firmware: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://support.lenovo.com/de/de/product_security/ps500589-multi-vendor-bios-security-vulnerabilities-november-2023"},{"id":"BSI:WID-SEC-W-2023-2661","date":"2023-11-14","title":"AMD Radeon: Schwachstelle ermöglicht Codeausführung","source_url":"https://support.lenovo.com/us/en/product_security/ps500586-amd-radeon-graphics-kernel-driver-privilege-management-vulnerability"},{"id":"BSI:WID-SEC-W-2023-2910","date":"2023-11-14","title":"Sophos Unified Threat Management (UTM) Software: Mehrere Schwachstellen","source_url":"https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-7-mr18-9-718-released"},{"id":"BSI:WID-SEC-W-2023-2911","date":"2023-11-14","title":"Adobe Photoshop: Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/photoshop/apsb23-56.html"},{"id":"BSI:WID-SEC-W-2023-2914","date":"2023-11-14","title":"Lenovo Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00961.html"},{"id":"BSI:WID-SEC-W-2023-2918","date":"2023-11-14","title":"Zoom Video Communications Zoom Client: Mehrere Schwachstellen","source_url":"https://explore.zoom.us/en/trust/security/security-bulletin/"},{"id":"BSI:WID-SEC-W-2023-2920","date":"2023-11-14","title":"Adobe RoboHelp: Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html"},{"id":"BSI:WID-SEC-W-2023-2922","date":"2023-11-14","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2024:0408"},{"id":"RHSA-2023:6938","date":"2023-11-14","title":"container-tools:4.0 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:6938"},{"id":"RHSA-2023:6939","date":"2023-11-14","title":"container-tools:rhel8 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:6939"},{"id":"RHSA-2023:7058","date":"2023-11-14","title":"rhc security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2023:7058"},{"id":"BSI:WID-SEC-W-2023-2768","date":"2023-11-13","title":"memcached: Mehrere Schwachstellen ermöglichen nichtspezifizierten Angriff","source_url":"https://ubuntu.com/security/notices/USN-6476-1"},{"id":"BSI:WID-SEC-W-2023-2673","date":"2023-11-12","title":"Oracle Database Server: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7070736"},{"id":"BSI:WID-SEC-W-2023-2875","date":"2023-11-12","title":"Microsoft Edge: Mehrere Schwachstellen","source_url":"https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-eca2daf875"},{"id":"BSI:WID-SEC-W-2023-2605","date":"2023-11-09","title":"Citrix Systems ADC: Mehrere Schwachstellen","source_url":"https://www.mandiant.com/resources/blog/remediation-netscaler-adc-gateway-cve-2023-4966"},{"id":"BSI:WID-SEC-W-2023-2870","date":"2023-11-09","title":"SysAid Technologies Ltd SysAid: Schwachstelle ermöglicht Codeausführung","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47246"},{"id":"BSI:WID-SEC-W-2023-2735","date":"2023-11-09","title":"Xming: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"http://linux.oracle.com/errata/ELSA-2023-6802.html"},{"id":"BSI:WID-SEC-W-2023-2869","date":"2023-11-09","title":"Netgate pfSense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.esecforte.com/cve-2023-29975-unverified-password-changed/"},{"id":"BSI:WID-SEC-W-2023-2874","date":"2023-11-09","title":"Foxit PDF Editor (Mac): Mehrere Schwachstellen","source_url":"https://www.foxit.com/support/security-bulletins.html?Security+update+available+in+Foxit+PDF+Editor+for+Mac+13.0.12023-11-08+00%3A00%3A00"},{"id":"BSI:WID-SEC-W-2023-2775","date":"2023-11-08","title":"Atlassian Confluence: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html"},{"id":"BSI:WID-SEC-W-2023-2862","date":"2023-11-08","title":"Red Hat Enterprise Linux: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2023:6812"},{"id":"BSI:WID-SEC-W-2023-2868","date":"2023-11-08","title":"Veeam ONE: Mehrere Schwachstellen","source_url":"https://www.veeam.com/kb4508"},{"id":"BSI:WID-SEC-W-2023-2834","date":"2023-11-08","title":"Norton Antivirus: Schwachstelle ermöglicht die Erweiterung von Privilegien","source_url":"https://support.norton.com/sp/static/external/tools/security-advisories.html"},{"id":"BSI:WID-SEC-W-2023-2849","date":"2023-11-08","title":"Progress Software WS_FTP: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2023"},{"id":"BSI:WID-SEC-W-2023-2858","date":"2023-11-08","title":"IBM Security Guardium: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7069238"},{"id":"BSI:WID-SEC-W-2023-2860","date":"2023-11-08","title":"Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:6274"},{"id":"BSI:WID-SEC-W-2023-2861","date":"2023-11-08","title":"TIBCO Spotfire Analytics und Spotfire: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen","source_url":"https://www.tibco.com/support/advisories/2023/11/tibco-security-advisory-november-8-2023-tibco-spotfire-cve-2023-26221"},{"id":"BSI:WID-SEC-W-2023-2863","date":"2023-11-08","title":"PaloAlto Networks Cortex XSOAR: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://security.paloaltonetworks.com/CVE-2023-3282"},{"id":"BSI:WID-SEC-W-2023-2865","date":"2023-11-08","title":"Lenovo BIOS: Mehrere Schwachstellen","source_url":"https://support.lenovo.com/us/en/product_security/LEN-141775"},{"id":"BSI:WID-SEC-W-2023-2866","date":"2023-11-08","title":"Drupal: Mehrere Schwachstellen","source_url":"https://www.drupal.org/sa-contrib-2023-051"},{"id":"BSI:WID-SEC-W-2023-2867","date":"2023-11-08","title":"Netgate pfSense: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-782h-r93g-8gcc"},{"id":"BSI:WID-SEC-W-2023-2846","date":"2023-11-07","title":"Trend Micro Apex One: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://success.trendmicro.com/dcx/s/solution/000295652"},{"id":"BSI:WID-SEC-W-2023-2847","date":"2023-11-07","title":"Tor: Schwachstelle ermöglicht Denial of Service","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248562"},{"id":"BSI:WID-SEC-W-2023-2850","date":"2023-11-07","title":"IBM AIX: Mehrere Schwachstellen","source_url":"https://aix.software.ibm.com/aix/efixes/security/python_advisory6.asc"},{"id":"BSI:WID-SEC-W-2023-2852","date":"2023-11-07","title":"HP Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://support.hp.com/us-en/document/ish_9634818-9634844-16/HPSBHF03877"},{"id":"BSI:WID-SEC-W-2023-2854","date":"2023-11-07","title":"Puppet: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.puppet.com/security/cve/cve-2023-5309-broken-session-management-puppet-enterprise"},{"id":"BSI:WID-SEC-W-2023-2855","date":"2023-11-07","title":"FreeBSD Project FreeBSD OS: Mehrere Schwachstellen","source_url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-23:16.cap_net.asc"},{"id":"RHSA-2023:6346","date":"2023-11-07","title":"toolbox security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:6346"},{"id":"RHSA-2023:6363","date":"2023-11-07","title":"skopeo security update","source_url":"https://access.redhat.com/errata/RHSA-2023:6363"},{"id":"RHSA-2023:6402","date":"2023-11-07","title":"containernetworking-plugins security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:6402"},{"id":"RHSA-2023:6473","date":"2023-11-07","title":"buildah security update","source_url":"https://access.redhat.com/errata/RHSA-2023:6473"},{"id":"RHSA-2023:6474","date":"2023-11-07","title":"podman security, bug fix, and enhancement update","source_url":"https://access.redhat.com/errata/RHSA-2023:6474"},{"id":"BSI:WID-SEC-W-2023-2840","date":"2023-11-06","title":"JasPer: Schwachstelle ermöglicht Codeausführung","source_url":"https://www.cybersecurity-help.cz/vdb/SB2023110639"},{"id":"BSI:WID-SEC-W-2023-2842","date":"2023-11-06","title":"Google Android: Mehrere