Risk Discovery

CISA Advisories

US-CERT

FullDisclosure

APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2

APPLE-SA-10-26-2026-10 Safari 27.2

APPLE-SA-10-26-2026-9 visionOS 27.2

APPLE-SA-10-26-2026-8 watchOS 27.2

APPLE-SA-10-26-2026-7 tvOS 27.2

APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2

APPLE-SA-10-26-2026-4 macOS Golden Gate 27.2

APPLE-SA-10-26-2026-3 iOS 18.7.11 and iPadOS 18.7.11

APPLE-SA-10-26-2026-2 iOS 26.7.2 and iPadOS 26.7.2

APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2

US CERT Weekly

Open Source Security

MIME-tools versions before 5.521 for Perl (10 CVEs)

HTTP::Body versions before 1.24_01 for Perl (9 CVEs)

CVE-2026-102479: Request smuggling in Eclipse Vert.x HTTP/1.x decoder

CVE-2026-114349: Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches

CVE-2026-112375: Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs

CVE-2026-116593: Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint

CVE-2026-115644: Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions

CVE-2026-111496: Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation

CVE-2026-111551: Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation

CVE-2026-111115: Apache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing

© 2026 RiskDiscovery | Sponsored by: Deception Logic