PT-2026-113809

Name of the Vulnerable Software and Affected Versions Junos OS affected versions not specified Description An improper authentication issue in the J-Web web management component allows an unauthenticated remote attacker to execute arbitrary shell commands with root privileges via the exposed J-We...

Linux Distros Unpatched Vulnerability : CVE-2026-109969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AFUNIX sockets without explicit permission restrictions or peer...

CVE-2026-110310: Observable Response Discrepancy

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS1 v1.5 padding...

PT-2026-114110

Name of the Vulnerable Software and Affected Versions OAID Tengine versions prior to 1.12.0 Description An out-of-bounds read can be triggered remotely within the tmfile Model Loader component. The issue exists in the get tm file model function located in the source file...

ROS-20261014-73-0187

The vulnerability in the kernel-lt is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

PT-2026-114107

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.9 OpenSIPS versions prior to 4.0.2 Description A remote attack can trigger an out-of-bounds read within the rtpproxy component. This issue occurs specifically in the rtpproxy offer and rtpproxy answer functions...

FreeBSD: VID-fac18f5f-afc2-11f1-8266-3c7c3fba4204 (CVE-2026-70402): Gitea -- multiple vulnerabilities

Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. ...

CVE-2026-70402: Incorrect Permission Assignment for Critical Resource

Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another local user who can reach the repository storage may modify a hook or add an executable to a writable hook directory. ...

PT-2026-113923

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When in a BGP traffic engineering scenario a specific, valid, optional,...

CVE-2026-110689: Protection Mechanism Failure

A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The...

PT-2026-114129

FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. Unauthenticated attackers knowing a tenant and environment ID can replay forged payment notifications to repeatedly ad...

Juniper Junos OS Vulnerability (JSA112180)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112180 advisory. - An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific...

Linux Distros Unpatched Vulnerability : CVE-2026-108539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a...

PT-2026-113907

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled...

Linux Distros Unpatched Vulnerability : CVE-2026-109971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it...

Linux Distros Unpatched Vulnerability : CVE-2026-109968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The l...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130134 advisory. rsync daemon 2.0.0 before 3.5.0contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling...

PT-2026-114141

Name of the Vulnerable Software and Affected Versions sgl-project SGLang versions prior to 0.5.20 Description A remote denial of service can be triggered through the manipulation of the session params argument within the generate endpoint, specifically affecting the functionality in the file...

CVE-2026-102066: Improper Validation of Specified Quantity in Input

A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a malformed RSVP packet when RSVP is enabled on the receiving...

LibreNMS LDAP Authorization Full Control

The vulnerability of the “ldap-authorization” and “ad-authorization” configurations in the LibreNMS network monitoring system is related to the failure to take measures to neutralize special elements in LDAP requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, ...