Proactive Insights and Support For Open-Source Applications
  • Applications
  • Platform
  • Support
  • Resources
    • OSS Research
    • FAQ
    • Newsflash
    • OSSpedia
    • How-to Guides
    • Case Studies
    • Articles
  • Company
    • About Us
    • The OSS in Hossted
  • Contact
Book a demo
  • Applications
  • Platform
  • Support
  • Resources
    • OSS Research
    • FAQ
    • Newsflash
    • OSSpedia
    • How-to Guides
    • Case Studies
    • Articles
  • Company
    • About Us
    • The OSS in Hossted
  • Contact
  • Home
  • Knowledge Base
  • Newsflash

Our news and updates

All OSSpediaArticlesHow ToNewsflashCase Studies
Don't Miss out!
Join our newsletter for exclusive updates on open source innovations.

    Choose category
    • Communication
      • Communication
    • Communication and Collaboration
      • Utility
      • Communication
    • Specialized Software
      • Educational
      • Graphic Design
    • Business and Enterprise Solutions
      • Customer Service
      • Productivity
      • Supply Chain Management (SCM)
      • CRM
      • E-commerce
      • CMS
      • Marketing Automation
      • ERP
    • Project and Agile Management
      • Project Management
      • IT Business Management
    • Infrastructure and Network
      • Operating Systems
      • CMS
      • Networking
      • Storage
      • Security
    • DevOps
      • CI/CD
      • Virtualization
      • DevOps
      • Mobile App Development
      • Backup and Recovery
      • Data Analytics
      • Web Development
      • Developer Stacks
      • Cloud Computing
      • Monitoring
      • Application Development
      • Developer Tools
    • Data Management and Analytics
      • Communication
      • Application Development
      • Analytics
      • Machine Learning
      • Database
      • Data Analytics
    14 Oct 2026 DevOps
    Kubernetes: Path Traversal Vulnerability in kubectl cp on Windows

    In affected versions of Kubernetes a medium severity vulnerability CVE-2026-19444 was detected. This vulnerability allows an attacker to write files to arbitrary paths on the user’s machine. To address this issue, users should upgrade Kubernetes to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19444.

    Read more
    Developer Tools
    14 Oct 2026 DevOps
    Apache ActiveMQ: Unsafe Reflection Vulnerability

    In Apache ActiveMQ versions before 2.34.0 a high severity vulnerability CVE-2026-101292 was detected. This vulnerability allows a remote attacker to run arbitrary shell commands. To address this issue, users should upgrade Apache ActiveMQ to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-101292.

    Read more
    Developer Tools
    14 Oct 2026 DevOps
    OpenShift: OS command injection in NooBaa component

    In the NooBaa component for OpenShift earlier versions a high severity vulnerability CVE-2026-86330 was detected. This vulnerability allows attackers to execute arbitrary OS commands. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-86330.

    Read more
    Developer Tools
    13 Oct 2026 Business and Enterprise Solutions
    Joomla: CSRF in image upload in Event Gallery

    In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100747 was detected. This vulnerability allows a third-party site to upload files to an event and overwrite existing files. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100747.

    Read more
    CMS
    13 Oct 2026 Business and Enterprise Solutions
    Joomla: CSRF Vulnerability in Event Gallery

    In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-100748 was detected. This vulnerability allows attackers to perform cross-site request forgery attacks. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100748.

    Read more
    CMS
    13 Oct 2026 Business and Enterprise Solutions
    Joomla: Cross-Site Request Forgery (CSRF) Vulnerability in Event Gallery

    In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100749 was detected. This vulnerability allows an attacker to perform unintended backend cleanup actions via a crafted request. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100749.

    Read more
    CMS
    13 Oct 2026 Business and Enterprise Solutions
    Joomla: Authenticated arbitrary path deletion in Event Gallery extension

    In Event Gallery extension component for Joomla versions 6.5.0 and earlier a high severity vulnerability CVE-2026-97164 was detected. This vulnerability allows an authenticated attacker to recursively delete arbitrary directories. To address this issue, users should upgrade Event Gallery extension to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97164.

    Read more
    CMS
    13 Oct 2026 Business and Enterprise Solutions
    Joomla: Reflected XSS and Open Redirect Vulnerability in Event Gallery

    In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-97165 was detected. This vulnerability allows attackers to execute Reflected Cross-Site Scripting (XSS) and perform open redirects. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97165.

    Read more
    CMS
    12 Oct 2026 Business and Enterprise Solutions
    WordPress: Sensitive Information Exposure in Spectra Legacy – Gutenberg Blocks

    In Spectra Legacy – Gutenberg Blocks component for WordPress versions 2.20.0 and earlier a medium severity vulnerability CVE-2026-16302 was detected. This vulnerability allows authenticated attackers with at least Contributor-level access to extract sensitive data, including Instagram Graph API access tokens. To address this issue, users should upgrade Spectra Legacy – Gutenberg Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16302.

    Read more
    CMS
    Proactive Insights and Support For Open-Source Applications
    Company
    • About Hossted
    • Data Processing Addendum
    Solutions
    • Applications
    • Support Plans
    • About Solution
    Resources
    • FAQ
    • Knowledge Base

    © HOSSTED 2026 All rights reserved

    • Privacy Policy
    • Terms and Conditions
    • Cookies Policy
    Cookie Settings

    We use cookies to measure marketing efforts and improve our services. Please review the cookie settings and confirm your choice.

    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    • Manage options
    • Manage services
    • Manage {vendor_count} vendors
    • Read more about these purposes
    View preferences
    • {title}
    • {title}
    • {title}