PT-2026-88033

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overfl...

PT-2026-88438

Name of the Vulnerable Software and Affected Versions Okta Hyperdrive Integration affected versions not specified Description The installer fails to mask the OAuth client secret when it is passed as an MSI property. This results in the credential being recorded in plaintext within the installer...

PT-2026-87462

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

CVE-2026-72936: Use After Free

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-84197: Improper Certificate Validation

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false wh...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

PT-2026-88442

The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...

CVE-2026-69781: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

PT-2026-88316

Name of the Vulnerable Software and Affected Versions ConnectWise ScreenConnect versions prior to 26.6.5 Description A flaw in the ScreenConnect client allows files to be transferred and executed through an active remote session without authorization or host confirmation under certain...

PT-2026-89356

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where the software incorrectly handles the reuse of connections when client certificate settings are modified. This behavior can lead to the application of incorrect client...

NewStart CGSL MAIN 7.02 : rsync Vulnerability (NS-SA-2026-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has rsync packages installed that are affected by a vulnerability: - A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious...

NewStart CGSL MAIN 7.02 : nginx Multiple Vulnerabilities (NS-SA-2026-0104)

The remote NewStart CGSL host, running version MAIN 7.02, has nginx packages installed that are affected by multiple vulnerabilities: - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate...

PT-2026-88506

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.37.7 n8n versions prior to 2.38.2 Description The OAuth Dynamic Client Registration endpoint fails to properly validate the size of the client name and grant types variables, while only bounding redirect uris. An...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3279)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

CVE-2026-69431: Heap-based Buffer Overflow

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

PT-2026-88036

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client. This issue allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overfl...

PT-2026-87267

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-87555

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...