Security Warnings — Latest advisories

podman security update

2026-06-16 RHSA-2026:26447

highRed Hat Red Hat 2026-W25

Red Hat OpenShift Data Foundation 4.16.30 security, enhancement & bug fix update

2026-06-16 RHSA-2026:26416

highRed Hat Red Hat 2026-W25

rsync security update

2026-06-16 RHSA-2026:26410

highRed Hat Red Hat 2026-W25

Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU

2026-06-16 CVE-2026-34268

highIBM 2026-W25

Security Bulletin: Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Apr 2026 - Includes OpenJDK April 2026 CPU plus CVE-2026-6918

2026-06-16 CVE-2026-34282

highIBM 2026-W25

Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Node.js module file-type ( CVE-2026-31808 )

2026-06-16 CVE-2026-31808

mediumIBM 2026-W25

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js module path-to-regexp

2026-06-16 CVE-2026-4867

highIBM 2026-W25

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules fast-uri and protobufjs (CVE-2026-6322, CVE-2026-45740 & CVE-2026-6321)

2026-06-16 CVE-2026-6322

highIBM 2026-W25

Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by insufficient verification of data authenticity in PyJWT

2026-06-16 CVE-2026-32597

highIBM 2026-W25

Security Bulletin: IBM Engineering Lifecycle Management - Engineering Test management is impacted by multiple vulnerabilities

2026-06-16 CVE-2022-42003

highIBM 2026-W25

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server

2026-06-16 CVE-2026-44631

criticalIBM 2026-W25

Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities (CVE-2026-23193, CVE-2026-23231, CVE-2026-3497)

2026-06-16 CVE-2026-3497

highIBM 2026-W25

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

2026-06-16 CVE-2026-6638

criticalIBM 2026-W25

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Netty

2026-06-16 CVE-2024-47535

mediumIBM 2026-W25

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071)

2026-06-16 CVE-2026-8646

highIBM 2026-W25

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852)

2026-06-16 CVE-2026-10852

highIBM 2026-W25

Security Bulletin: IBM WebSphere Application Server is affected by an authentication bypass vulnerability (CVE-2026-10845)

2026-06-16 CVE-2026-10845

highIBM 2026-W25

Security Bulletin: IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006)

2026-06-16 CVE-2026-9006

highIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Direct Request ('Forced Browsing') (CVE-2026-22732)

2026-06-16 CVE-2026-22732

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Certificate Validation (CVE-2026-40971, CVE-2026-40974)

2026-06-16 CVE-2026-40974

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') (CVE-2026-40477, CVE-2026-40478)

2026-06-16 CVE-2026-40478

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVE-2024-1597)

2026-06-16 CVE-2024-1597

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)

2026-06-16 CVE-2026-2332

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), URL Redirection to Untrusted Site ('Open Redirect'), and 3 more (CVE-2026-24880, CVE-2026-25854, and 3 more)

2026-06-16 CVE-2026-32990

criticalIBM 2026-W25

Security Bulletin: MongoDB Enterprised Advanced affected by: Use of a Broken or Risky Cryptographic Algorithm, Covert Timing Channel (CVE-2025-14813, CVE-2026-5598)

2026-06-16 CVE-2026-5598

criticalIBM 2026-W25

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

2026-06-16 CVE-2026-33814

highIBM 2026-W25

Security Bulletin: Multiple Vulnerabilities in IBM Datacap

2026-06-16 CVE-2026-45205

mediumIBM 2026-W25

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

2026-06-16 CVE-2026-42579

criticalIBM 2026-W25

Security Bulletin: Security Vulnerabilities were found in IBM Security Verify Directory (CVE-2018-2799, CVE-2022-23437)

2026-06-16 CVE-2018-2799

mediumIBM 2026-W25

thunderbird security update

2026-06-16 RHSA-2026:26174

highRed Hat Red Hat 2026-W25

USN-8349-3: rsync regression

2026-06-16 USN-8349-3

mediumUbuntu Ubuntu 2026-W25

USN-8426-2: Linux kernel (Azure) vulnerabilities

2026-06-16 CVE-2026-43503

mediumUbuntu Ubuntu 2026-W25

USN-8432-1: FreeRDP vulnerabilities

2026-06-16 CVE-2026-45700

mediumUbuntu Ubuntu 2026-W25

USN-8433-1: OpenStack Keystone vulnerabilities

2026-06-16 CVE-2026-44394

mediumUbuntu Ubuntu 2026-W25

USN-8437-1: rabbitmq-c vulnerabilities

2026-06-16 CVE-2026-44235

mediumUbuntu Ubuntu 2026-W25

USN-8438-1: OpenImageIO vulnerabilities

2026-06-16 CVE-2026-43903

mediumUbuntu Ubuntu 2026-W25

USN-8439-1: Linux kernel (Oracle) vulnerabilities

2026-06-16 CVE-2024-35862

mediumUbuntu Ubuntu 2026-W25

USN-8440-1: Linux kernel (Azure) vulnerabilities

2026-06-16 CVE-2026-23262

mediumUbuntu Ubuntu 2026-W25

wireshark security update

2026-06-16 RHSA-2026:26182

highRed Hat Red Hat 2026-W25

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

2026-06-15 CVE-2026-54267

highGitHub GitHub 2026-W25

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling

2026-06-15 CVE-2026-11417

highGitHub GitHub 2026-W25

Cluster Observability Operator 1.5.0

2026-06-15 RHSA-2026:26010

highRed Hat Red Hat 2026-W25

Contao: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

2026-06-15 WID-SEC-2026-1921

lowBSI 2026-W25

Erlang/OTP: Mehrere Schwachstellen

2026-06-15 WID-SEC-2026-1887

mediumBSI 2026-W25

Important: gimp security update

2026-06-15 RHSA-2026:25899

highRed Hat Red Hat 2026-W25

Important: gimp security update

2026-06-15 RHSA-2026:25901

highRed Hat Red Hat 2026-W25

Important: gimp security update

2026-06-15 RHSA-2026:25907

highRed Hat Red Hat 2026-W25

Important: libtiff security update

2026-06-15 RHSA-2026:25910

highRed Hat Red Hat 2026-W25

Important: osbuild-composer security update

2026-06-15 RHSA-2026:26054

highRed Hat Red Hat 2026-W25

Important: postfix security update

2026-06-15 RHSA-2026:25930

highRed Hat Red Hat 2026-W25

Important: postfix security update

2026-06-15 RHSA-2026:25932

highRed Hat Red Hat 2026-W25

Important: redis:6 security update

2026-06-15 RHSA-2026:26008

highRed Hat Red Hat 2026-W25

Important: samba security update

2026-06-15 RHSA-2026:25979

highRed Hat Red Hat 2026-W25

Important: valkey security update

2026-06-15 RHSA-2026:25925

highRed Hat Red Hat 2026-W25

Important: webkit2gtk3 security update

2026-06-15 RHSA-2026:25918

highRed Hat Red Hat 2026-W25

Important: webkit2gtk3 security update

2026-06-15 RHSA-2026:25927

highRed Hat Red Hat 2026-W25

libssh security update

2026-06-15 RHSA-2026:25911

mediumRed Hat Red Hat 2026-W25

Moderate: mysql:8.0 security update

2026-06-15 RHSA-2026:25919

mediumRed Hat Red Hat 2026-W25

Moderate: yggdrasil-worker-package-manager security update

2026-06-15 RHSA-2026:25999

mediumRed Hat Red Hat 2026-W25

Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature

2026-06-15 CVE-2026-50560

mediumGitHub GitHub 2026-W25