PT-2026-82240

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow exists in the ZFS filesystem support, which can be triggered by malformed on-disk metadata. This flaw may lead to incorrect memory allocation and subsequent out-of-bounds...

ALSA-2026:60394 Moderate: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow CVE-2026-11979 For more details about the security issues, including the impact, a CVSS score,...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104749)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104749 advisory. Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account...

Linux Distros Unpatched Vulnerability : CVE-2026-52489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName...

RHEL 9 : sqlite (RHSA-2026:59956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59956 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

Linux Distros Unpatched Vulnerability : CVE-2026-79675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM...

PT-2026-82241

Name of the Vulnerable Software and Affected Versions Denx U-Boot versions prior to 2026.04 Description An integer overflow occurs in the ext4fs get bgdtable function. The size calculation can result in an under-allocated buffer, which is subsequently used in memcpy. This flaw may lead to arbitra...

EUVD-2026-66750

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

PT-2026-82293

Name of the Vulnerable Software and Affected Versions Cockpit CMS versions prior to 2.13.6 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This occurs through the 'item.php' endpoint and the field-select.js and tags.js components. Recommendations...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032287)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032287 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

CVE-2026-75363

An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...

CIX Technology Processor Buffer Overflow

The vulnerability of the microprogramming software of CIX Technology’s CD8180 and CD8160 processors lies in the overflow of buffers in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and bypass existing security mechanisms...

zimbra-snmp Code Execution

The vulnerability of the zimbra-snmp package in the Zimbra Collaboration Suite email management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104765)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104765 advisory. Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would no...

CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...

Linux Distros Unpatched Vulnerability : CVE-2026-52491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...

MiracleLinux 8 : sqlite-3.26.0-21.el8_10 (AXSA:2026-1658:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1658:02 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcp (UTSA-2026-104832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104832 advisory. An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite a...