Our news and updates

In NGINX Ingress Controller component for NGINX in affected versions a high severity vulnerability CVE-2026-55723 was detected. This vulnerability allows an attacker to inject malicious configuration into NGINX. To address this issue, users should upgrade NGINX Ingress Controller to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-55723.

In Academy LMS component for WordPress versions 3.8.0 and earlier a medium severity vulnerability CVE-2026-9341 was detected. This vulnerability allows authenticated attackers to read, overwrite, or delete private lesson notes and falsify lesson progress for other users. To address this issue, users should upgrade Academy LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9341.

In Apache Kylin versions before 5.0.4 a critical severity vulnerability CVE-2026-62392 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62392.

In Apache Kylin versions 4 through 5.0.3 a medium severity vulnerability CVE-2026-62393 was detected. This vulnerability allows an attacker to get access to unauthorized jobs in other projects. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62393.

In Apache Kylin versions 4 through 5.0.3 a critical severity vulnerability CVE-2026-62390 was detected. This vulnerability allows an attacker to execute arbitrary SQL commands. To address this issue, users should upgrade Apache Kylin to version 5.0.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-62390.

In Nexus Repository a high severity vulnerability CVE-2026-11403 was detected. This vulnerability allows a remote attacker to gain unauthorized access to repository operations. To address this issue, users should upgrade Nexus Repository to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11403.

In Apache Airflow versions prior to 3.7.2 a high severity vulnerability CVE-2026-59245 was detected. This vulnerability allows a low-privileged user to escalate privileges and gain read/edit access to all DAGs. To address this issue, users should upgrade Apache Airflow to version 3.7.2 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59245.

In Smart Slider 3 component for WordPress versions 3.5.1.37 and earlier a medium severity vulnerability CVE-2026-12385 was detected. This vulnerability allows authenticated attackers to extract titles and full content excerpts of various types of posts. To address this issue, users should upgrade Smart Slider 3 to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12385.

In the Git provider component for Apache Airflow versions 0.4.0 and earlier a high severity vulnerability CVE-2026-58065 was detected. This vulnerability allows a man-in-the-middle attacker to intercept credentials and inject malicious content. To address this issue, users should upgrade the Git provider to version 0.4.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-58065.