Our news and updates

In Redash versions from 5.0.2 to 26.3.0 a medium severity vulnerability CVE-2026-33213 was detected. This vulnerability allows attackers to redirect users to malicious external websites. To address this issue, users should upgrade Redash to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-33213.

In NGINX a high severity vulnerability CVE-2026-42533 was detected. This vulnerability allows an attacker to cause a denial of service. To address this issue, users should upgrade NGINX to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-42533.

In ngx_http_ssi_module component for NGINX certain versions a medium severity vulnerability CVE-2026-56434 was detected. This vulnerability allows an attacker to potentially access sensitive information. To address this issue, users should upgrade NGINX to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56434.

In NGINX in versions prior to the patched release a medium severity vulnerability CVE-2026-52865 was detected. This vulnerability allows an authenticated attacker to cause the Ingress Controller process to terminate. To address this issue, users should upgrade NGINX to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-52865.

In NGINX Ingress Controller component for NGINX in affected versions a high severity vulnerability CVE-2026-55723 was detected. This vulnerability allows an attacker to inject malicious configuration into NGINX. To address this issue, users should upgrade NGINX Ingress Controller to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55723.

In Academy LMS component for WordPress versions 3.8.0 and earlier a medium severity vulnerability CVE-2026-9341 was detected. This vulnerability allows authenticated attackers to read, overwrite, or delete private lesson notes and falsify lesson progress for other users. To address this issue, users should upgrade Academy LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9341.

In Apache Kylin versions before 5.0.4 a critical severity vulnerability CVE-2026-62392 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62392.

In Apache Kylin versions 4 through 5.0.3 a medium severity vulnerability CVE-2026-62393 was detected. This vulnerability allows an attacker to get access to unauthorized jobs in other projects. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62393.

In Apache Kylin versions 4 through 5.0.3 a critical severity vulnerability CVE-2026-62390 was detected. This vulnerability allows an attacker to execute arbitrary SQL commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62390.