Proactive Insights and Support For Open-Source Applications
  • Applications
  • Platform
  • Support
  • Resources
    • OSS Research
    • FAQ
    • Newsflash
    • OSSpedia
    • How-to Guides
    • Case Studies
    • Articles
  • Company
    • About Us
    • The OSS in Hossted
  • Contact
Book a demo
Book a demo
  • Applications
  • Platform
  • Support
  • Resources
    • OSS Research
    • FAQ
    • Newsflash
    • OSSpedia
    • How-to Guides
    • Case Studies
    • Articles
  • Company
    • About Us
    • The OSS in Hossted
  • Contact
  • Home
  • Knowledge Base
  • Newsflash

Our news and updates

All OSSpediaArticlesHow ToNewsflashCase Studies
Don't Miss out!
Join our newsletter for exclusive updates on open source innovations.

    Choose category
    • Communication
      • Communication
    • Communication and Collaboration
      • Communication
    • Specialized Software
      • Educational
      • Graphic Design
    • Business and Enterprise Solutions
      • Customer Service
      • Productivity
      • Supply Chain Management (SCM)
      • CRM
      • E-commerce
      • CMS
      • Marketing Automation
      • ERP
    • Project and Agile Management
      • Project Management
      • IT Business Management
    • Infrastructure and Network
      • CMS
      • Networking
      • Storage
      • Security
    • DevOps
      • Virtualization
      • DevOps
      • Mobile App Development
      • Backup and Recovery
      • Data Analytics
      • Web Development
      • Developer Stacks
      • Cloud Computing
      • Monitoring
      • Application Development
      • Developer Tools
    • Data Management and Analytics
      • Communication
      • Application Development
      • Analytics
      • Machine Learning
      • Database
      • Data Analytics
    2 Sep 2026 DevOps
    Zabbix: Out-of-Bounds Read Vulnerability

    In Zabbix in affected versions a medium severity vulnerability CVE-2026-23935 was detected. This vulnerability allows an administrator to read out of bounds memory, leading to potential confidentiality loss. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23935.

    Read more
    Monitoring
    2 Sep 2026 Infrastructure and Network
    Keycloak: Improper Authorization in Group Policy Provider

    In Keycloak a medium severity vulnerability CVE-2026-19608 was detected. This vulnerability allows an attacker to gain unauthorized access to protected resources. To address this issue, users should upgrade Keycloak to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19608.

    Read more
    Security
    2 Sep 2026 DevOps
    Zabbix: Cryptographic Key Exposure in Frontend Sessions

    In Zabbix version 7.4 a high severity vulnerability CVE-2026-23933 was detected. This vulnerability allows attackers to forge valid session cookies, potentially leading to unauthorized access. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23933.

    Read more
    Monitoring
    2 Sep 2026 DevOps
    Zabbix: PSK Key Extraction Vulnerability

    In Zabbix a medium severity vulnerability CVE-2026-23937 was detected. This vulnerability allows authenticated users to extract a host’s PSK key leading to potential loss of data integrity. To address this issue, users should upgrade Zabbix to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-23937.

    Read more
    Monitoring
    1 Sep 2026 Communication and Collaboration
    Mattermost: Improper Access Control

    In Mattermost versions 11.7.6 and earlier, and 11.8.3 and earlier a medium severity vulnerability CVE-2026-15754 was detected. This vulnerability allows an authenticated team administrator to remove ABAC policy assignments from channels outside their team. To address this issue, users should upgrade Mattermost to version 11.7.7 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15754.

    Read more
    Communication
    1 Sep 2026 Communication and Collaboration
    Mattermost: Allows Modification of Completed Playbook Runs

    In Mattermost versions 11.7.6 and earlier, and 10.11.21 and earlier a medium severity vulnerability CVE-2026-16046 was detected. This vulnerability allows a run participant to modify the details of completed playbook runs. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16046.

    Read more
    Communication
    1 Sep 2026 Communication and Collaboration
    Mattermost: Guest User Privilege Escalation via Board Archive Import

    In Mattermost versions 11.7.x <= 11.7.6 and 10.11.x <= 10.11.21 a medium severity vulnerability CVE-2026-16044 was detected. This vulnerability allows a board member to escalate a guest user to Board Admin by importing a crafted archive file. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16044.

    Read more
    Communication
    1 Sep 2026 Communication and Collaboration
    Mattermost: Privilege Escalation Vulnerability

    In Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 a medium severity vulnerability CVE-2026-16044 was detected. This vulnerability allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. To address this issue, users should upgrade Mattermost to version 10.11.22 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16044.

    Read more
    Communication
    1 Sep 2026 DevOps
    Python: Data extraction vulnerability in openssl_encrypt

    In openssl_encrypt component for Python versions before 1.4.0 a high severity vulnerability CVE-2026-74874 was detected. This vulnerability allows attackers who know the password to predict pixel locations and extract hidden data. To address this issue, users should upgrade openssl_encrypt to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74874.

    Read more
    Application Development
    Proactive Insights and Support For Open-Source Applications
    Contact us: Whatsapp
    Company
    • About Hossted
    • Data Processing Addendum
    Solutions
    • Applications
    • Support Plans
    • About Solution
    Resources
    • FAQ
    • Knowledge Base

    © HOSSTED 2026 All rights reserved

    • Privacy Policy
    • Terms and Conditions
    • Cookies Policy
    Cookie Settings

    We use cookies to measure marketing efforts and improve our services. Please review the cookie settings and confirm your choice.

    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    • Manage options
    • Manage services
    • Manage {vendor_count} vendors
    • Read more about these purposes
    View preferences
    • {title}
    • {title}
    • {title}