Vendor CNA Record
Elixir grpc_server 1.0.6 Fixes Streaming Memory ExhaustionNew!!
Elixir grpc_server 1.0.6 fixes streaming memory exhaustion. Upgrade exposed streaming RPC services, check message limits, and retain deployment evidence.
Qt 6.8.10, 6.11.3, and 6.12.1 Fix CBOR Conversion Flaw
Qt fixed crafted-CBOR conversion crashes and possible memory-safety impact in 6.8.10, 6.11.3, and 6.12.1. Rebuild apps, test, and retain evidence.
Elixir 1.18.6, 1.19.7, and 1.20.5 Fix Three Flaws
Elixir 1.18.6, 1.19.7, and 1.20.5 fix parser denial of service and a local Mix flaw. Update runtimes and build hosts, test, and retain evidence.
pgAdmin 4 9.19 Fixes 15 Security Vulnerabilities
pgAdmin 4 9.19 fixes 15 flaws, including critical query-export command injection. Upgrade, review server-mode changes, validate, and retain evidence.
Mattermost Updates Fix Agents Plugin Replacement Flaw
Mattermost updates fix an Agents plugin path traversal leading to plugin replacement and code execution. Update, validate, and retain evidence.
Postiz 2.25.3 Fixes File Read and Token Forgery Flaws
Postiz 2.25.3 fixes arbitrary file read and token forgery. Upgrade promptly, preserve relevant evidence, validate access, and retain change proof.
HCL BigFix Updates CA Bundle After Certificate Compromise
HCL BigFix requires a current CA bundle after certificate compromise. Deploy BES Support v1520, validate downloads and TLS, and retain evidence.
Postiz 2.25.2 Fixes Provider-Method File Read and Crash
Postiz 2.25.2 fixes internal provider-method abuse that can read server files or crash the backend. Preserve evidence, upgrade, validate, and retain proof.
MongoDB Ops Manager 8.0.27 Fixes Three Authorization and Availability Vulnerabilities
MongoDB issued CVE-2026-87108 and 2 related advisories. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
Eufy Omni C20 and X10 Pro Firmware Update Addresses Three Vulnerabilities
Eufy recommends firmware 1.6.4 or later for affected Omni C20 and X10 Pro models. Check model-specific flaw coverage and confirm running firmware; updating the management app or queuing a download alone is insufficient.