CVE-2026-93567: Improper Input Validation

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...

CVE-2026-59156: Uncontrolled Recursion

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream containing consecutive 2880-byte header blocks without the mandatory end keyword makes...

CVE-2026-93579: Undefined Security Weakness

A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...

PT-2026-95362

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 HpackEncoder. A remote attacker can trigger a Denial of Service DoS by sending HTTP/2 SETTINGS frames containing an excessively large MAX HEADER TABLE SIZE. This...

PT-2026-95579

Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.58 Description Installations that enable password reset by email and configure ALLOWED HOSTS with a wildcard accept an attacker-controlled Host header during the generation of password reset links. An...

CVE-2026-93750: Interpretation Conflict

http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...

PT-2026-95614

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can obtain sensitive information or cause a denial of service. This is possible due to improper validation of message header offset values...

CVE-2026-11726: Out-of-bounds Read

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values...

CVE-2026-93569: Inconsistent Interpretation of HTTP Requests

A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an absolute-form request-target and a conflicting Host header, Netty incorrectly prioritizes the Host header for the HTTP/2...

PT-2026-95420

Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the HTTP/2 codec when converting HTTP/1 CONNECT requests to HTTP/2. The component incorrectly utilizes the Host header instead of the CONNECT authority-form request-target to...

PT-2026-95619

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway affected versions not specified Description Improper authentication occurs due to an unvalidated SSO header, which allows a remote attacker to bypass authentication and obtain a fully authenticated session without...

WordPress Core <= 7.1 - Admin+ Stored XSS in Custom Header Images vulnerability

Admin+ Stored XSS in Custom Header Images vulnerability discovered by Jeremy Felt in WordPress core versions = 7.1...

EulerOS Virtualization 2.12.1 : python-pip (EulerOS-SA-2026-3612)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2026-3714)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

Linux Distros Unpatched Vulnerability : CVE-2026-93453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect...

EulerOS Virtualization 2.11.1 : perl-HTTP-Tiny (EulerOS-SA-2026-3451)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.The...

EulerOS 2.0 SP10 : python-jwt (EulerOS-SA-2026-3761)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

WP < 7.1.1 - Admin+ Stored XSS via Custom Header

Description WordPress does not sanitise and escape some custom header settings before outputting them back in an admin screen in some cases, which could allow users with a high role, such as site administrators on Multisite, to perform Stored XSS attacks against other users, such as super...

CVE-2026-93453 SOGo before 5.12.11 Password Reset Token Interception via Origin Header

SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to attacker-controlled domains. Attackers can submit password recovery requests with a malicious Origin header to have valid...

CVE-2026-93453

SOGo versions prior to 5.12.11 are vulnerable to password-reset token interception caused by trusting the client-supplied Origin header when constructing password-reset links. An unauthenticated attacker can submit a password recovery request with a malicious Origin value, causing the server to e...