Our news and updates

In OrdaSoft Joomla Gallery component for Joomla versions earlier than 6.2.7 a critical severity vulnerability CVE-2026-88857 was detected. This vulnerability allows an authenticated user to achieve remote code execution. To address this issue, users should upgrade OrdaSoft Joomla Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-88857.

In Web to Print Online Designer component for WordPress versions before 2.15.0 a critical severity vulnerability CVE-2026-82187 was detected. This vulnerability allows unauthenticated attackers to upload arbitrary files and achieve remote code execution. To address this issue, users should upgrade Web to Print Online Designer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-82187.

In the foreman_ansible plugin component for Foreman in unpatched versions a medium severity vulnerability CVE-2026-92894 was detected. This vulnerability allows an authenticated attacker to delete arbitrary configuration override values. To address this issue, users should upgrade the foreman_ansible plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-92894.

In foreman_ansible plugin component for Foreman in affected versions a medium severity vulnerability CVE-2026-92893 was detected. This vulnerability allows an attacker to bypass host view permissions and access restricted information. To address this issue, users should upgrade Foreman to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-92893.

In Redis in affected versions a high severity vulnerability CVE-2026-92925 was detected. This vulnerability allows an attacker to cause a denial of service or potentially execute arbitrary code. To address this issue, users should upgrade Redis to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-92925.

In Mattermost versions 6.2.2.0 and earlier a low severity vulnerability CVE-2026-12284 was detected. This vulnerability allows a malicious server to disconnect a user’s active call. To address this issue, users should upgrade Mattermost to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12284.

In MariaDB Connector/J component for MariaDB versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9 a low severity vulnerability CVE-2026-61700 was detected. This vulnerability allows a malicious server to read local files on the client. To address this issue, users should upgrade MariaDB Connector/J to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-61700.

In Apache Airflow versions prior to 0.10.0 a critical severity vulnerability CVE-2026-76186 was detected. This vulnerability allows an authenticated attacker to escalate their privileges by using another user’s Keycloak tokens. To address this issue, users should upgrade Apache Airflow to version 0.10.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-76186.

In Keycloak provider component for Apache Airflow versions before 0.10.0 a critical severity vulnerability CVE-2026-76187 was detected. This vulnerability allows an attacker to bypass authentication using credentials from an unrelated application. To address this issue, users should upgrade the Keycloak provider to version 0.10.0 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-76187.