Schwachstellen","source_url":"https://source.android.com/docs/security/bulletin/pixel/2023-11-01"},{"id":"BSI:WID-SEC-W-2023-2191","date":"2023-11-06","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://lists.suse.com/pipermail/sle-security-updates/2023-November/016995.html"},{"id":"BSI:WID-SEC-W-2023-2839","date":"2023-11-06","title":"Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2829","date":"2023-11-05","title":"QNAP NAS: Mehrere Schwachstellen","source_url":"https://www.qnap.com/de-de/security-advisory/QSA-23-51"},{"id":"BSI:WID-SEC-W-2023-2833","date":"2023-11-05","title":"Micro Focus ArcSight: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-whx2-vvvv-hm68"},{"id":"BSI:WID-SEC-W-2023-2822","date":"2023-11-05","title":"FRRouting Project FRRouting: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2024:0477"},{"id":"BSI:WID-SEC-W-2023-2823","date":"2023-11-05","title":"IBM DB2: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.ibm.com/support/pages/node/7066501"},{"id":"BSI:WID-SEC-W-2023-2825","date":"2023-11-05","title":"NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Denial of Service","source_url":"https://security.netapp.com/advisory/ntap-20231103-0001/"},{"id":"BSI:WID-SEC-W-2023-2827","date":"2023-11-05","title":"JetBrains TeamCity: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-x5cr-9j64-xrx5"},{"id":"BSI:WID-SEC-W-2023-2831","date":"2023-11-05","title":"ZScaler Client Connector: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://github.com/advisories/GHSA-jg7r-pc4g-p6vp"},{"id":"BSI:WID-SEC-W-2023-2817","date":"2023-11-02","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:6291"},{"id":"BSI:WID-SEC-W-2023-2235","date":"2023-11-02","title":"OpenJDK: Schwachstelle ermöglicht Denial of Service","source_url":"https://linux.oracle.com/errata/ELSA-2023-5733.html"},{"id":"BSI:WID-SEC-W-2023-2323","date":"2023-11-02","title":"Red Hat Enterprise Linux (Keylime): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://bodhi.fedoraproject.org/updates/FEDORA-2023-ed9922536e"},{"id":"BSI:WID-SEC-W-2023-2815","date":"2023-11-02","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://access.redhat.com/errata/RHSA-2023:6796"},{"id":"BSI:WID-SEC-W-2023-2819","date":"2023-11-02","title":"Microsoft Exchange: Mehrere Schwachstellen","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1581/"},{"id":"BSI:WID-SEC-W-2023-2814","date":"2023-11-02","title":"Moxa Switch: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-7v85-4vq6-66gq"},{"id":"BSI:WID-SEC-W-2023-2803","date":"2023-11-01","title":"SolarWinds-Plattform: Schwachstelle ermöglicht die Ausführung von beliebigem Code mit Administratorrechten","source_url":"https://documentation.solarwinds.com/en/success_center/hco/content/release_notes/hco_2023-4_release_notes.htm#link7"},{"id":"BSI:WID-SEC-W-2023-2805","date":"2023-11-01","title":"Cisco Identity Services Engine (ISE): Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-injection-QeXegrCw"},{"id":"BSI:WID-SEC-W-2023-2809","date":"2023-11-01","title":"Cisco Firepower Threat Defense Software und Management Center: Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sa-ftd-snort3-urldos-OccFQTeX"},{"id":"BSI:WID-SEC-W-2023-2811","date":"2023-11-01","title":"Cisco Firepower Management Center: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-sK2gkfvJ"},{"id":"BSI:WID-SEC-W-2023-2812","date":"2023-11-01","title":"Cisco Adaptive Security Appliance & Firepower Threat Defense: Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-webvpn-dos-3GhZQBAS"},{"id":"BSI:WID-SEC-W-2023-2800","date":"2023-11-01","title":"Cisco Meeting Server: Schwachstelle ermöglicht Denial of Service","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cms-segfault-G6ES4Ve8"},{"id":"BSI:WID-SEC-W-2023-2802","date":"2023-11-01","title":"Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.drupal.org/sa-contrib-2023-049"},{"id":"BSI:WID-SEC-W-2023-2804","date":"2023-11-01","title":"Moxa NPort: Schwachstelle ermöglicht Umgehung","source_url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-232905-nport-6000-series-incorrect-implementation-of-authentication-algorithm-vulnerability"},{"id":"BSI:WID-SEC-W-2023-2806","date":"2023-11-01","title":"Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:6128"},{"id":"BSI:WID-SEC-W-2023-2807","date":"2023-11-01","title":"IBM MQ: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.ibm.com/support/pages/node/7060769"},{"id":"BSI:WID-SEC-W-2023-2808","date":"2023-11-01","title":"Cisco Firepower Produkte mit Snort: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ftd-zXYtnjOM"},{"id":"BSI:WID-SEC-W-2023-2813","date":"2023-11-01","title":"Moxa Router: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/advisories/GHSA-7477-pxvj-g72x"},{"id":"BSI:WID-SEC-W-2023-2794","date":"2023-10-31","title":"VMware Workspace One UEM: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.vmware.com/security/advisories/VMSA-2023-0025.html"},{"id":"BSI:WID-SEC-W-2023-2796","date":"2023-10-31","title":"SolarWinds Platform: Mehrere Schwachstellen","source_url":"https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/release_notes/solarwinds_platform_2023-4_release_notes.htm"},{"id":"BSI:WID-SEC-W-2023-2786","date":"2023-10-31","title":"IBM Security Guardium: Schwachstelle ermöglicht Codeausführung","source_url":"https://www.ibm.com/support/pages/node/7063799"},{"id":"BSI:WID-SEC-W-2023-2789","date":"2023-10-31","title":"Red Hat Enterprise Linux 9 Service Interconnect: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://access.redhat.com/errata/RHSA-2023:6219"},{"id":"BSI:WID-SEC-W-2023-2791","date":"2023-10-31","title":"Django: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.djangoproject.com/weblog/2023/nov/01/security-releases/"},{"id":"BSI:WID-SEC-W-2023-2793","date":"2023-10-31","title":"IBM MQ: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7063661"},{"id":"BSI:WID-SEC-W-2023-2795","date":"2023-10-31","title":"Netgate pfSense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.esecforte.com/cve-2023-29973-no-rate-limit/"},{"id":"BSI:WID-SEC-W-2023-2797","date":"2023-10-31","title":"HCL BigFix: Mehrere Schwachstellen ermöglichen Manipulation von Dateien","source_url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108005"},{"id":"BSI:WID-SEC-W-2023-2798","date":"2023-10-31","title":"Tenable Security Nessus: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://de.tenable.com/security/tns-2023-38"},{"id":"BSI:WID-SEC-W-2023-2778","date":"2023-10-30","title":"Google Android: Mehrere Schwachstellen","source_url":"https://source.android.com/docs/security/bulletin/android-14"},{"id":"BSI:WID-SEC-W-2023-2779","date":"2023-10-30","title":"Micro Focus Service Management Automation: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://portal.microfocus.com/s/article/KM000022703"},{"id":"BSI:WID-SEC-W-2023-2776","date":"2023-10-30","title":"Xerox Phaser: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://security.business.xerox.com/wp-content/uploads/2023/10/XRX23-015_Security-Bulletin-for-Phaser-Primelink-Versalink-and-WorkCentre-CVE-023-46327.pdf"},{"id":"BSI:WID-SEC-W-2023-2777","date":"2023-10-30","title":"BigBlueButton: Mehrere Schwachstellen","source_url":"https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-3qjg-229m-vq84"},{"id":"BSI:WID-SEC-W-2023-2781","date":"2023-10-30","title":"SonicWall SMA: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015"},{"id":"BSI:WID-SEC-W-2023-2785","date":"2023-10-30","title":"IBM TXSeries: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7063659"},{"id":"BSI:WID-SEC-W-2023-2780","date":"2023-10-30","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung","source_url":"https://access.redhat.com/errata/RHSA-2023:6167"},{"id":"BSI:WID-SEC-W-2023-2758","date":"2023-10-29","title":"SugarCRM