PT-2026-120704

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Issues concerning reachable assertions were identified during an internal security review. These issues are categorized under CWE-617, which refers to a condition where a...

PT-2026-120706

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An issue exists involving uncaught exceptions, which are errors that occur during program execution that the software fails to handle, leading to potential instability or...

PT-2026-120681

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue involving out-of-bounds writes occurs in the software. Out-of-bounds write is a condition where the software writes data past the end, or before the beginning, of the intended buffer...

PT-2026-120686

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue exists involving incorrect calculations, categorized under Common Weakness Enumeration CWE Base CWE-682. Recommendations At the moment, there is no information about a newer version...

PT-2026-120687

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description Improper privilege management issues exist within the software, which may allow for unauthorized elevation of privileges. Recommendations At the moment, there is no information about a newer...

PT-2026-120688

Name of the Vulnerable Software and Affected Versions Snort 3 affected versions not specified Description An issue exists involving uncontrolled resource consumption, which occurs when an application does not properly limit the amount of resources it consumes, potentially leading to a denial of...

PT-2026-120694

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Cisco Prime Collaboration Deployment affected versions not specified Cisco Unified Communications Manager Unified CM affected versions not specified Cisco Unified Communications Manager...

PT-2026-120699

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Cisco Prime Collaboration Deployment affected versions not specified Cisco Unified Communications Manager Unified CM affected versions not specified Cisco Unified Communications Manager...

PT-2026-120700

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Cisco Prime Collaboration Deployment affected versions not specified Cisco Unified Communications Manager Unified CM affected versions not specified Cisco Unified Communications Manager...

PT-2026-120705

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Issues concerning null pointers were identified during an internal security review. A null pointer is a reference that points to nothing, which can lead to application crashes...

PT-2026-120707

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An internal security review identified issues related to code injections. This flaw allows the injection of malicious code into the system, which is categorized under CWE-94...

PT-2026-120708

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description Incorrect permission assignments were identified within the software, which may lead to security risks. This issue is categorized under CWE-732, which refers to the use of...

PT-2026-120709

Name of the Vulnerable Software and Affected Versions Cisco Expressway Series affected versions not specified Description An issue exists involving improper link resolutions, which occurs when the software does not correctly resolve a link to its intended destination, potentially allowing an...

PT-2026-120712

Name of the Vulnerable Software and Affected Versions Open Source Snort 3 affected versions not specified Description An issue exists in the control channel socket implementation where a lack of authentication allows an authenticated local attacker with low privileges to connect to the socket. Th...

RHEL 9 : kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 (RHSA-2026:81453)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:81453 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

RHEL 8 : kernel (RHSA-2026:87098)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:87098 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: validate checksumstart before...

RHEL 10 : kernel (RHSA-2026:85979)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85979 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: validate checksumstart before...

RHEL 10 : python-tornado (RHSA-2026:82041)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:82041 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Title: ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root Author: 0day Rubbish Research Team Contact: [email protected] Type: remote Platform: Hardware Advisory: https://0day-rubbish.com/blog/prosoft-rlx-ifh24e-unsigned-upgrade-package-root-rce CVE: pending...

RHEL 10 : dogtag-pki (RHSA-2026:77648)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77648 advisory. IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following...