Advisories 3 August 2026

GitLab July 2026 Security Release Patches 13 Vulnerabilities Including Unauthenticated DoS, CI/CD Tampering, and AI Prompt Injection (CVE-2026-15975 and Others)

Scope: GitLab Community Edition and Enterprise Edition Versions 11.8 through 19.2.0 (Self-

Advisories 3 August 2026
IBM WebSphere Application Server Unauthenticated SSRF via SIP Container Enables Internal Network Compromise (CVE-2026-14529)

Scope: IBM WebSphere Application Server Traditional 8.5 and 9.0 / WebSphere Application Se

Advisories 29 July 2026
NGINX – Heap Buffer Overflow (CVE-2026-42533)

Scope: NGINX Plus and NGINX Open Source (Co

Advisories 29 July 2026
BlackBerry UEM Management Console – Cross-Site Scripting (CVE-2026-18084)

Scope: BlackBerry UEM Management Console,

Advisories 29 July 2026
WordPress Coding Standards – Code Injection (CVE-2026-45293)

Scope: WordPress Coding Standards (WordPres

Advisories 29 July 2026
GitHub MCP Server – NULL Pointer Dereference Denial of Service (CVE-2026-47427)

Scope: GitHub MCP Server, Versions Prior

Advisories 29 July 2026
NVIDIA DCGM Exporter – Uncontrolled Resource Consumption Denial of Service (CVE-2026-47483)

Scope: NVIDIA DCGM Exporter

Advisories 29 July 2026
Adobe Photoshop Installer – Uncontrolled Search Path Element (DLL Hijacking) (CVE-2026-48388)

Scope: Adobe Photoshop Installer Componen

Advisories 27 July 2026
Devolutions PowerShell Universal Cleartext Storage of Secret Variables Allows Local Credential Theft (CVE-2026-16802)

Scope: Devolutions PowerShell Universal Versions 2026.2.2 and Earlier (No Vault Configured

Advisories 27 July 2026
Microsoft Azure Portal Unauthenticated Information Disclosure Server-Side Patched (CVE-2026-62835)

Scope: Microsoft Azure Portal (All Tenants, Exclusively Cloud-Hosted Service)

Subscribe to