Aggregator

Fedora Hummingbird brings the container security model to a Linux host OS

Help Net Security
1 month ago

Container image security pipelines have spent the past several years pushing toward minimal footprints, hermetic builds, and continuous CVE remediation. The Fedora Project is now applying that same approach to the host operating system. At Red Hat Summit 2026, Fedora announced Fedora Hummingbird, a container-based rolling Linux distribution delivered as an OCI image. “The Linux market has split: IT operations teams need the decades-long stability of Red Hat Enterprise Linux, while builders, both human and … More →

The post Fedora Hummingbird brings the container security model to a Linux host OS appeared first on Help Net Security.

Anamarija Pogorelec

AMD Ionic Driver Vulnerabilities Affecting VMware ESX

VMWare Security Blog
1 month ago

We would like to bring your attention to a security bulletin from AMD: AMD-SN-2001: Ionic Driver Vulnerabilities. The bulletin details three vulnerabilities — CVE-2025-62623, CVE-2025-62624, and CVE-2025-62627 — present in the AMD ionic cloud driver for VMware ESX. These issues affect ESX hosts using AMD-Pensando DPU (Data Processing Unit) products. We strongly encourage you to … Continued

The post AMD Ionic Driver Vulnerabilities Affecting VMware ESX appeared first on VMware Security Blog.

Praveen Singh

Patch Tuesday, May 2026 Edition

Krebs on Security
1 month ago
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers -- including Apple, Google, Microsoft, Mozilla and Oracle -- fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.
BrianKrebs

CVE-2026-45225 | heymrun heym up to 0.0.20 File Upload Endpoint upload_file path traversal

VulDB Recent Entries
1 month ago
A vulnerability labeled as critical has been found in heymrun heym up to 0.0.20. This issue affects the function upload_file of the component File Upload Endpoint. Such manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2026-45225. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2026-35555 | Subnet Solutions PowerSYSTEM Center 2024/PowerSYSTEM Center 2026 up to 6.1.x authorization (icsa-26-132-02)

VulDB Recent Entries
1 month ago
A vulnerability identified as problematic has been detected in Subnet Solutions PowerSYSTEM Center 2024 and PowerSYSTEM Center 2026 up to 6.1.x. This vulnerability affects unknown code. This manipulation causes incorrect authorization. This vulnerability is handled as CVE-2026-35555. The attack can only be done within the local network. There is not any exploit available.
vuldb.com

CVE-2026-33570 | Subnet Solutions PowerSYSTEM Center 2020 up to 5.28.x REST API Endpoint authorization (icsa-26-132-02)

VulDB Recent Entries
1 month ago
A vulnerability categorized as problematic has been discovered in Subnet Solutions PowerSYSTEM Center 2020 up to 5.28.x. This affects an unknown part of the component REST API Endpoint. The manipulation results in incorrect authorization. This vulnerability is known as CVE-2026-33570. Access to the local network is required for this attack. No exploit is available.
vuldb.com

Managed ad