Cisco ISE, NGINX, and Linux Kernel Vulnerabilities Disclosed
Cisco ISE XSS flaws and NGINX code execution vulnerabilities lead today's security brief, alongside Linux kernel and RabbitMQ advisories.
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) guest portals could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks. The flaws stem from issues in the web-based management interface. While the CVSS scores are medium, the potential for XSS attacks on users of the interface warrants attention. Specific CVEs include CVE-2025-20205 and CVE-2025-20204.
Two vulnerabilities in the Linux kernel's block layer have been resolved. CVE-2025-21817 addresses marking GFP_NOIO around sysfs ->store() calls when the queue is frozen, and CVE-2025-21807 fixes a queue freeze versus limits lock order issue in sysfs store methods. These are important for system stability and proper handling of storage operations.
Several vulnerabilities have been disclosed in NGINX Plus and NGINX Open Source. CVE-2026-60005 in the ngx_http_slice_module could allow unauthenticated attackers to send requests that trigger issues when the slice directive is configured with unnamed regex captures or during background cache updates. Additionally, CVE-2026-56434 in the ngx_http_ssi_module may be exploitable when Server-Side Includes (SSI), proxy_pass, and proxy_buffering off directives are configured, potentially leading to security bypasses. As Cyber Security News reported, these issues could enable heap buffer overflows and code execution.
A vulnerability in RabbitMQ's management plugin, CVE-2026-57211, could allow attackers to pass URL-encoded backslashes to a file loading function before path validation, potentially leading to unauthorized file access. Another vulnerability, CVE-2026-57218, affects AMQP 0-9-1 consumers, allowing them to continue receiving messages even after OAuth token expiry or scope reduction. Vypr Intelligence noted that these nine disclosed vulnerabilities threaten authentication and data integrity.
CVE-2026-14266 is a vulnerability in 7-Zip that could expose millions of users to remote code execution risk, as highlighted by Cyber Security News. Further details on the specific technical aspects and affected versions are not provided in the bundle, but the potential impact is severe.
A weakness in GD::SecurityImage versions through 1.75 for Perl, CVE-2026-13082, uses a predictable method for generating CAPTCHA secrets, potentially undermining the security of CAPTCHA implementations. Additionally, CVE-2026-9537 in Mojo::JWT versions before 1.02 uses a non-constant-time string comparison for HMAC signature verification, which could be vulnerable to timing attacks.
Excon, a Ruby HTTP client, has a vulnerability in its RedirectFollower middleware (CVE-2026-54171) where it fails to properly strip sensitive headers when following redirects, potentially leaking information.
h2o, an HTTP server, has an HTTP/2 state amplification issue (CVE-2026-54340) that combines HPACK decompression amplification with Slowloris-style stream stalling, potentially leading to denial-of-service conditions.