Service Advisory Please share the following with your teams. Service Maintenance: eReports Operational Reporting System UIT will be performing scheduled maintenance on the application server to apply security patches. Maintenance window: Start: Wednesday June 3, 2026 – 6:30 p.m. End: Wednesday June 3, 2026 – 8:00 p.m. Impact/Details: eReports will not be available for use […]
Information Security Advisory A recently discovered vulnerability (CVE‑2026‑46333) affects the Linux kernel and may allow a local, unprivileged attacker to access sensitive files and escalate privileges to root, potentially leading to full system compromise. Severity level: CVSS Score: 7.1/High. Description: CVE‑2026‑46333 is a race condition vulnerability in the Linux kernel’s _ptrace_may_access() function […]
Information Security Advisory Apache has released a security update to address a vulnerability (CVE‑2026‑23918) in Apache HTTP Server that may result in denial‑of‑service and potential remote code execution under specific configurations. Severity level: CVSS Score: 8.8/High. Description: CVE‑2026‑23918 is a double‑free vulnerability in the mod_http2 module of Apache HTTP Server that occurs […]
Information Security Advisory A recently disclosed vulnerability (CVE‑2026‑31431), commonly referred to as “Copy Fail”, affects the Linux kernel and may allow a local, unprivileged attacker to escalate privileges and gain full root access on affected systems. Severity level: CVSS Score: 7.8/High. Description: CVE‑2026‑31431 is a local privilege escalation vulnerability caused by a […]
Information Security Advisory A critical security vulnerability (CVE-2026-41940) has been identified in cPanel, Web Host Manager (WHM) and WP Squared which may allow unauthenticated attackers to completely compromise affected systems through an authentication bypass in the login process. Severity level: CVSS Score: 9.8/Critical. Description: CVE‑2026‑41940 is a critical authentication bypass vulnerability in cPanel, […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-3854) affects GitHub.com and GitHub Enterprise Server and may allow unauthenticated attackers to achieve remote code execution (RCE)on GitHub Infrastructure. Severity level CVSS Score: 8.8/High Description: CVE‑2026‑3854 is a sever security vulnerability caused by improper sanitization of user‑supplied git push options within GitHub’s internal Git processing […]
Information Security Advisory A recently disclosed vulnerability (CVE-2026-40372) affects a Windows-based application and may allow unauthenticated remote attackers to escalate privileges. Severity level CVSS Score: 9.1/Critical. Description: CVE‑2026‑40372 is a critical security vulnerability that arises from improper control of file names or file paths within a Windows-based application. The affected component processes user-supplied […]
Information Security Advisory A recently disclosed high‑severity vulnerability in Adobe Acrobat and Acrobat Reader (CVE‑2026‑34621) allows attackers to execute arbitrary code on affected systems by tricking users into opening a specially crafted PDF file. Severity level: CVSS Score: 8.6/High Description: Adobe Acrobat and Acrobat Reader contain an improperly controlled modification of object prototype […]
Information Security Advisory A recently disclosed critical vulnerability in the Ninja Forms – File Uploads plugin for WordPress (CVE‑2026‑0740) allows unauthenticated remote attackers to upload arbitrary files, potentially leading to remote code execution and full site compromise. Severity level: CVSS Score: 9.8/Critical Description: The Ninja Forms – File Uploads plugin for WordPress fails […]
Information Security Advisory A recently disclosed critical vulnerability in the Ninja Forms – File Uploads plugin for WordPress (CVE‑2026‑0740) allows unauthenticated remote attackers to upload arbitrary files, potentially leading to remote code execution and full site compromise. Severity level: CVSS Score: 9.8/Critical Description: The Ninja Forms – File Uploads plugin for WordPress fails […]