Sugar Enterprise: Mehrere Schwachstellen","source_url":"https://seclists.org/fulldisclosure/2023/Oct/29"},{"id":"BSI:WID-SEC-W-2023-2767","date":"2023-10-29","title":"Microsoft Edge: Schwachstelle ermöglicht Codeausführung","source_url":"https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security"},{"id":"BSI:WID-SEC-W-2023-2764","date":"2023-10-29","title":"IBM QRadar SIEM: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.ibm.com/support/pages/node/7060803"},{"id":"BSI:WID-SEC-W-2023-2765","date":"2023-10-29","title":"Cacti: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://gist.github.com/ISHGARD-2/a95632111138fcd7ccf7432ccb145b53"},{"id":"BSI:WID-SEC-W-2023-2766","date":"2023-10-29","title":"ffmpeg: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://github.com/advisories/GHSA-9j42-4j78-g4mh"},{"id":"BSI:WID-SEC-W-2023-2771","date":"2023-10-29","title":"Grafana: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-37x5-qpm8-53rq"},{"id":"BSI:WID-SEC-W-2023-2774","date":"2023-10-29","title":"IBM Maximo Asset Management: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7059916"},{"id":"BSI:WID-SEC-W-2023-2772","date":"2023-10-29","title":"Hashicorp Vagrant: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://discuss.hashicorp.com/t/hcsec-2023-31-vagrant-s-windows-installer-allowed-directory-junction-write/59568"},{"id":"BSI:WID-SEC-W-2023-2547","date":"2023-10-26","title":"UEFI Firmware: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://github.com/advisories/GHSA-55g9-6jp7-g68x"},{"id":"BSI:WID-SEC-W-2023-2739","date":"2023-10-26","title":"ILIAS: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-r6w9-hpm6-f3mf"},{"id":"BSI:WID-SEC-W-2023-2745","date":"2023-10-25","title":"Tenable Security Nessus Network Monitor: Mehrere Schwachstellen","source_url":"https://de.tenable.com/security/tns-2023-34"},{"id":"BSI:WID-SEC-W-2023-2750","date":"2023-10-25","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://www.jenkins.io/security/advisory/2023-10-25/"},{"id":"BSI:WID-SEC-W-2023-2747","date":"2023-10-25","title":"F5 BIG-IP: Schwachstelle ermöglicht Denial of Service","source_url":"https://my.f5.com/manage/s/article/K000137315"},{"id":"BSI:WID-SEC-W-2023-2751","date":"2023-10-25","title":"Grafana: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://grafana.com/security/security-advisories/cve-2023-3010/"},{"id":"BSI:WID-SEC-W-2023-2752","date":"2023-10-25","title":"HPE OneView: Schwachstelle ermöglicht Codeausführung","source_url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04548en_us"},{"id":"BSI:WID-SEC-W-2023-2755","date":"2023-10-25","title":"OpenBSD: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.openbsd.org/errata73.html"},{"id":"BSI:WID-SEC-W-2023-2737","date":"2023-10-24","title":"Microsoft GitHub Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://docs.github.com/de/enterprise-server@3.8/admin/release-notes"},{"id":"BSI:WID-SEC-W-2023-2738","date":"2023-10-24","title":"D-LINK Access Point (AP) DAP-X1860: Schwachstelle ermöglicht Codeausführung","source_url":"https://www.redteam-pentesting.de/en/advisories/rt-sa-2023-006/-d-link-dap-x1860-remote-command-injection"},{"id":"BSI:WID-SEC-W-2023-2370","date":"2023-10-24","title":"Mattermost: Mehrere Schwachstellen ermöglicht nicht spezifizierten Angriff","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2734","date":"2023-10-24","title":"Aruba ClearPass Policy Manager: Mehrere Schwachstellen","source_url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-016.txt"},{"id":"BSI:WID-SEC-W-2023-2721","date":"2023-10-23","title":"VMware Aria Operations for Logs: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und Code-Ausführung","source_url":"https://www.vmware.com/security/advisories/VMSA-2023-0021.html"},{"id":"BSI:WID-SEC-W-2023-2733","date":"2023-10-23","title":"ZScaler Client Connector: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-r4fj-mm48-prvv"},{"id":"BSI:WID-SEC-W-2023-2596","date":"2023-10-23","title":"IBM Personal Communications: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.ibm.com/support/pages/node/276845"},{"id":"BSI:WID-SEC-W-2023-2726","date":"2023-10-23","title":"HCL Commerce: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-3mpm-5q2w-wr7w"},{"id":"BSI:WID-SEC-W-2023-2728","date":"2023-10-23","title":"OPNsense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.esecforte.com/cve-2023-27152-opnsense-brute-force/"},{"id":"BSI:WID-SEC-W-2023-2732","date":"2023-10-23","title":"Trellix Data Loss Prevention: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://kcm.trellix.com/corporate/index?page=content&id=SNS4190"},{"id":"BSI:WID-SEC-W-2023-2658","date":"2023-10-22","title":"Cisco IOS XE: Schwachstellen ermöglichten Administrativen Zugriff","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z"},{"id":"BSI:WID-SEC-W-2023-2724","date":"2023-10-22","title":"IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7056518"},{"id":"BSI:WID-SEC-W-2023-2714","date":"2023-10-19","title":"IBM TXSeries: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7056429"},{"id":"BSI:WID-SEC-W-2023-2722","date":"2023-10-19","title":"Baker Hughes Bently Nevada 3500: Mehrere Schwachstellen","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-05"},{"id":"RHSA-2023:5888","date":"2023-10-19","title":"Migration Toolkit for Containers (MTC) 1.7.13 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:5888"},{"id":"BSI:WID-SEC-W-2023-2713","date":"2023-10-19","title":"Roundcube: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://github.com/advisories/GHSA-9h35-p54q-hhww"},{"id":"BSI:WID-SEC-W-2023-2706","date":"2023-10-18","title":"HPE Integrated Lights-Out: Schwachstelle ermöglicht Denial of Service","source_url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04544en_us"},{"id":"BSI:WID-SEC-W-2023-2707","date":"2023-10-18","title":"Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-lfi-OWLbKUGe"},{"id":"BSI:WID-SEC-W-2023-2709","date":"2023-10-18","title":"IBM QRadar SIEM (Pulse App): Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.ibm.com/support/pages/node/7054775"},{"id":"BSI:WID-SEC-W-2023-2675","date":"2023-10-17","title":"Oracle Financial Services Applications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixIFLX"},{"id":"BSI:WID-SEC-W-2023-2676","date":"2023-10-17","title":"Oracle Enterprise Manager: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixEM"},{"id":"BSI:WID-SEC-W-2023-2679","date":"2023-10-17","title":"Oracle Communications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixCGBU"},{"id":"BSI:WID-SEC-W-2023-2680","date":"2023-10-17","title":"Oracle Communications Applications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixCAGBU"},{"id":"BSI:WID-SEC-W-2023-2684","date":"2023-10-17","title":"Oracle Utilities Applications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixUTIL"},{"id":"BSI:WID-SEC-W-2023-2688","date":"2023-10-17","title":"Oracle Retail Applications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixRAPP"},{"id":"BSI:WID-SEC-W-2023-2689","date":"2023-10-17","title":"Oracle PeopleSoft: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixPS"},{"id":"BSI:WID-SEC-W-2023-2693","date":"2023-10-17","title":"Oracle Insurance Applications: Schwachstelle gefährdet Vertraulichkeit, Integrität und Verfügbarkeit","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixINSU"},{"id":"BSI:WID-SEC-W-2023-2694","date":"2023-10-17","title":"Oracle Hyperion: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixHYP"},{"id":"BSI:WID-SEC-W-2023-2695","date":"2023-10-17","title":"Oracle Health Sciences