CVE-2026-53802

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a...

DEBIAN-CVE-2026-18726

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

CVE-2026-18726

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

UBUNTU-CVE-2026-18726

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

CVE-2026-17445

IBM i (versions 7.3–7.6, 5770-SS1) is vulnerable to CVE-2026-17445 via Line Printer Daemon (LPD). An remote authenticated attacker could bypass security restrictions due to improper validation of an attacker-supplied user profile name. CVSS v3.1 base score 8.2 (HIGH) with network attack vector, n...

CVE-2026-17218 IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...

CVE-2026-17218

CVE-2026-17218 affects IBM i (Line Printer Daemon, LPD) across releases 7.3–7.6. An out-of-bounds write could allow a remote attacker to execute arbitrary code. The IBM bulletin confirms a CVSS v3.1 base score of 9.8 (Network, high impact) and lists affected products/versions along with fixed pat...

CVE-2026-71407

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

EUVD-2026-57191

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

CVE-2026-71407

CVE-2026-71407 is a stack-based buffer overflow (CWE-121) in the WAD daemon of Fortinet FortiOS 7.6.1 through 7.6.6 . An unauthenticated attacker who can bypass stack protection and ASLR may execute arbitrary code or commands via crafted sockets, but only if the explicit proxy is configured with ...

CVE-2026-71407

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

CVE-2026-71407

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...

OPENSUSE-SU-2026:21573-1 Security update for himmelblau

This update for himmelblau fixes the following issues: Update to version 2.3.14+git0.e23b4c54. Security issues fixed: - CVE-2026-45784: incorrect sizing of output buffers in CipherCtxRef::cipherupdateinplace when used with AES key-wrap-with-padding ciphers can lead to attacker-controlled heap...

PT-2026-71065

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.6.1 through 7.6.6 Description A stack-based buffer overflow occurs in the WAD daemon when the explicit proxy is configured with Kerberos authentication and SOCKS enabled. An unauthenticated attacker can exploit this...

Stack buffer overflow in WAD

...

PT-2026-71331

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio daemon allows a remote attacker on the same local network segment to cause a Denial of Service DoS. By sending a specially crafted Internet Control Message Protocol...

Fortinet Fortigate Stack buffer overflow in WAD (FG-IR-26-161)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-161 advisory. - A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an...

Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [CVE-2026-17218]

Summary IBM i is vulnerable to remote code execution due to an out-of-bounds write CVE-2026-17218 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17218 DESCRIPTION: IBM i could allow a remote attacker to execute arbitrary code due...

Security Bulletin: IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon [CVE-2026-17445]

Summary IBM i is vulnerable to bypassing security restrictions due to improper validation CVE-2026-17445 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17445 DESCRIPTION: IBM i could allow a remote authenticated attacker to bypas...

DEBIAN-CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...