Linux Distros Unpatched Vulnerability : CVE-2026-45100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64enco...

RockyLinux 9 : libgcrypt (RLSA-2026:50147)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50147 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block...

CVE-2026-67866

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMacProcessMsgDeleteMonitoredItemsResponse and SOPCStaMacNewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path...

CVE-2026-67867

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

CVE-2026-44605

A flaw was found in the RPM Package Manager RPM. A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memor...

EUVD-2026-53454

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-71263

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

CVE-2026-71265

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

CVE-2026-71266 tinyobjloader-c Stack Buffer Overflow in MTL Material File Line Parsing

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p, plen, guarded only by . The identical vulnerable pattern is duplicated in a second function in the same file...

EUVD-2026-53351

tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer linebuf via memcpylinebuf, p, plen, guarded only by assertplen 4095. Because assert compiles to a no-op under -DNDEBUG standard for release builds, a crafted...

CVE-2026-71267

microtar's mtarwritefileheader and mtarwritedirheader functions src/microtar.c copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtarheadert via strcpyh.name, name, with no check that strlenname is less than 100 before the copy...

CVE-2026-71265 Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...

CVE-2026-71265

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...

CVE-2026-71265 Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...

CVE-2026-71265

CVE-2026-71265: Domoticz MochadTCP::MatchLine() for MOCHAD_RFSEC messages copies up to 1028 bytes from m_mochadbuffer into a fixed 50-byte tempRFSECbuf using strcpy() without length checks, across three device branches (DS10A/KR10A/MS10A). An attacker on the local network that can reach the Mocha...

EUVD-2026-53350

Domoticz's MochadTCP::MatchLine handler for MOCHADRFSEC messages hardware/MochadTCP.cpp copies network-received data from the up-to-1028-byte mmochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches DS10A/KR10A/MS10A devic...