Applications: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixHCAR"},{"id":"BSI:WID-SEC-W-2023-2705","date":"2023-10-17","title":"IGEL OS: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://kb.igel.com/securitysafety/en/isn-2023-25-webkit-vulnerabilities-101066782.html"},{"id":"BSI:WID-SEC-W-2023-2666","date":"2023-10-17","title":"Grafana: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://grafana.com/security/security-advisories/cve-2023-4399/"},{"id":"BSI:WID-SEC-W-2023-2671","date":"2023-10-17","title":"Oracle Secure Backup: Schwachstelle gefährdet Vertraulichkeit, Integrität und Verfügbarkeit","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixOSB"},{"id":"BSI:WID-SEC-W-2023-2672","date":"2023-10-17","title":"Oracle REST Data Services: Schwachstelle gefährdet Vertraulichkeit","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixREST"},{"id":"BSI:WID-SEC-W-2023-2677","date":"2023-10-17","title":"Oracle E-Business Suite: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixEBS"},{"id":"BSI:WID-SEC-W-2023-2678","date":"2023-10-17","title":"Oracle Construction and Engineering: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixPVA"},{"id":"BSI:WID-SEC-W-2023-2681","date":"2023-10-17","title":"Oracle Commerce: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixOCOM"},{"id":"BSI:WID-SEC-W-2023-2682","date":"2023-10-17","title":"Oracle TimesTen In-Memory Database: Schwachstelle gefährdet Verfügbarkeit","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixXTEN"},{"id":"BSI:WID-SEC-W-2023-2683","date":"2023-10-17","title":"Oracle Virtualization: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixOVIR"},{"id":"BSI:WID-SEC-W-2023-2686","date":"2023-10-17","title":"Oracle Supply Chain: Schwachstelle gefährdet Vertraulichkeit","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixSCP"},{"id":"BSI:WID-SEC-W-2023-2687","date":"2023-10-17","title":"Oracle Siebel CRM: Mehrere Schwachstellen","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixSECR"},{"id":"BSI:WID-SEC-W-2023-2691","date":"2023-10-17","title":"Oracle JD Edwards: Schwachstelle gefährdet Integrität","source_url":"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixJDE"},{"id":"BSI:WID-SEC-W-2023-2696","date":"2023-10-17","title":"OpenVPN: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-64ff-hjjg-hwr8"},{"id":"BSI:WID-SEC-W-2023-2697","date":"2023-10-17","title":"Google Chrome: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_17.html"},{"id":"BSI:WID-SEC-W-2023-2703","date":"2023-10-17","title":"Sophos Firewall: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.sophos.com/en-us/security-advisories/sophos-sa-20231017-spx-password"},{"id":"BSI:WID-SEC-W-2023-2665","date":"2023-10-16","title":"Samba: Mehrere Schwachstellen","source_url":"https://www.samba.org/samba/history/samba-4.19.2.html"},{"id":"BSI:WID-SEC-W-2023-2669","date":"2023-10-16","title":"Moodle: Mehrere Schwachstellen","source_url":"https://moodle.org/mod/forum/discuss.php?d=451582"},{"id":"BSI:WID-SEC-W-2023-2670","date":"2023-10-16","title":"Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2670"},{"id":"BSI:WID-SEC-W-2023-2502","date":"2023-10-16","title":"IBM License Metric Tool: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.ibm.com/support/pages/node/1126755"},{"id":"BSI:WID-SEC-W-2023-2651","date":"2023-10-16","title":"HP Thin Client PCs: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://support.hp.com/de-de/document/ish_9441212-9446030-16/HPSBHF03873"},{"id":"BSI:WID-SEC-W-2023-2660","date":"2023-10-16","title":"Paessler PRTG: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://kb.paessler.com/en/topic/91880-what-is-the-vulnerability-fixed-in-prtg-23-4-88-1429-about"},{"id":"BSI:WID-SEC-W-2023-2662","date":"2023-10-16","title":"OTRS: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://otrs.com/release-notes/otrs-security-advisory-2023-08/"},{"id":"BSI:WID-SEC-W-2023-2664","date":"2023-10-16","title":"SonicWall SonicOS: Mehrere Schwachstellen","source_url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0012"},{"id":"BSI:WID-SEC-W-2023-2667","date":"2023-10-16","title":"OpenSearch: Schwachstelle ermöglicht Manipulation von Dateien und Denial-of-Service","source_url":"https://github.com/opensearch-project/security/security/advisories/GHSA-72q2-gwwf-6hrv"},{"id":"BSI:WID-SEC-W-2023-2654","date":"2023-10-15","title":"OTRS: Mehrere Schwachstellen","source_url":"https://otrs.com/release-notes/otrs-security-advisory-2023-10/"},{"id":"BSI:WID-SEC-W-2023-2642","date":"2023-10-15","title":"Nextcloud: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2hrc-5fgp-c9c9"},{"id":"BSI:WID-SEC-W-2023-2644","date":"2023-10-15","title":"IBM Integration Bus: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7051448"},{"id":"BSI:WID-SEC-W-2023-2647","date":"2023-10-15","title":"Selenium: Schwachstelle ermöglicht Denial of Service","source_url":"https://huntr.dev/bounties/e268cd68-4f34-49bd-878b-82b96dcc0c99/"},{"id":"BSI:WID-SEC-W-2023-2650","date":"2023-10-15","title":"QNAP NAS: Mehrere Schwachstellen","source_url":"https://www.qnap.com/de-de/security-advisory/QSA-23-42"},{"id":"BSI:WID-SEC-W-2023-2652","date":"2023-10-15","title":"tribe29 checkmk: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://checkmk.com/werk/15713"},{"id":"BSI:WID-SEC-W-2023-2636","date":"2023-10-12","title":"Juniper Patchday Oktober 2023","source_url":"https://kb.juniper.net/InfoCenter/index?page=content&id=JSA73153"},{"id":"BSI:WID-SEC-W-2023-2639","date":"2023-10-12","title":"Hitachi Energy AFS: Mehrere Schwachstellen","source_url":"https://publisher.hitachienergy.com/preview?DocumentId=8DBD000165&DocumentRevisionId=B&languageCode=en&Preview=true"},{"id":"BSI:WID-SEC-W-2023-2641","date":"2023-10-12","title":"KNIME Analytics Platform: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://www.knime.com/security/advisories#CVE-2023-5562"},{"id":"BSI:WID-SEC-W-2023-2637","date":"2023-10-11","title":"Google Android Pixel: Mehrere Schwachstellen","source_url":"https://source.android.com/docs/security/bulletin/pixel/2023-10-01"},{"id":"BSI:WID-SEC-W-2023-2632","date":"2023-10-11","title":"Lenovo Computer: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://support.lenovo.com/us/en/product_security/LEN-127385"},{"id":"BSI:WID-SEC-W-2023-2634","date":"2023-10-11","title":"Synaptics DisplayLink: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf"},{"id":"BSI:WID-SEC-W-2023-2635","date":"2023-10-11","title":"PaloAlto Networks Cortex XSOAR: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://security.paloaltonetworks.com/CVE-2023-3281"},{"id":"BSI:WID-SEC-W-2023-2619","date":"2023-10-10","title":"Adobe Magento: Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/magento/apsb23-50.html"},{"id":"BSI:WID-SEC-W-2023-2614","date":"2023-10-10","title":"Adobe Photoshop: Schwachstelle ermöglicht Codeausführung","source_url":"https://helpx.adobe.com/security/products/photoshop/apsb23-51.html"},{"id":"BSI:WID-SEC-W-2023-2621","date":"2023-10-10","title":"HCL BigFix: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108007"},{"id":"BSI:WID-SEC-W-2023-2623","date":"2023-10-10","title":"TIBCO Spotfire: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://www.tibco.com/support/advisories/2023/10/tibco-security-advisory-october-10-2023-tibco-spotfire-cve-2023-26220"},{"id":"BSI:WID-SEC-W-2023-2624","date":"2023-10-10","title":"Adobe Creative Cloud (Bridge): Mehrere Schwachstellen","source_url":"https://helpx.adobe.com/security/products/bridge/apsb23-49.html"},{"id":"BSI:WID-SEC-W-2023-2398","date":"2023-10-09","title":"JetBrains TeamCity: Mehrere