RHEL 10 container escape, CitrixBleed-style bypass

A newly disclosed IPv6 fragmentation overflow in the Linux kernel 6.12 series lets an unprivileged process inside a RHEL 10 or CentOS 10 container gain a root shell on the host. The proof‑of‑concept exploits a slab overflow to a use‑after‑free, then hijacks page tables to break out of the jail.

A security audit of the open-source, end-to-end encrypted appointment system OpenReception uncovered 16 CVEs, four critical, including unauthenticated global admin creation and a flaw that defeats its encryption model. The vulnerabilities gave attackers full control over tenant data and could let them impersonate any user, undermining the platform’s core privacy promise.

Researchers at UC demonstrated voltage glitch fault injection on STM32 running PX4 autopilot, bypassing safety checks and skipping control instructions, enabling potential UAV hijack. Attack requires physical access but reveals timing‑sensitive vulnerabilities in failsafe logic, raising concerns for commercial and hobby UAVs.

Citrix released a security bulletin and patches for NetScaler ADC and Gateway addressing CVE‑2026‑8451, a flaw that could let attackers bypass authentication, reminiscent of the 2022 CitrixBleed issue. The vulnerability affects on‑premises appliances and requires an immediate update to the recommended build. Unpatched systems risk remote privilege escalation and data exposure.

A critical authentication bypass (CVE-2026-48558) in SimpleHelp's OIDC flow lets an unauthenticated attacker impersonate a technician and run commands on managed endpoints. Blackpoint observed the flaw being used to drop TaskWeaver, a Node.js loader, and Djinn Stealer, which exfiltrates developer credentials. CISA has added the bug to its KEV catalog, urging immediate patching.

The National Association of Insurance Commissioners confirmed that a zero‑day flaw in Oracle PeopleSoft let attackers access a portion of its environment on June 11. The breach exposed only publicly available statutory financial reports and some outdated logs, with no evidence of personal, payment or policyholder data being taken, though rating agencies paused data feeds.

Trail of Bits added NIST-standard ML-KEM key-exchange and ML-DSA signature support to pyca/cryptography, making post-quantum algorithms installable with a single pip command. Because the library powers billions of downloads and critical tools like Certbot and Ansible, the update opens the entire Python stack to the U.S. government’s 2030-31 migration deadlines.