What you need to know today.

Multiple vulnerabilities have been disclosed in SSSD, a system security services daemon used in Linux and other Unix-like operating systems. CVE-2026-68742 and CVE-2026-68743 are moderate-severity flaws related to out-of-bounds reads in the NSS and PAM responders, respectively. These could potentially lead to information disclosure or denial of service. CVE-2026-68744, a low-severity issue, involves an uninitialized heap disclosure in the NSS responder's initgroups reply, which might also leak sensitive data. While no specific exploits or active exploitation have been reported for these SSSD flaws, their presence in a core system service warrants attention for administrators. Patches or updated packages should be applied as they become available from the respective Linux distributions.

A vulnerability in the ggml-org llama.cpp project, specifically affecting the Jinja Minja Template Parser component (file common/jinja/parser.cpp), has been identified as CVE-2026-18581. The details suggest a manipulation vulnerability triggered by specific input, potentially leading to unexpected behavior or security issues within the template parsing functionality. The exact impact and exploitability are not fully detailed, but it highlights a potential risk in projects that handle complex templating languages. Users of this specific commit or version should monitor for updates and advisories.

A heap-based buffer overflow vulnerability, CVE-2026-68579, has been found in FreeRDP versions prior to 3.30.0 (up to and including 3.29.0). This flaw exists in the Windows clipboard client's CliprdrStream_Read function. It can be triggered when an OLE paste consumer, such as Windows Explorer, interacts with the clipboard. Successful exploitation could allow an attacker to cause a buffer overflow, potentially leading to denial of service or even arbitrary code execution in the context of the vulnerable application. Users are advised to upgrade to FreeRDP 3.30.0 or later to mitigate this risk.