TencentOS Server 3: sssd (TSSA-2026:0846)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0846 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PostgreSQL -- Multiple vulnerabilities

The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before data rows begin, processes the following data lines as psql commands. CVE-2026-6469: ALTER TABLE ALTER TYPE incorrectly reassigns ownership of dependent extended statistics objects to the current user...

openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21555-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259:...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs

Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs. This bulletin provides patch information to address the vulnerabilities Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is ...

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session logs, including API keys and passwords. The weakness affected encrypted reasoning objects used by the providers'...

CVE-2026-12235

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235

The CVE describes an out-of-bounds write in the Xtensa llext PLT relocation path. Specifically, during relocation in llext_link_plt(), the patch address is computed using rela.r_offset without validating it, allowing a crafted RELA entry with a large r_offset to write outside the extension’s text...

CVE-2026-12235

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

EUVD-2026-57070

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

PT-2026-70994

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llext link plt subsys/llext/llext link.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch...

CVE-2026-12235: Out-of-bounds Write

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...

F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000162865)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5 / 17.5.1.9 / 21.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000162865 advisory. NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability...

Exploit for CVE-2026-68138

CVE-2026-68138: Linux qdisc rate-table race to local root !C...

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

CopyEscape: Taking Over Docker Hosts with docker cp

Imperva Red Team uncovered CVE-2026-17106 , a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the same CVE also affected sbx cp when copying files out of Docker Sandboxes. A malicious container or sandbox could exploit the copy proce...

Apache Tomcat 11.0.2 Remote Code Execution

A proof of concept exploit for an unauthenticated remote code execution vulnerability in Apache Tomcat version 11.0.2. The vulnerability abuses partial PUT path equivalence to place a crafted Java serialized session file where a PersistentManager with FileStore can load it, resulting in unsafe Ja...