Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

LiteLLM is an open-source library that provides a unified interface for various large language models (LLMs). It allows developers to easily switch between different LLM providers like OpenAI, Anthropic, and others without changing their code. LiteLLM simplifies the process of working with multiple LLMs by offering a consistent API across different models and providers.

LiteLLM

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.

CVE-2026-59822

Linux

Linux Kernel

Windows

Windows Cumulative Update

BeyondTrust Privileged Remote Access is a secure remote access solution that enables IT administrators and security professionals to control, audit, and manage privileged access to critical systems by authorized employees and third-party vendors. It minimizes security risks associated with remote access by implementing granular role-based access controls and providing real-time monitoring, logging, and auditing capabilities. The solution integrates with various IT systems and supports multi-factor authentication, ensuring that only authorized users can access resources.

BeyondTrust Privileged Remote Access Client

BeyondTrust Remote Support is a secure remote access solution that enables IT support teams to provide assistance to users and manage devices across multiple platforms. It offers robust security features, including granular access control and session monitoring, to ensure compliance with industry standards. The platform is designed for efficient troubleshooting and enhanced customer support experiences.

BeyondTrust Remote Support Client

BeyondTrust Privileged Remote Access

BeyondTrust Remote Support

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled.

CVE-2026-40139

A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled

CVE-2026-40138

Gitea is an open-source forge software package for hosting software development version control using Git, as well as other collaborative features like bug tracking, wikis, and code review.

Gitea

Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information.

CVE-2026-27771

Wolfi

Flowise is an open-source UI visual tool for building customized LLM flows. It allows users to drag and drop components to create AI workflows, chatbots, and agents. Flowise provides a user-friendly interface to design and deploy AI applications without extensive coding knowledge.

Flowise

Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses a weak hardcoded default secret ('flowise') for the express-session middleware when the EXPRESS_SESSION_SECRET environment variable is not set (packages/server/src/enterprise/middleware/passport/index.ts). Because this default secret is publicly visible in the source code, an attacker can forge valid signed session cookies to impersonate any user and bypass authentication.

CVE-2026-56278

GitHub Advisory Database

Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-58281

ImageMagick is a powerful open-source software suite used for manipulating and editing images. It provides a command-line interface as well as various programming interfaces for interacting with the software. ImageMagick is capable of reading, converting, and modifying a wide range of image formats.

ImageMagick

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

CVE-2026-61870

Debian

Linux Debian

Debian Security Tracker

Echo

Red Hat

Linux Red Hat

Red Hat Errata

VulnCheck NVD++

ImageMagick before 7.1.2-26 contains a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures to cause a dangling pointer to reference freed memory, potentially enabling denial of service or code execution.

CVE-2026-61861

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process.

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVE ID	Severidad	Puntuación	Tecnologías	Nombre del componente	Exploit de CISA KEV	Tiene arreglo	Fecha de publicación
CVE-2026-59822	HIGH	8.8	Chainguard	cpe:2.3:a:litellm:litellm	No	Sí	Jul 08, 2026
CVE-2026-40139	CRITICAL	9.2	BeyondTrust Privileged Remote Access Client	cpe:2.3:a:beyondtrust:privileged_remote_access	No	Sí	Jul 06, 2026
CVE-2026-40138	CRITICAL	9.2	BeyondTrust Privileged Remote Access Client	cpe:2.3:a:beyondtrust:privileged_remote_access	No	Sí	Jul 06, 2026
CVE-2026-27771	HIGH	8.2	Gitea	gitea	No	Sí	Jul 03, 2026
CVE-2026-56278	CRITICAL	9.3	Flowise	flowise	No	Sí	Jun 30, 2026

CVE ID	Severidad	Puntuación	Tecnologías	Nombre del componente	Exploit de CISA KEV	Tiene arreglo	Fecha de publicación
CVE-2026-58281	HIGH	8.3	N/A	N/A	No	Sí	Jul 11, 2026
CVE-2026-61870	LOW	2.1	ImageMagick	ImageMagick	No	Sí	Jul 11, 2026
CVE-2026-61861	MEDIUM	6.3	ImageMagick	ImageMagick-c++	No	Sí	Jul 11, 2026
CVE-2026-61858	MEDIUM	4.8	ImageMagick	ImageMagick-devel	No	Sí	Jul 11, 2026
CVE-2026-61857	MEDIUM	6.3	ImageMagick	cpe:2.3:a:imagemagick:imagemagick	No	Sí	Jul 11, 2026

Base de datos de vulnerabilidades de Wiz

Explorar por tecnología

Filtros populares

Alto perfil

Último

Vulnerabilidades en cifras

Lo bueno, lo malo y lo vulnerable

Recursos adicionales de Wiz

¿Listo para ver a Wiz en acción?