Schwachstellen","source_url":"https://blog.jetbrains.com/teamcity/2023/10/cve-2023-42793-vulnerability-in-teamcity-update/"},{"id":"BSI:WID-SEC-W-2023-2599","date":"2023-10-09","title":"Red Hat Enterprise Linux (libvpx): Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2023:5534"},{"id":"BSI:WID-SEC-W-2023-2600","date":"2023-10-09","title":"SAP Patchday Oktober 2023","source_url":"https://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10"},{"id":"BSI:WID-SEC-W-2023-2603","date":"2023-10-09","title":"Siemens SICAM: Mehrere Schwachstellen","source_url":"https://cert-portal.siemens.com/productcert/html/ssa-285795.html"},{"id":"BSI:WID-SEC-W-2023-2421","date":"2023-10-09","title":"Ivanti Endpoint Manager: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-vhfm-hcpf-g55q"},{"id":"BSI:WID-SEC-W-2023-2590","date":"2023-10-09","title":"Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierte Angriffe","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2595","date":"2023-10-09","title":"IBM Security Guardium: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7048802"},{"id":"BSI:WID-SEC-W-2023-2597","date":"2023-10-09","title":"NetApp Data ONTAP: Schwachstelle ermöglicht Denial of Service","source_url":"https://security.netapp.com/advisory/ntap-20231009-0001/"},{"id":"BSI:WID-SEC-W-2023-2602","date":"2023-10-09","title":"MediaWiki: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/UEMW64LVEH3BEXCJV43CVS6XPYURKWU3/"},{"id":"BSI:WID-SEC-W-2023-2587","date":"2023-10-08","title":"NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen","source_url":"https://security.netapp.com/advisory/ntap-20231006-0005/"},{"id":"BSI:WID-SEC-W-2023-2593","date":"2023-10-08","title":"IBM Power Hardware Management Console: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.ibm.com/support/pages/node/7047713"},{"id":"BSI:WID-SEC-W-2023-2591","date":"2023-10-08","title":"QNAP NAS: Mehrere Schwachstellen","source_url":"https://www.qnap.com/de-de/security-advisory/QSA-23-37"},{"id":"BSI:WID-SEC-W-2023-2410","date":"2023-10-05","title":"Drupal: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://www.drupal.org/sa-core-2023-006"},{"id":"BSI:WID-SEC-W-2023-2580","date":"2023-10-05","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service und Codeausführung","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234595"},{"id":"BSI:WID-SEC-W-2023-2585","date":"2023-10-05","title":"D-LINK DIR-846 Router: Schwachstelle ermöglicht Codeausführung","source_url":"https://github.com/MateusTesser/CVE-2023-43284"},{"id":"BSI:WID-SEC-W-2023-2582","date":"2023-10-05","title":"Acronis Cyber Protect: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://security-advisory.acronis.com/SEC-4710"},{"id":"BSI:WID-SEC-W-2023-2583","date":"2023-10-05","title":"Red Hat JBoss A-MQ: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2023:5491"},{"id":"BSI:WID-SEC-W-2023-2584","date":"2023-10-05","title":"Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072188"},{"id":"BSI:WID-SEC-W-2023-2586","date":"2023-10-05","title":"tribe29 checkmk: Mehrere Schwachstellen ermöglichen die Preisgabe von Informationen","source_url":"https://checkmk.com/werk/5514"},{"id":"BSI:WID-SEC-W-2023-2555","date":"2023-10-04","title":"Atlassian Confluence Data Center and Server: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://github.com/advisories/GHSA-g458-xvmc-qg2r"},{"id":"BSI:WID-SEC-W-2023-2561","date":"2023-10-04","title":"Red Hat OpenShift: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://access.redhat.com/security/cve/CVE-2023-3361"},{"id":"BSI:WID-SEC-W-2023-2562","date":"2023-10-04","title":"HP LaserJet: Schwachstelle ermöglicht Cross-Site Scripting und DOS","source_url":"https://support.hp.com/us-en/document/ish_9365285-9365309-16/hpsbpi03869"},{"id":"BSI:WID-SEC-W-2023-2564","date":"2023-10-04","title":"Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Denial of Service","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-apidos-PGsDcdNF"},{"id":"BSI:WID-SEC-W-2023-2573","date":"2023-10-04","title":"Extreme Networks ExtremeXOS: Mehrere Schwachstellen","source_url":"https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379"},{"id":"BSI:WID-SEC-W-2023-2578","date":"2023-10-04","title":"A10 Networks ACOS: Mehrere Schwachstellen","source_url":"https://support.a10networks.com/support/security_advisory/a10-acos-file-access-vulnerability/"},{"id":"BSI:WID-SEC-W-2023-2579","date":"2023-10-04","title":"D-LINK DAP-2622 Access Point (AP): Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1515/"},{"id":"BSI:WID-SEC-W-2023-2559","date":"2023-10-04","title":"Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://access.redhat.com/security/cve/CVE-2023-4237"},{"id":"BSI:WID-SEC-W-2023-2563","date":"2023-10-04","title":"Acronis Cyber Protect Home Office: Schwachstelle ermöglicht Manipulation von Dateien und Offenlegung vertraulicher Informationen","source_url":"https://security-advisory.acronis.com/SEC-6587"},{"id":"BSI:WID-SEC-W-2023-2567","date":"2023-10-04","title":"Cisco Network Services Orchestrator: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-priv-esc-XXqRtTfT"},{"id":"BSI:WID-SEC-W-2023-2568","date":"2023-10-04","title":"Cisco IOS XE: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rdocker-uATbukKn"},{"id":"BSI:WID-SEC-W-2023-2574","date":"2023-10-04","title":"D-LINK Router: Schwachstelle ermöglicht Codeausführung","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1513/"},{"id":"BSI:WID-SEC-W-2023-2575","date":"2023-10-04","title":"Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.drupal.org/sa-contrib-2023-048"},{"id":"BSI:WID-SEC-W-2023-2577","date":"2023-10-04","title":"Linux-Kernel: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229691"},{"id":"BSI:WID-SEC-W-2023-2569","date":"2023-10-04","title":"Puppet: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.puppet.com/security/cve/cve-2023-5255-denial-service-revocation-auto-renewed-certificates"},{"id":"BSI:WID-SEC-W-2023-2506","date":"2023-10-03","title":"Progress Software WS_FTP: Mehre Schwachstellen","source_url":"https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044"},{"id":"BSI:WID-SEC-W-2023-2538","date":"2023-10-03","title":"Mattermost: Mehrere Schwachstellen","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2539","date":"2023-10-03","title":"Samsung Android: Mehrere Schwachstellen","source_url":"https://security.samsungmobile.com/securityUpdate.smsb"},{"id":"BSI:WID-SEC-W-2023-2545","date":"2023-10-03","title":"PyTorch: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://github.com/pytorch/serve/releases/tag/v0.8.2"},{"id":"BSI:WID-SEC-W-2023-2548","date":"2023-10-03","title":"Google Android: Mehrere Schwachstellen","source_url":"https://source.android.com/docs/security/bulletin/2023-10-01"},{"id":"BSI:WID-SEC-W-2023-2252","date":"2023-10-03","title":"Mattermost: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-33r7-wjfc-7w98"},{"id":"BSI:WID-SEC-W-2023-2536","date":"2023-10-03","title":"JFrog Artifactory: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://github.com/advisories/GHSA-mp3m-h3mq-83jw"},{"id":"BSI:WID-SEC-W-2023-2537","date":"2023-10-03","title":"Moxa NPort: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability"},{"id":"BSI:WID-SEC-W-2023-2546","date":"2023-10-03","title":"TYPO3 Extension(Femanager): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://typo3.org/security/advisory/typo3-ext-sa-2023-008"},{"id":"BSI:WID-SEC-W-2023-2551","date":"2023-10-03","title":"Hitachi Ops Center: Mehrere