CVE-2026-19760 WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

EUVD-2026-66187

Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability. The internal cache storing JWT ID claims has a strict size limit, allowing attackers to evict legitimate entries by flooding the server with dummy requests, then replay intercepted valid DPoP proofs...

kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

A flaw was found in the Linux kernel's IPv6 networking implementation, specifically within the seg6 and rpl lwtunnels. A race condition can occur when handling destination cache entries, where a NOREF no reference destination object is used after it has been freed. This use-after-free vulnerabili...

PT-2026-82350

Name of the Vulnerable Software and Affected Versions Spring AI versions 1.0.0 through 2.0.0 Description A local attacker on a multi-user host can perform cache poisoning by pre-creating a deterministic cache path and planting a malicious ONNX Open Neural Network Exchange model file. ONNX is an...

PT-2026-82252

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

CVE-2026-67275: Reliance on Insufficiently Trustworthy Component

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104806 advisory. In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled set to any value greater than zero, glue records of 0.0.0.0/::0...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098790 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-by...

PT-2026-81935

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104815)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104815 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098725)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098725 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply havi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104751)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104751 advisory. Type confusion in PostgreSQL module refint allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099011)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099011 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix write hang in passthrough mode The invalidateremove function has incomplete logic f...

PT-2026-82374

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Two distinct issues were identified. First, a module designed to restrict access to the /user/login endpoint via a secret key fails to invalidate relevant caches...

Disable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-111

This module enables you to disable access to the /user/login form unless a secret key is provided. The module does not invalidate the relevant caches when login page access restrictions are enabled. As a result, previously cached login page responses may remain accessible until caches are cleared...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098899 advisory. In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: unbound (UTSA-2026-104836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104836 advisory. In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unbound (UTSA-2026-104805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104805 advisory. In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS...

GLSA-202608-26 : Vinyl Cache: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-26 Vinyl Cache: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Vinyl Cache. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-79070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page...