Vulnerabilities and CVEs
Thu 8 Oct 202612 entries
Re: CVE-2026-59265: Apache OpenOffice: Opening a malicious document can lead to system takeover
CVE-2026-59265oss-security
CVE-2026-71896: Apache DolphinScheduler: Missing Authorization Checks Allow Unauthorized Disclosure of User Account Information
CVE-2026-71896oss-security CVE-2026-71895: Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials
CVE-2026-71895oss-security CVE-2026-71183: Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords
CVE-2026-71183oss-security CVE-2026-66087: Apache DolphinScheduler: Project Authorization Bypass in the Task instance stop/savepoint Endpoint
CVE-2026-66087oss-security CVE-2026-66084: Apache DolphinScheduler: Project Authorization Bypass in the Task Definition with-upstream Endpoint
CVE-2026-66084oss-security CVE-2026-66082: Apache DolphinScheduler: Cross-project authorization bypasses in DolphinScheduler API (schedule / workflow）
CVE-2026-66082oss-security 
tor-0.4.9.14 released
oss-security Chrome for Android Update
Chrome ReleasesWed 7 Oct 20268 entries
USN-8896-1: GStreamer Ugly Plugins vulnerabilities
Ubuntu Security
Four Compliance Frameworks, One Security Team. How Universities Can Stop Drowning in Regulatory Risk
Rapid7
USN-8900-1: Go Networking vulnerabilities
CVE-2022-27664Ubuntu Security SonicWall security advisory (AV26-1017)
Canadian Centre for Cyber Security
wolfSSL security advisory (AV26-1016)
Canadian Centre for Cyber Security