Schwachstellen","source_url":"https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-142/index.html"},{"id":"BSI:WID-SEC-W-2023-2526","date":"2023-10-01","title":"Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://access.redhat.com/errata/RHSA-2024:0439"},{"id":"BSI:WID-SEC-W-2023-2527","date":"2023-10-01","title":"Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:7198"},{"id":"BSI:WID-SEC-W-2023-2528","date":"2023-10-01","title":"IBM Rational ClearQuest: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7041680"},{"id":"BSI:WID-SEC-W-2023-2529","date":"2023-10-01","title":"IBM FileNet Content Manager: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://www.ibm.com/support/pages/node/7014389"},{"id":"RHSA-2023:5407","date":"2023-09-29","title":"openshift-gitops-kam security update","source_url":"https://access.redhat.com/errata/RHSA-2023:5407"},{"id":"BSI:WID-SEC-W-2023-2423","date":"2023-09-28","title":"OPNsense: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44275"},{"id":"BSI:WID-SEC-W-2023-2520","date":"2023-09-28","title":"GitLab: Mehrere Schwachstellen","source_url":"https://about.gitlab.com/releases/2023/09/28/security-release-gitlab-16-4-1-released/"},{"id":"BSI:WID-SEC-W-2023-2356","date":"2023-09-28","title":"IBM QRadar SIEM: Mehre Schwachstellen","source_url":"http://linux.oracle.com/errata/ELSA-2023-5362.html"},{"id":"BSI:WID-SEC-W-2023-2517","date":"2023-09-28","title":"Samsung Exynos: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/"},{"id":"BSI:WID-SEC-W-2023-2496","date":"2023-09-27","title":"Avast Premium Security: Mehrere Schwachstellen","source_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/267166"},{"id":"BSI:WID-SEC-W-2023-2501","date":"2023-09-27","title":"Cisco Digital Network Architecture Center: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ins-acc-con-nHAVDRBZ"},{"id":"BSI:WID-SEC-W-2023-2509","date":"2023-09-27","title":"Cisco IOS XE: Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-HFGMsfSD"},{"id":"BSI:WID-SEC-W-2023-2369","date":"2023-09-27","title":"binutils: Mehrere Schwachstellen","source_url":"https://lists.suse.com/pipermail/sle-security-updates/2023-September/016367.html"},{"id":"BSI:WID-SEC-W-2023-2491","date":"2023-09-27","title":"Acronis Cyber Protect: Mehrere Schwachstellen","source_url":"https://security-advisory.acronis.com/updates"},{"id":"BSI:WID-SEC-W-2023-2492","date":"2023-09-27","title":"Cisco Wireless LAN Controllers: Schwachstelle ermöglicht Denial of Service","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cbw-dos-YSmbUqX3"},{"id":"BSI:WID-SEC-W-2023-2493","date":"2023-09-27","title":"Cisco Catalyst: Schwachstelle ermöglicht Denial of Service","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-click-ap-dos-wdcXkvnQ"},{"id":"BSI:WID-SEC-W-2023-2499","date":"2023-09-27","title":"libTIFF: Schwachstelle ermöglicht Denial of Service","source_url":"https://gitlab.com/libtiff/libtiff/-/issues/606"},{"id":"BSI:WID-SEC-W-2023-2504","date":"2023-09-27","title":"Cisco Aironet Access Point: Schwachstelle ermöglicht Denial of Service","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m"},{"id":"BSI:WID-SEC-W-2023-2508","date":"2023-09-27","title":"F5 BIG-IP: Mehrere Schwachstellen","source_url":"https://my.f5.com/manage/s/article/K000136909"},{"id":"BSI:WID-SEC-W-2023-2416","date":"2023-09-26","title":"pgAdmin: Schwachstelle ermöglicht Ausführung von Kommandos","source_url":"https://bodhi.fedoraproject.org/updates/FEDORA-2023-478aa17fa2"},{"id":"BSI:WID-SEC-W-2023-2445","date":"2023-09-26","title":"GNOME: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/6990"},{"id":"BSI:WID-SEC-W-2023-2446","date":"2023-09-26","title":"Squid: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/squid-cache/squid/security/advisories/GHSA-cg5h-v6vc-w33f"},{"id":"BSI:WID-SEC-W-2023-2449","date":"2023-09-26","title":"Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://access.redhat.com/errata/RHSA-2023:7773"},{"id":"BSI:WID-SEC-W-2023-2450","date":"2023-09-26","title":"VMware Aria Operations und VMware Cloud Foundation: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.vmware.com/security/advisories/VMSA-2023-0020.html"},{"id":"BSI:WID-SEC-W-2023-2440","date":"2023-09-25","title":"docker: Mehrere Schwachstellen","source_url":"https://github.com/advisories/GHSA-rc4h-xgcc-x9w4"},{"id":"BSI:WID-SEC-W-2023-2443","date":"2023-09-25","title":"docker: Mehrere Schwachstellen","source_url":"https://docs.docker.com/desktop/release-notes/#4120"},{"id":"BSI:WID-SEC-W-2023-2444","date":"2023-09-25","title":"MariaDB: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:7633"},{"id":"BSI:WID-SEC-W-2023-2432","date":"2023-09-24","title":"Red Hat OpenStack: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2023:6231"},{"id":"BSI:WID-SEC-W-2023-2433","date":"2023-09-24","title":"Elasticsearch: Schwachstelle ermöglicht Denial of Service","source_url":"https://discuss.elastic.co/t/elasticsearch-8-9-0-7-17-13-security-update/343616"},{"id":"BSI:WID-SEC-W-2023-2431","date":"2023-09-24","title":"Microsoft GitHub Enterprise: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23766"},{"id":"BSI:WID-SEC-W-2023-2422","date":"2023-09-21","title":"D-LINK Router: Mehrere Schwachstellen","source_url":"https://github.com/peris-navince/founded-0-days/blob/main/Dlink/823G/SetWifiDownSettings/1.md"},{"id":"BSI:WID-SEC-W-2023-2428","date":"2023-09-21","title":"SaltStack Salt: Mehre Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2024:0190"},{"id":"BSI:WID-SEC-W-2023-2430","date":"2023-09-21","title":"Intel Driver and Support Assistant: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1449/"},{"id":"BSI:WID-SEC-W-2023-2426","date":"2023-09-21","title":"QNAP NAS: Schwachstelle ermöglicht Codeausführung","source_url":"https://www.qnap.com/de-de/security-advisory/QSA-23-25"},{"id":"BSI:WID-SEC-W-2023-2413","date":"2023-09-20","title":"D-LINK Access Points DWL-6610: Mehrere Schwachstellen","source_url":"https://github.com/Archerber/bug_submit/blob/main/D-Link/DWL-6610/bug2.md"},{"id":"BSI:WID-SEC-W-2023-2411","date":"2023-09-20","title":"Jenkins: Mehrere Schwachstellen","source_url":"https://www.jenkins.io/security/advisory/2023-09-20/"},{"id":"BSI:WID-SEC-W-2023-2417","date":"2023-09-20","title":"Progress Software MOVEit: Mehrere Schwachstellen","source_url":"https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023"},{"id":"BSI:WID-SEC-W-2023-2297","date":"2023-09-20","title":"Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff","source_url":"https://mattermost.com/security-updates/"},{"id":"BSI:WID-SEC-W-2023-2400","date":"2023-09-20","title":"Acronis Cyber Protect Home Office: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://security-advisory.acronis.com/SEC-5330"},{"id":"BSI:WID-SEC-W-2023-2414","date":"2023-09-20","title":"OpenBSD: Schwachstelle ermöglicht Denial of Service","source_url":"http://www.openbsd.org/errata72.html#038"},{"id":"BSI:WID-SEC-W-2023-2418","date":"2023-09-20","title":"Synology Router Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.synology.com/en-global/support/security/Synology_SA_23_13"},{"id":"BSI:WID-SEC-W-2023-2419","date":"2023-09-20","title":"D-Link DI-7200GV2: Mehrere Schwachstellen","source_url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284"},{"id":"RHSA-2023:5314","date":"2023-09-20","title":"OpenShift API for Data Protection (OADP) 1.1.6 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:5314"},{"id":"BSI:WID-SEC-W-2023-2393","date":"2023-09-19","title":"Atlassian Bitbucket: Schwachstelle ermöglicht Codeausführung","source_url":"https://jira.atlassian.com/browse/BSERV-14419"},{"id":"BSI:WID-SEC-W-2023-2396","date":"2023-09-19","title":"HPE