AWS Security Bulletins پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۰:۱۳

CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory…

Vulnerabilities & Zero-Day Programming & Languages Cloud Computing Open Source

Read the full article at AWS Security Bulletins Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۱۸

OpenAI built an AI pipeline to find, exploit and patch Linux flaws

OpenAI has developed an autonomous AI pipeline that can identify software vulnerabilities, develop working exploits to validate their impact and generate patches for human review. In an October experiment targeting the Linux kernel, the pipeline created exploits for 948 distinct local privilege-escalation (LPE) vulnerabilities at a total API cost of $1.2 million, the company said in a November 4 research report, “A t…

Vulnerabilities & Zero-Day Cloud Security AI Security

Source

BleepingComputer پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۱۵

OpenSSH flaw lets attackers log into password-disabled Linux accounts

A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication, simply by entering an oversized password. [...]

Vulnerabilities & Zero-Day Operating Systems Identity & Access Security

Source

SecurityWeek پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۱:۰۲

AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek.

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

Wordfence Blog پنجشنبه ۱۴ آبان ۱۴۰۵ · ۲۰:۵۸

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026)

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to ...Read More The post Wordfence Intelligence Week…

Vulnerabilities & Zero-Day Databases

Source