linuxsecurity.com / .linuxsecurity-com-linuxsecurity-articles / Page 4

A local user with no write permission changed a root-owned file's contents in a published XFS demonstration.

An unauthenticated visitor could make an affected WordPress site permanently delete content already in its trash by submitting a public form.

Open-source maintainers can now apply for free security scans from Anthropic.

Go 1.27.2 and 1.26.9 arrived on Oct 8, 2026 with corrections for 15 security flaws.

A file on a build machine could end up in a cloud deployment bundle because of a flaw disclosed by Amazon Web Services (AWS) on Oct 8, 2026.

OpenStack disclosed a Zaqar security flaw on Oct 7, 2026 that lets an authenticated user access another project's messaging queues.

X.Org has issued fixes for 12 vulnerabilities in its display software.

A bug in Linux's TCP Fast Open code can leave it reading memory that has already been released.

Apache disclosed a critical Apache Jackrabbit session hijacking flaw on Oct 7, 2026.

IBM and Red Hat say their Lightwell initiative has identified and remediated more than 400 previously unknown vulnerabilities in widely used Java libraries.