OneView: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","source_url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04538en_us"},{"id":"BSI:WID-SEC-W-2023-2397","date":"2023-09-19","title":"GitLab: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://socradar.io/gitlabs-critical-security-update-what-you-need-to-know-cve-2023-5009/"},{"id":"BSI:WID-SEC-W-2023-2391","date":"2023-09-19","title":"Atlassian Jira Software: Schwachstelle ermöglicht Denial of Service","source_url":"https://jira.atlassian.com/browse/JSDSERVER-14007"},{"id":"BSI:WID-SEC-W-2023-2392","date":"2023-09-19","title":"Atlassian Confluence: Schwachstelle ermöglicht Denial of Service","source_url":"https://jira.atlassian.com/browse/CONFSERVER-91258"},{"id":"BSI:WID-SEC-W-2023-2394","date":"2023-09-19","title":"Red Hat Enterprise Linux: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen","source_url":"https://access.redhat.com/errata/RHSA-2023:5206"},{"id":"RHSA-2023:5233","date":"2023-09-19","title":"OpenShift Virtualization 4.13.4 security and bug fix update","source_url":"https://access.redhat.com/errata/RHSA-2023:5233"},{"id":"BSI:WID-SEC-W-2023-2381","date":"2023-09-18","title":"GitLab: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://about.gitlab.com/releases/2023/09/18/security-release-gitlab-16-3-4-released/"},{"id":"BSI:WID-SEC-W-2023-2382","date":"2023-09-18","title":"Kibana: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://discuss.elastic.co/t/kibana-8-10-1-security-update/343287"},{"id":"BSI:WID-SEC-W-2023-2383","date":"2023-09-18","title":"Wind River VxWorks: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://www.pentagrid.ch/en/blog/wind-river-vxworks-tarextract-directory-traversal-vulnerability/"},{"id":"BSI:WID-SEC-W-2023-2388","date":"2023-09-18","title":"Red Hat OpenShift: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:5697"},{"id":"BSI:WID-SEC-W-2023-2296","date":"2023-09-17","title":"Red Hat OpenShift: Mehrere Schwachstellen","source_url":"https://docs.openshift.com/container-platform/4.13/cicd/gitops/gitops-release-notes.html#rhsa-2023-5029-gitops-1-9-2-security-update-advisory_gitops-release-notes"},{"id":"BSI:WID-SEC-W-2023-2372","date":"2023-09-17","title":"HPE OneView: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30908"},{"id":"BSI:WID-SEC-W-2023-2232","date":"2023-09-17","title":"Usermin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41161"},{"id":"BSI:WID-SEC-W-2023-2373","date":"2023-09-17","title":"QT: Schwachstelle ermöglicht Denial of Service","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43114"},{"id":"BSI:WID-SEC-W-2023-2374","date":"2023-09-17","title":"vBulletin Connect: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c"},{"id":"BSI:WID-SEC-W-2023-2376","date":"2023-09-17","title":"Red Hat OpenStack: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://access.redhat.com/security/cve/CVE-2022-3261"},{"id":"BSI:WID-SEC-W-2023-2377","date":"2023-09-17","title":"Red Hat Quay: Mehrere Schwachstellen","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238908"},{"id":"BSI:WID-SEC-W-2023-2339","date":"2023-09-14","title":"Proofpoint Insider Threat Management: Mehrere Schwachstellen","source_url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0006"},{"id":"BSI:WID-SEC-W-2023-2362","date":"2023-09-14","title":"Red Hat Quarkus: Schwachstelle ermöglicht die Umgehung von Sicherheitsmaßnahmen oder die Verursachung eines Denial-of-Service-Zustands","source_url":"https://access.redhat.com/errata/RHSA-2023:5170"},{"id":"BSI:WID-SEC-W-2023-2262","date":"2023-09-14","title":"AVM FRITZ! Produkte: Schwachstelle ermöglicht nicht spezifizierten Angriff","source_url":"https://avm.de/service/sicherheitsinfos-zu-updates/"},{"id":"BSI:WID-SEC-W-2023-2360","date":"2023-09-14","title":"Trellix Secure Web Gateway: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://kcm.trellix.com/corporate/index?page=content&id=SB10406"},{"id":"BSI:WID-SEC-W-2023-2361","date":"2023-09-14","title":"Hashicorp Vault: Schwachstelle ermöglicht Umgehung von Sicherheitsmaßnahmen oder Offenlegung vertraulicher Informationen","source_url":"https://discuss.hashicorp.com/t/hcsec-2023-28-vault-s-transit-secrets-engine-allowed-nonce-specified-without-convergent-encryption/58249"},{"id":"BSI:WID-SEC-W-2023-2364","date":"2023-09-14","title":"WithSecure Endpoint Protection: Schwachstellen ermöglichen Denial of Service","source_url":"https://www.withsecure.com/en/support/security-advisories/cve-2023-42526"},{"id":"BSI:WID-SEC-W-2023-2367","date":"2023-09-14","title":"Roundcube: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://roundcube.net/news/2023/09/15/security-update-1.6.3-released"},{"id":"BSI:WID-SEC-W-2023-2347","date":"2023-09-13","title":"Wibu-Systems CodeMeter: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4701"},{"id":"BSI:WID-SEC-W-2023-2341","date":"2023-09-13","title":"Red Hat OpenShift: Schwachstelle ermöglicht Codeausführung","source_url":"https://access.redhat.com/errata/RHSA-2023:5096"},{"id":"BSI:WID-SEC-W-2023-2342","date":"2023-09-13","title":"Epson Printer: Mehrere Schwachstellen","source_url":"https://epson.com/Support/wa00944"},{"id":"BSI:WID-SEC-W-2023-2348","date":"2023-09-13","title":"util-linux: Schwachstelle erlaubt Privilegienerweiterung und die Ausführung von beliebigem Code","source_url":"https://packetstormsecurity.com/files/132061/hwclock-Privilege-Escalation.html"},{"id":"BSI:WID-SEC-W-2023-2349","date":"2023-09-13","title":"Trellix Data Loss Prevention: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://kcm.trellix.com/corporate/index?page=content&id=SB10407"},{"id":"BSI:WID-SEC-W-2023-2350","date":"2023-09-13","title":"QEMU: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2023:6368"},{"id":"BSI:WID-SEC-W-2023-2354","date":"2023-09-13","title":"Drupal: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://www.drupal.org/sa-contrib-2023-045"},{"id":"BSI:WID-SEC-W-2023-2355","date":"2023-09-13","title":"Cisco IOS XR: Mehrere Schwachstellen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lnt-L9zOkBz5"},{"id":"BSI:WID-SEC-W-2023-2304","date":"2023-09-12","title":"Foxit PDF Editor und Foxit PDF Reader: Mehrere Schwachstellen","source_url":"https://www.foxit.com/support/security-bulletins.html"},{"id":"BSI:WID-SEC-W-2023-2326","date":"2023-09-12","title":"Adobe Acrobat und Reader: Schwachstelle ermöglicht Codeausführung","source_url":"https://helpx.adobe.com/security/products/acrobat/apsb23-34.html"},{"id":"BSI:WID-SEC-W-2023-2327","date":"2023-09-12","title":"ILIAS: Mehrere Schwachstellen","source_url":"https://docu.ilias.de/ilias.php?baseClass=illmpresentationgui&obj_id=152235&ref_id=35"},{"id":"BSI:WID-SEC-W-2023-2336","date":"2023-09-12","title":"Lenovo XClarity: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://support.lenovo.com/us/en/product_security/LEN-140960"},{"id":"BSI:WID-SEC-W-2023-2312","date":"2023-09-12","title":"Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/advisories/GHSA-5q66-v53q-pm35"},{"id":"BSI:WID-SEC-W-2023-2317","date":"2023-09-12","title":"Adobe Connect: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://helpx.adobe.com/security/products/connect/apsb23-33.html"},{"id":"BSI:WID-SEC-W-2023-2318","date":"2023-09-12","title":"Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://helpx.adobe.com/security/products/experience-manager/apsb23-43.html"},{"id":"BSI:WID-SEC-W-2023-2321","date":"2023-09-12","title":"BlackBerry AtHoc Server: Mehrere Schwachstellen","source_url":"https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000112406"},{"id":"BSI:WID-SEC-W-2023-2322","date":"2023-09-12","title":"Siemens JT2Go: Mehrere Schwachstellen","source_url":"https://cert-portal.siemens.com/productcert/pdf/ssa-278349.pdf"},{"id":"BSI:WID-SEC-W-2023-2324","date":"2023-09-12","title":"SolarWinds Platform: