EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4058)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...

TencentOS Server 3: python-lxml (TSSA-2026:1123)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1123 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-110794

🚨 CVE-2026-85962 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an...

PT-2026-110802

🚨 CVE-2026-85965 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability. 🎖@cveNotify...

PT-2026-110789

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions 11.x through 11.3.6 Description The SAML parser configuration allows the processing of external DTDs Document Type Definitions or entities. This flaw could lead to unauthorized network access or the disclosur...

Medium: mariadb1011

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

Medium: mariadb114

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

Medium: mariadb123

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

PT-2026-110803

🚨 CVE-2026-85966 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information. A remote authenticated attacker with limited management permissions could obtain this information, which could resu...

PT-2026-110672

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An integer truncation issue exists in the license check stream length function. A malicious RDP server can exploit this by sending a crafted SERVER LICENSE REQUEST containing a large scopeCount...

PT-2026-110801

🚨 CVE-2026-85964 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files. 🎖@cveNotify...

PT-2026-110790

🚨 CVE-2026-85958 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access. 🎖@cveNoti...

PT-2026-110719

Name of the Vulnerable Software and Affected Versions Parse Server versions 8.2.2 through 8.6.93 Parse Server versions 9.0.0 through 9.10.1-alpha.13 Description GraphQL introspection control is only applied to operation text sent directly with a request and does not extend to operations resolved...

TencentOS Server 3: expat (TSSA-2026:1133)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1133 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Important: httpd

Issue Overview: Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already be in a directory enabled for CGI and have no other extension understood by modmime. This...

PT-2026-110648

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 12.1.0 Progress MarkLogic Server versions prior to 11.3.7 Description A remote attacker with query-execution access can invoke an XQuery evaluation function without the necessary evaluation privilege...

CVE-2026-85971: Incorrect Permission Assignment for Critical Resource

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

Microsoft Exchange Server Memory Reclamation Code Execution

The vulnerability of Microsoft Exchange Server’s mail server is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

TencentOS Server 3: firefox (TSSA-2026:1136)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1136 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...