NewsThe Register — Security
Linux kernel team publishes 432 CVEs in two days
Teaser from the source
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on publishes
Other advisories
- HighCVE-2026-121862The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, and publishes them without mo…
- MediumCVE-2026-105935The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configur…
- Not ratedosv:CVE-2026-91059JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size
- CriticalCVE-2026-77933DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes po…
- HighCVE-2026-110849n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an …
- MediumCVE-2026-103870A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or …
- HighCVE-2026-95847Moquette publishes Last-Will messages without enforcing write authorization
- HighCVE-2026-95846Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite auth…
Other news entries
- b14g: about 97M CORE drained from its Core staking contracts; contracts pausedBreachpwn.watch
- In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI ChatsNewsSecurityWeek
- OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public FilesNewsThe Hacker News
- Security leaders must prepare for likely threats, not sensationalized agentic attacksNewsCSO Online
- CISA Publishes Logging Reference ArchitectureVulnerabilitySANS NewsBites
- NIST Publishes Request for Information on Modernizing the National Vulnerability Database in the Age of Artificial IntelligenceVulnerabilitySANS NewsBites
- Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as GitNewsThe Hacker News
- CISA Publishes Guidance for Agencies on Adopting SASE for Zero TrustNewsSANS NewsBites
ID