Mehrere Schwachstellen ermöglichen Privilegieneskalation","source_url":"https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm"},{"id":"BSI:WID-SEC-W-2023-2338","date":"2023-09-12","title":"Red Hat OpenShift: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://access.redhat.com/errata/RHSA-2023:5001"},{"id":"BSI:WID-SEC-W-2023-2308","date":"2023-09-11","title":"Nagios Enterprises Nagios XI: Mehrere Schwachstellen","source_url":"https://www.nagios.com/downloads/nagios-xi/change-log/"},{"id":"BSI:WID-SEC-W-2023-2309","date":"2023-09-11","title":"SAP Patchday September 2023","source_url":"https://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10"},{"id":"BSI:WID-SEC-W-2023-2303","date":"2023-09-11","title":"Kubernetes: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/advisories/GHSA-m4hf-6vgr-75r2"},{"id":"BSI:WID-SEC-W-2023-2294","date":"2023-09-10","title":"SAP Software: Schwachstelle ermöglicht Darstellen falscher Informationen","source_url":"https://github.com/advisories/GHSA-g7j8-x6g6-f5vj"},{"id":"BSI:WID-SEC-W-2023-2295","date":"2023-09-10","title":"Hashicorp Terraform: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://discuss.hashicorp.com/t/hcsec-2023-27-terraform-allows-arbitrary-file-write-during-init-operation/58082"},{"id":"BSI:WID-SEC-W-2023-2300","date":"2023-09-10","title":"HCL Domino: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0107388"},{"id":"BSI:WID-SEC-W-2023-2279","date":"2023-09-07","title":"Cisco ASA (Adaptive Security Appliance): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC"},{"id":"BSI:WID-SEC-W-2023-2291","date":"2023-09-07","title":"D-LINK DIR-3040: Mehrere Schwachstellen ermöglichen Codeausführung","source_url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10350"},{"id":"BSI:WID-SEC-W-2023-2286","date":"2023-09-06","title":"Jenkins Plugins: Mehrere Schwachstellen","source_url":"https://www.jenkins.io/security/advisory/2023-09-06/"},{"id":"BSI:WID-SEC-W-2023-2287","date":"2023-09-06","title":"ArubaOS: Mehrere Schwachstellen","source_url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-014.txt"},{"id":"BSI:WID-SEC-W-2023-2277","date":"2023-09-06","title":"Cisco Small Business: Schwachstelle ermöglicht Codeausführung","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-stack-SHYv2f5N"},{"id":"BSI:WID-SEC-W-2023-2281","date":"2023-09-06","title":"FreeBSD Project FreeBSD OS: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-23:10.pf.asc"},{"id":"BSI:WID-SEC-W-2023-2276","date":"2023-09-06","title":"Elasticsearch: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://discuss.elastic.co/t/elasticsearch-8-9-2-and-7-17-13-security-update/342479"},{"id":"BSI:WID-SEC-W-2023-2285","date":"2023-09-06","title":"Drupal Plugins: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://www.drupal.org/sa-contrib-2023-044"},{"id":"BSI:WID-SEC-W-2023-2266","date":"2023-09-05","title":"Red Hat Ansible Automation Platform: Mehrere Schwachstellen","source_url":"https://access.redhat.com/errata/RHSA-2023:4971"},{"id":"BSI:WID-SEC-W-2023-2272","date":"2023-09-05","title":"Samsung Android: Mehrere Schwachstellen","source_url":"https://security.samsungmobile.com/securityUpdate.smsb"},{"id":"BSI:WID-SEC-W-2023-2273","date":"2023-09-05","title":"Google Android: Mehrere Schwachstellen","source_url":"https://source.android.com/docs/security/bulletin/2023-09-01"},{"id":"BSI:WID-SEC-W-2023-2265","date":"2023-09-05","title":"Squid: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/squid-cache/squid/security/advisories/GHSA-jm7h-w5q5-jpq9"},{"id":"BSI:WID-SEC-W-2023-2271","date":"2023-09-05","title":"LANCOM Router: Schwachstelle ermöglicht Denial of Service","source_url":"https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling"},{"id":"BSI:WID-SEC-W-2023-2261","date":"2023-09-04","title":"MinIO: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen","source_url":"https://thehackernews.com/2023/09/hackers-exploit-minio-storage-system.html"},{"id":"BSI:WID-SEC-W-2023-2247","date":"2023-09-03","title":"Autodesk AutoCAD: Mehrere Schwachstellen","source_url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018"},{"id":"BSI:WID-SEC-W-2023-2195","date":"2023-09-03","title":"yara: Schwachstelle ermöglicht Denial of Service","source_url":"https://github.com/VirusTotal/yara/issues/1948"},{"id":"BSI:WID-SEC-W-2023-2244","date":"2023-09-03","title":"GitLab: Mehrere Schwachstellen","source_url":"https://about.gitlab.com/releases/2023/08/31/security-release-gitlab-16-3-1-released/"},{"id":"BSI:WID-SEC-W-2023-2250","date":"2023-09-03","title":"Apache Nifi: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","source_url":"https://lists.apache.org/thread/b51f8csysg1pvgs6xjjrq5hrjrvfot1y"},{"id":"BSI:WID-SEC-W-2023-2253","date":"2023-09-03","title":"Linux Kernel: Schwachstelle ermöglicht Denial of Service","source_url":"https://access.redhat.com/errata/RHSA-2024:0412"},{"id":"BSI:WID-SEC-W-2023-2254","date":"2023-09-03","title":"Microsoft GitHub Enterprise: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://docs.github.com/de/enterprise-server@3.8/admin/release-notes"},{"id":"BSI:WID-SEC-W-2023-2255","date":"2023-09-03","title":"IBM Security Guardium: Schwachstelle ermöglicht Cross-Site Scripting","source_url":"https://www.ibm.com/support/pages/node/7030366"},{"id":"BSI:WID-SEC-W-2023-2258","date":"2023-09-03","title":"Samsung Exynos: Mehrere Schwachstellen","source_url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/"},{"id":"BSI:WID-SEC-W-2023-2246","date":"2023-08-31","title":"Moxa MXsecurity: Mehrere Schwachstellen","source_url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230403-mxsecurity-series-multiple-vulnerabilities"},{"id":"BSI:WID-SEC-W-2023-2242","date":"2023-08-31","title":"Synology Router Manager: Mehrere Schwachstellen","source_url":"https://www.synology.com/en-global/security/advisory/Synology_SA_23_10"},{"id":"BSI:WID-SEC-W-2023-2248","date":"2023-08-31","title":"Microsoft Teams: Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://www.zerodayinitiative.com/advisories/ZDI-23-1282/"},{"id":"BSI:WID-SEC-W-2023-2243","date":"2023-08-31","title":"IBM Security Guardium: Schwachstelle ermöglicht Denial of Service","source_url":"https://www.ibm.com/support/pages/node/7030110"},{"id":"BSI:WID-SEC-W-2023-2240","date":"2023-08-30","title":"IBM AIX: Mehrere Schwachstellen","source_url":"https://www.ibm.com/support/pages/node/7028420"},{"id":"BSI:WID-SEC-W-2023-2233","date":"2023-08-30","title":"Cisco Unity Connection and Cisco Unified Communications Manager (CUCM): Schwachstelle ermöglicht Privilegieneskalation","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-priv-esc-D8Bky5eg"},{"id":"BSI:WID-SEC-W-2023-2237","date":"2023-08-30","title":"D-LINK Access Point (AP): Mehrere Schwachstellen","source_url":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10349"},{"id":"BSI:WID-SEC-W-2023-2236","date":"2023-08-30","title":"Graylog: Schwachstelle ermöglicht Offenlegung von Informationen","source_url":"https://github.com/Graylog2/graylog2-server/security/advisories/GHSA-3fqm-frhg-7c85"},{"id":"BSI:WID-SEC-W-2023-2239","date":"2023-08-30","title":"Drupal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting","source_url":"https://www.drupal.org/sa-contrib-2023-042"},{"id":"BSI:WID-SEC-W-2023-2194","date":"2023-08-28","title":"Red Hat Ansible Automation Platform: Schwachstelle ermöglicht Manipulation von Dateien","source_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235369"},{"id":"IBM:6590231","date":"2022-06-25","title":"Security Bulletin: Search tips - IBM Security Bulletin - IBM Support","source_url":"https://www.ibm.com/support/pages/node/6590231"}]}