PT-2026-83019

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nr pages while walking page tables without holding the lruvec lock. The reset batch size later fold...

openSUSE 16 Security Update : gh (openSUSE-SU-2026:21663-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21663-1 advisory. Changes in gh: - Update to version 2.98.0: chore: fix extra whitespace Default Codespaces port forwarding to loopback Bump gh-aw-actions to...

Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure (CVE-2026-3159)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure. Vulnerability Details CVEID:CVE-2026-3159 DESCRIPTION: IBM IBM Sterling File Gateway is vulnerable to an information disclosure due to sensitive information being included...

SUSE-SU-2026:3830-1 Security update for go1.27

This update for go1.27 fixes the following issues: - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098731 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of...

The vulnerability of the hugetlb_pmd_shared() function in the include/linux/hugetlb.h module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the hugetlbpmdshared function in the include/linux/hugetlb.h module of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

Photon OS 5.0: Gawk PHSA-2026-5.0-91-0933

An update of the gawk package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0933. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Gawk PHSA-2026-5.0-92-0966

An update of the gawk package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0966. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-52817

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...

OPENSUSE-SU-2026:21590-1 Security update for kubevirt1.8

This update for kubevirt1.8 fixes the following issues: Update to version 1.8.4. Security issues fixed: - CVE-2026-13201: virt-handler-rhel9: kubevirt: safepath OpenAtNoFollow symlink following via /proc/self/fd allows host file metadata modification bsc1269093. - CVE-2026-13622: virt-handler...

CVE-2026-74869: Missing Authorization

stoatchat before 0.15.0 contains a missing authorization vulnerability in the Subscribe message handler that allows authenticated attackers to enumerate members and monitor profile updates of private servers without membership. Attackers can subscribe to any server's member-update topic by sendin...

CVE-2026-74511

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-59704

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix pending command UAF in EIR updates MGMTOPSETLOCALNAME is handled asynchronously on powered controllers and can run setnamesync. When the controller is BR/EDR capable, setnamesync updates the local name and th...

CVE-2026-74511

Removed by vendor...

Linux Distros Unpatched Vulnerability : CVE-2026-74511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix pending command UAF in EIR updates MGMTOPSETLOCALNAME is handled asynchronously on powered controllers and can run setnamesync. When the...

KLA91223 PE vulnerability in Microsoft System Center

Privilege escalation vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-69414 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Malware-Protection-Engine CVE list...

CLEANSTART-2026-KW54631 Security fixes in consul-k8s 2.0.1-r2

Package consul-k8s version 2.0.1-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-50151, CVE-2026-50162...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async message

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit a heap use-after-free vulnerability when a client connects with asynchronous updates enabled. By sending a specially crafted Window Alternate Secondary Order message, the server can trigger memo...

How to hide vulnerability in macOS screen sharing with Apple

Apple has identified a vulnerability in the Screen Sharing feature of macOS versions Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. This vulnerability relates to an authentication issue in the Screen Sharing function, which allows network attackers to gain access without valid login credentials...