Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MALWAREBYTES:70...

Nearly 15,000 infected websites cleaned in SocGholish crackdown_MALWAREBYTES:705B2D633D6C25DA1D25345CF3273B27

We’re always happy to end the week with some positive news. A law enforcement action called Operation Endgame just delivered a major win against th...

N/A N/A MALWAREBYTES
NONE HACKREAD:CDD4B7...

Meteor 3.0 Migration Helped Rocket.Chat Move Off End-of-Life Node.js Runtime_HACKREAD:CDD4B73BFA0E5B80AED134963121A750

Meteor 3.0 helped Rocket.Chat move from Node.js 14 to Node.js 20, cutting runtime debt after Fibers removal and reducing supply-chain risk across f...

N/A N/A HACKREAD
MEDIUM 5.3 CVE-2026-12622

Open Redirect Vulnerability in Password Reset Submission in GridTime™ 3000 GNSS Time Server_CVE-2026-12622

The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: fr...

Microchip GridTime 3000 1.0r0.03 CVE
MEDIUM 5.3 CVE-2026-12621

Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time Server_CVE-2026-12621

Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue a...

Microchip GridTime 3000 1.0r0.03 CVE
MEDIUM 4.6 CVE-2026-12620

Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server_CVE-2026-12620

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03...

Microchip GridTime 3000 1.0r0.03 CVE
MEDIUM 5.1 CVE-2026-12619

GridTime™ 3000 GNSS Time Server CSRF to XSS_CVE-2026-12619

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-S...

Microchip GridTime 3000 1.0r0.03 CVE
HIGH 8.1 CVE-2026-56211

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames_CVE-2026-56211

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encode...

Red Hat Red Hat Enterprise Linux 10 CVE
HIGH 8.2 CVE-2026-56210

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id_CVE-2026-56210

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable ...

Red Hat Red Hat Enterprise Linux 10 CVE
CRITICAL 9.1 CVE-2026-56209

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack_CVE-2026-56209

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable V...

Red Hat Red Hat Enterprise Linux 10 CVE
HIGH 8.6 CVE-2026-56208

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode_CVE-2026-56208

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing...

Red Hat Red Hat Enterprise Linux 10 CVE