ALSA-2026:58927 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

PT-2026-80886

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Multiple issues allow local privilege escalation, enabling an unprivileged user to execute arbitrary code within a privileged context. Recommendations At the moment, there is...

EUVD-2025-210769

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

PT-2026-81115

Name of the Vulnerable Software and Affected Versions MCP Context Forge versions prior to 1.0.2 Description The python sandbox server sub-project in MCP Context Forge contains a sandbox bypass in its RestrictedPython implementation. The issue occurs because raw getattr is exposed through safe...

CVE-2025-26238: Improper Control of Generation of Code

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2026-78367: Improper Control of Generation of Code

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

ROS-20260824-73-0028

The vulnerability in MariaDB is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20260824-73-0030

The vulnerability in Mariadb 11.4 is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2026-80994

Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...

CVE-2026-71937: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...

EUVD-2026-65144

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

CVE-2026-52490: Improper Control of Generation of Code

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

CVE-2026-52490

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

CVE-2026-52490

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the processcommandopts function in tools/tiffcrop.c...

CVE-2026-71936: Buffer Copy without Checking Size of Input

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-52490

The libtiff library is vulnerable to arbitrary code execution due to an integer overflow in the tiffcrop subdivision calculation within the tools/tiffcrop.c file. Specifically, the flaw resides in the process_command_opts() function of version 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 . This issue...

RHEL 9 : freerdp (RHSA-2026:58710)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58710 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Microsoft Entra ID Deserialization Code Execution

The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in deserialization mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...