Open-iSCSI, ActiveMQ Vulnerabilities Highlighted

A trio of vulnerabilities in Open-iSCSI could allow an attacker to escalate privileges, bypass authentication, or cause a denial-of-service. CVE-2026-44943 is a privilege escalation flaw due to path traversal, CVE-2026-44944 enables authentication bypass via the iscsiuio control socket, and CVE-2026-55995 is a denial-of-service vulnerability caused by a double-free error in the iSNS attribute decoder. These issues collectively pose a significant risk to systems using Open-iSCSI, as detailed in reporting by Vypr Intelligence. Immediate patching or mitigation is recommended.

The Linux kernel is affected by a use-after-free vulnerability in the Bluetooth L2CAP module, specifically in the l2cap_sock_new_connection_cb() function, which could lead to system instability or potential code execution. Additionally, a separate issue in the perf/core subsystem, CVE-2026-64556, could allow for event group detachment during remove_on_exec, potentially impacting performance monitoring and security. These kernel vulnerabilities, while rated moderate to important, warrant attention due to the widespread use of the Linux kernel.

Several vulnerabilities have been disclosed in Apache ActiveMQ, including CVE-2026-61487, which allows an authenticated low-privilege user to bypass per-destination write ACLs by targeting temporary composite destinations. Another critical flaw, CVE-2026-59878, enables remote unauthenticated denial-of-service by sending oversized frames to an AMQP NIO connector. These issues, along with others affecting Apache Tomcat and Thrift, were disclosed together and highlighted by Vypr Intelligence, emphasizing the need for prompt updates for ActiveMQ users.

A critical out-of-bounds write vulnerability exists in the GNU Binutils, specifically within the BFD DLX ELF backend's relocation processing (CVE-2026-18220). This flaw could allow an attacker to trigger a crash or potentially execute arbitrary code by providing a specially crafted ELF file. Given Binutils' role in the software development toolchain, this vulnerability is of high concern and requires prompt attention from developers and system administrators.

Quarkus REST, a component within the Quarkus framework, suffers from an unbounded multipart MIME part-header accumulation vulnerability (CVE-2016-16308). This flaw allows a remote attacker to trigger a denial-of-service condition by sending excessively large MIME parts, potentially leading to an Out-Of-Memory error and service disruption. This is particularly relevant for applications using Quarkus for RESTful services that handle file uploads or multipart data.

The CRIU (Checkpoint/Restore In Userspace) utility has a container escape vulnerability (CVE-2026-18107) that can be exploited by hijacking the rseq critical section during checkpoint or restore operations. This flaw could allow an attacker within a container to break out and gain access to the host system, posing a severe security risk for containerized environments.

RubyGem excon versions prior to 0.71.0 contain a race condition related to persistent connections. When a connection is interrupted, such as by a timeout, residual data can remain on the socket. Subsequent requests may inadvertently process this leftover data, leading to unexpected behavior and potential security implications. This issue, CVE-2019-16779, requires updating excon to the latest version to mitigate the risk.

The diff-so-fancy tool is vulnerable to terminal escape injection (CVE-2026-50642), which can be exploited to achieve command execution. This occurs when the tool processes specially crafted diff output containing malicious escape sequences, which are then interpreted by the terminal. Users of diff-so-fancy should sanitize diff inputs or update the tool to prevent this vulnerability.

A use-after-free vulnerability in Debian's sg3_utils (CVE-2026-16313) allows for information disclosure. The sg_inq command, when used with the --export option, outputs device identification data without sanitizing control characters, potentially exposing sensitive information if a newline character is present in device-supplied data.

Multiple vulnerabilities exist within Debian's pglogical affecting its replication and signaling mechanisms. CVE-2026-50738 describes a use-after-free in worker signaling, CVE-2026-50737 involves insufficient validation of default expressions during replicated changes, CVE-2026-50736 allows for privilege escalation via message payloads in the queue mechanism, and CVE-2026-50735 details an out-of-bounds read due to insufficient length validation in replication protocol messages. These flaws could lead to crashes, privilege escalation, or information disclosure in environments using pglogical for replication.

OpenStack Neutron has a vulnerability (CVE-2026-55707) where a shared-network consumer can re-scope another project's subnets via subnetpool onboarding. This could allow unauthorized access or manipulation of network resources within an OpenStack environment.

The cJSON library contains a denial-of-service vulnerability (CVE-2026-67216) due to inefficient JSON object comparison, which could be exploited by processing malformed JSON data.

A fix-use-after-free in the Linux kernel's Bluetooth L2CAP module is addressed in CVE-2026-64557. This vulnerability could lead to system instability or potential crashes when handling new connections.

Apache ActiveMQ has an improper input validation vulnerability (CVE-2026-59878) in its AMQP connector that allows for denial-of-service attacks.

Apache ActiveMQ also has an improper authorization vulnerability (CVE-2026-61487) allowing bypass of ACLs.

libfsimage's iso9660 driver in Debian has a vulnerability (CVE-2026-42495) related to directory and Rock Ridge / SUSP walk length calculations derived from the filesystem image.