Schwachstellen, die jetzt zählen.

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

DSA-6618-1 openexr - security update

Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

thunderbird: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts

DSA-6619-1 spip - security update

keycloak-services: keycloak-services: Delegated admin escalates to realm-admin via group move

A flaw was found in the group-move and organization group reparenting endpoints of the keycloak-services component. This component is responsible for core authentication and authorization services in the Red Hat build of Keycloak. The issue occurs because the system fails to check if a target parent group confers administrative roles when a group is moved. A delegated administrator can exploit this to move a group they control under an administrative group, causing all…

Red Hat Enterprise Linux (crun, xfsprogs, glib-networking): Mehrere Schwachstellen

A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in arbitrary command execution and local privilege escalation depending on how xfs_admin is executed.

Red Hat Enterprise Linux: Mehrere Schwachstellen

A flaw was found in Cockpit. A local authenticated user with control over a target account's home directory can exploit a privileged symlink dereference vulnerability in the `ssh-add-public-key.sh` helper. When this helper runs with elevated privileges, it can be tricked into following attacker-controlled symlinks within the `.ssh` or `authorized_keys` paths. This allows the attacker to arbitrarily change file ownership and modes, potentially leading to local privilege…

Red Hat Enterprise Linux: Mehrere Schwachstellen

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the `cockpit-ws` service.

Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Aspire. This advisory provides guidance on updating affected applications and components. Disclosure of an Aspire Dashboard authentication cookie to a linked service can allow an attacker-controlled container to replay the authenticated session and execute code as the host developer. ## Announcement Announcement for this issue can be found at…

Fortinet Produkte: Mehrere Schwachstellen

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.

AMD Prozessor und AMD Radeon: Mehrere Schwachstellen

Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.

React: Unauthenticated Remote Code Execution in React Server Components

### Impact Crafted payloads targeting frameworks supporting React Server Components can lead to remote code execution. This only affects extremely rare cases where responses transport multiple typed arrays and an attacker-controlled value. Updating immediately is recommended. The vulnerability exists in versions 19.0.0 through 19.0.8, 19.1.0 through 19.1.9, 19.2.0 through 19.2.8 and 19.3.0 of: - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack…

The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer, allowing prompts to…

The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache key which may allow a…

The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or Proxy-Authorization…

The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response cached for one caller to…