DE EN FR
hlukh.ch Snapshot built: 21 Sept 2026, 15:23 CEST · Latest advisory date: 2026-08-11 · week: 2026-W28

Security Warnings

Curated from public advisories. Focus on visibility, context and fast export. No clickbait.

Latest warnings
IBM:7279479 Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control…
2026‑08‑11·IBM:7279479High
IBM 2026‑08‑11 High
WID-SEC-2026-2251 Drupal Module: Mehrere Schwachstellen
2026‑07‑23·WID-SEC-2026-2251High
BSI 2026‑07‑23 High
USN-8490-2 Linux kernel (Real-time) vulnerabilities
2026‑07‑17·USN-8490-2Medium
Ubuntu 2026‑07‑17 Medium
RHSA-2026:38279 Red Hat Hardened Images RPMs Security Update
2026‑07‑12·RHSA-2026:38279Low
Red Hat 2026‑07‑12 Low
RHSA-2026:38304 Red Hat Hardened Images RPMs Security Update
2026‑07‑12·RHSA-2026:38304Low
Red Hat 2026‑07‑12 Low
RHSA-2026:38342 Red Hat Hardened Images RPMs Security Update
2026‑07‑12·RHSA-2026:38342Low
Red Hat 2026‑07‑12 Low
IBM:7279533 Vulnerability in follow-redirects bundled with IBM Fusion and IBM Fusion HCI
2026‑07‑11·IBM:7279533Medium
IBM 2026‑07‑11 Medium
IBM:7279687 Vulnerability in undici bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage
2026‑07‑11·IBM:7279687Medium
IBM 2026‑07‑11 Medium
IBM:7279688 Vulnerability in bytes bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage
2026‑07‑11·IBM:7279688Medium
IBM 2026‑07‑11 Medium
RHSA-2026:38187 Red Hat Hardened Images RPMs bug fix and enhancement update
2026‑07‑11·RHSA-2026:38187Low
Red Hat 2026‑07‑11 Low
RHSA-2026:38236 Red Hat Hardened Images RPMs Security Update
2026‑07‑11·RHSA-2026:38236High
Red Hat 2026‑07‑11 High
GHSA-28JH-G32X-V9V4 Tesla vulnerable to multipart part smuggling via unescaped `content-disposition` values
2026‑07‑10·GHSA-28JH-G32X-V9V4Low
GitHub 2026‑07‑10 Low
GHSA-48RX-C7PG-Q66R Excon does not redact additional sensitive/risky headers when following redirects
2026‑07‑10·GHSA-48RX-C7PG-Q66RMedium
GitHub 2026‑07‑10 Medium
GHSA-56MP-4F3V-FGJ2 SiYuan: Stored XSS to RCE via Unsanitized Attribute View Asset Cell Content
2026‑07‑10·GHSA-56MP-4F3V-FGJ2Medium
GitHub 2026‑07‑10 Medium
GHSA-9M9W-GXF7-RH8M Tesla: Authorization header leaks on cross-origin redirect via case-sensitive filtering
2026‑07‑10·GHSA-9M9W-GXF7-RH8MHigh
GitHub 2026‑07‑10 High
GHSA-FPG8-7664-JC5Q melange: Incomplete package integrity verification allows data section substitution
2026‑07‑10·GHSA-FPG8-7664-JC5QMedium
GitHub 2026‑07‑10 Medium
GHSA-G936-7JQJ-MWV8 TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation
2026‑07‑10·GHSA-G936-7JQJ-MWV8Medium
GitHub 2026‑07‑10 Medium
GHSA-H4G2-XFMW-Q2C9 Clauster: Non-loopback deployments can serve the dashboard unauthenticated when auth.enabled is unset
2026‑07‑10·GHSA-H4G2-XFMW-Q2C9Medium
GitHub 2026‑07‑10 Medium
GHSA-H74C-Q9J7-MPCM Tesla vulnerable to atom exhaustion via untrusted URL scheme
2026‑07‑10·GHSA-H74C-Q9J7-MPCMHigh
GitHub 2026‑07‑10 High
GHSA-M5F5-28QR-9G9R prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
2026‑07‑10·GHSA-M5F5-28QR-9G9RMedium
GitHub 2026‑07‑10 Medium
Page 1 / 19 · 375 warnings