Digest · Friday
Security digest: June 26, 2026
15 critical advisories.
All digests · RSS · Markdown
Take stock
- Go: 9 critical advisories (
github.com/lxc/incus/v7/cmd/incusd,github.com/nezhahq/nezha). Check withgovulncheck ./.... - PyPI: 3 critical advisories (
backpropagate,semantic-router,mcp-pinot-server). Check withpip-audit (or: pip show <package>). - npm: 2 critical advisories (
@mcptoolshop/backpropagate,@deepstream/server). Check withnpm audit (or: npm ls <package>). - Hex (Erlang/Elixir): 1 critical advisory (
relyra). Check withmix hex.audit. - RubyGems: 1 critical advisory (
fluentd). Check withbundle audit check --update. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 0
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
None.
Critical advisories by ecosystem 15
GitHub-reviewed advisories rated critical, published this day (Pacific time).
Go 9
Check: govulncheck ./...
- Incus has arbitrary file read+write on host via templates/ symlink in malicious image CVE-2026-48752 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0 - Incus has an argument injection in backup compression algorithm leading to AFW and ACE CVE-2026-48755 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0 - Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check GHSA-q6xx-5vr8-p898 CVSS 9.9 Critical
github.com/nezhahq/nezha>= 1.14.13, <= 1.14.14 → no fix listed;github.com/nezhahq/nezha>= 2.0.0, <= 2.0.9 → fixed in 2.0.10 - Incus has an arbitrary file write on its client due to trusted image hash CVE-2026-48769 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0 - Incus has an arbitrary file write via path traversal in S3 multipart upload CVE-2026-48753 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.1.0 → fixed in 7.1.0 - Incus has an arbitrary file write on host via `exec-output` symlink in crafted image CVE-2026-48750 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0 - Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key CVE-2026-53519 CVSS 9.1 Critical
github.com/nezhahq/nezha< 2.0.13 → fixed in 2.0.13 - Incus has a restricted project bypass leading to arbitrary command execution CVE-2026-48751 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0 - Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image CVE-2026-48749 CVSS 9.9 Critical
github.com/lxc/incus/v7/cmd/incusd< 7.2.0 → fixed in 7.2.0
PyPI 3
Check: pip-audit (or: pip show <package>)
- Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication CVE-2026-48797 CVSS 9.3 Critical
backpropagate>= 1.1.0, < 1.2.0 → fixed in 1.2.0;@mcptoolshop/backpropagate>= 1.1.0, < 1.2.0 → fixed in 1.2.0 - semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin GHSA-98x5-vq43-vc5p
semantic-router>= 0.1.8, < 0.1.15 → fixed in 0.1.15 - mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind CVE-2026-49257 CVSS 10.0 Critical
mcp-pinot-server<= 3.0.1 → fixed in 3.1.0
npm 2
Check: npm audit (or: npm ls <package>)
- Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication CVE-2026-48797 CVSS 9.3 Critical
backpropagate>= 1.1.0, < 1.2.0 → fixed in 1.2.0;@mcptoolshop/backpropagate>= 1.1.0, < 1.2.0 → fixed in 1.2.0 - deepstream is vulnerable to prototype pollution CVE-2026-49252 CVSS 9.9 Critical
@deepstream/server< 10.0.5 → fixed in 10.0.5
Hex (Erlang/Elixir) 1
Check: mix hex.audit
- Relyra SAML SignatureValue not cryptographically verified -> authentication bypass CVE-2026-49454 CVSS 9.1 Critical
relyra>= 1.0.0, < 1.2.0 → fixed in 1.2.0
RubyGems 1
Check: bundle audit check --update
- Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder CVE-2026-44024 CVSS 9.8 Critical
fluentd<= 1.19.2 → fixed in 1.19.3