PT-2026-97735

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the GIMPressionist plug-in where vector indices are not properly validated before being written into fixed-size arrays when processing a specially crafted preset file. This...

CVE-2026-93291: Improper Certificate Validation

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

CVE-2026-97230: Embedded Malicious Code

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

ALSA-2026:71585 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

ALSA-2026:71586 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

Versal Adaptive SoC – Secure Boot Bypass via Board Modifications and Crafted Boot Image

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0482| In AMD Versal™ Adaptive SoC devices, insufficient boundary checks within the USB boot mode—when enabled via board modifications—allow crafted images to overflow a buffer and...

RHEL 10 : libxml2 (RHSA-2026:71586)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71586 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

The vulnerability of the WordPress website content management system’s kernel lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of the WordPress website content management system’s kernel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the shell_exec() function in the network monitoring system LibreNMS allows a hacker to execute arbitrary code.

The vulnerability of the shellexec function in the LibreNMS network monitoring system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

AlmaLinux 9 : postgresql:15 (ALSA-2026:69914)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69914 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrar...

Linux Distros Unpatched Vulnerability : CVE-2026-81878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable...

RHEL 9 : freerdp (RHSA-2026:71387)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71387 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

Ubuntu 20.04 LTS / 26.04 LTS : ImageMagick vulnerabilities (USN-8810-1)

The remote Ubuntu 20.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8810-1 advisory. It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-97185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124484 advisory. Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

CVE-2026-51997

An issue in geelen mcp-remote versions 0.1.16 through 0.1.38 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates from the open() functions within the software. No specific remediation, exploit links, or MITRE ATT&CK IDs are provided in the documents.

CVE-2026-97185

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

ALSA-2026:71641 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...