ALSA-2026:59972 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via...

Microsoft SQL Server Remote Code Execution Vulnerability

Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account...

AlmaLinux 9 : gstreamer1-plugins-good (ALSA-2026:59152)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: flink (UTSA-2026-093572)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093572 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093034 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Linux Distros Unpatched Vulnerability : CVE-2026-78938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-rdbms (UTSA-2026-093033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093033 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032291 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Linux Distros Unpatched Vulnerability : CVE-2026-79275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-79142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

CVE-2026-39275

Cockpit CMS versions ≤ 2.13.5 are affected by a stored XSS (CWE-79) in the item.php, field-select.js, and tags.js components. Field render() outputs are passed to Vue's v-html directive without output encoding , allowing a low-privilege editor to inject a persistent payload that fires for every a...

VulnCheck KEV: CVE-2026-49869

Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath.endsWith"/configs" to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match...

PT-2026-82091

Name of the Vulnerable Software and Affected Versions Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 Description Improper input validation in the CData JDBC driver integration allows an authenticated attacker to achieve remote code execution within the connector containe...

CVE-2026-52103

A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...

Linux Distros Unpatched Vulnerability : CVE-2026-79657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-093041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093041 advisory. Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jgroups (UTSA-2026-031601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031601 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

AlmaLinux 10 : gstreamer1-plugins-good (ALSA-2026:59133)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59133 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-core (UTSA-2026-093032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093032 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...