CVE news

Palo Alto Networks warns a medium-severity security flaw in its PAN-OS and Prisma Access products is under active attack. The vulnerability, CVE-2026-0257, allows attackers to bypass authentication and potentially establish unauthorized VPN connections, posing a significant risk to affected networks.

An attacker exploited a vulnerability in a Marimo notebook (CVE-2026-39987) to gain access to a system. They then used a large language model (LLM) agent to perform post-compromise actions, including stealing cloud credentials. This marks a new evolution in automated attack techniques.

The Kubernetes project is correcting historical CVE records for some older, unfixed vulnerabilities. This update will cause vulnerability scanners to flag new issues that were previously miscategorized. Teams should prepare to reassess their security posture based on the updated data before 2026.

Multiple security vulnerabilities have been discovered in the Linux kernel, affecting its cryptographic API and packet sockets. A significant flaw, dubbed "Copy Fail," could allow a local attacker to escalate privileges or even escape a container, potentially leading to a full system compromise. An update has been released.

Critical vulnerabilities have been found in the SEPPMail Secure E-Mail Gateway, an enterprise email security solution. Attackers could exploit these flaws to execute code remotely, read all email traffic passing through the appliance, and potentially gain access to the company's internal network, posing a significant security risk.

Ubuntu has patched multiple vulnerabilities in Unbound, a popular DNS resolver. The flaws could allow remote attackers to cause a denial of service or, in some cases, execute arbitrary code. One critical issue affects recent Ubuntu LTS versions, making immediate updates essential for affected systems.

Proof-of-concept exploit code, named DirtyDecrypt, has been publicly released for a recently patched Linux kernel vulnerability. The flaw allows for local privilege escalation, enabling an attacker with local access to gain higher-level system permissions. The vulnerability was discovered and reported by security researchers in early May.

A nine-year-old vulnerability (CVE-2026-46333) has been found in the Linux kernel. The flaw, caused by improper privilege management, allows a local user without special permissions to access sensitive files and execute commands with root privileges on default installations of several major Linux distributions.

Ubuntu has patched several Linux kernel vulnerabilities, including two in its OverlayFS file system. These flaws could allow a local attacker to bypass permission checks and gain elevated privileges, potentially leading to unauthorized system control. Users should update their systems immediately to mitigate the risk.

Ubuntu has issued a security notice detailing several vulnerabilities discovered in the Linux kernel. The flaws affect network drivers, NVME drivers, and IPv4 networking subsystems. An attacker could potentially exploit these issues to compromise a system, making the provided security update essential for all users.

A new vulnerability called YellowKey allows attackers with access to a Windows device to bypass Bitlocker encryption and access files. Microsoft is working on a permanent patch for the flaw (CVE-2026-45585) and has released temporary mitigation steps for companies to implement immediately.

Multiple vulnerabilities have been found in the GnuTLS library, a core component for secure communications. The flaws could allow attackers to cause a denial of service, access sensitive information, or potentially execute arbitrary code by sending specially crafted data during a DTLS handshake.

Ubuntu has released security updates for the Linux kernel on Xilinx ZynqMP systems. These patches address multiple vulnerabilities, including critical flaws in the OverlayFS implementation that could allow a local attacker to gain elevated privileges and compromise the security of affected devices.

Researchers have discovered two vulnerabilities in OpenVPN. One flaw could allow an attacker to crash the service, causing a denial of service. The second could leak sensitive data from previous sessions under specific conditions, potentially exposing private information. Both issues affect the handling of network packets.

Microsoft has released a mitigation for a BitLocker security bypass vulnerability known as "YellowKey." The zero-day flaw, tracked as CVE-2026-45585, was publicly disclosed last week and carries a CVSS score of 6.8, affecting the Windows disk encryption feature.

Ubuntu has released a security update for the Linux kernel, fixing several vulnerabilities. The most critical flaw, known as Copy Fail, could allow a local attacker to escalate privileges or escape from a container. The patch also addresses issues in various other kernel subsystems to prevent system compromise.

A proof-of-concept exploit is now public for a high-severity Linux kernel vulnerability dubbed 'DirtyDecrypt.' The flaw allows a local user to gain root privileges on systems with the `rxgk` module enabled. Major distributions are affected, and patches are available. Teams should update their systems immediately.

Ubuntu has patched several vulnerabilities in the Linux kernel. One major flaw, known as 'Copy Fail,' could allow a local attacker to escalate privileges or escape a container. Other issues were found in subsystems like networking, cryptography, and I/O, which could also lead to system compromise.

Ubuntu has patched two vulnerabilities in the rsync utility. One flaw could allow a remote attacker to cause a denial of service, while another could let a local attacker overwrite files on systems with specific configurations. The issues affect recent versions of Ubuntu, including 22.04 and 24.04 LTS.

Ubuntu has patched several vulnerabilities in the Linux kernel. A key flaw, dubbed "Copy Fail," could allow a local attacker to escalate privileges or escape a container. Other issues affect the cryptographic API, packet sockets, and TLS protocol, potentially leading to system compromise.

Ubuntu has issued a security notice for multiple Linux kernel vulnerabilities. The update patches several flaws, including a critical issue in a cryptographic module dubbed "Copy Fail." This specific vulnerability could allow a local attacker to gain elevated privileges or potentially escape from a container environment.

Drupal has issued security updates for a highly critical vulnerability in its Core software, tracked as CVE-2026-9082. The flaw affects sites using a PostgreSQL database and could allow attackers to execute remote code, escalate privileges, or access sensitive information. Immediate patching is strongly recommended.

A new zero-day vulnerability in Microsoft Exchange, identified as CVE-2026-42897, is being actively exploited. The flaw is a cross-site scripting (XSS) issue that allows attackers to compromise Outlook Web Access (OWA) mailboxes. Microsoft has not yet released a patch to fix the vulnerability.

A Windows vulnerability in the Cloud Filter driver, thought to be patched six years ago, is still exploitable. A security researcher has demonstrated a new method to exploit the flaw, allowing an attacker to gain full SYSTEM-level privileges on an affected machine.

A critical security flaw in NGINX Plus and NGINX Open is being actively exploited in the wild, just days after it was disclosed. The vulnerability, CVE-2026-42945, is a heap buffer overflow affecting a wide range of NGINX versions from 0.6.27 through 1.30.0.

A spoofing vulnerability in Microsoft Exchange Outlook Web Access (OWA) is being actively exploited. The U.S. CISA is urging organizations to prioritize patching. Microsoft has released a fix and recommends enabling Extended Protection for Exchange Server (EEMS) to mitigate the significant risk.