CVE-2026-95519: Improper Neutralization of Special Elements used in an OS Command

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

CVE-2026-97185: Out-of-bounds Write

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

CVE-2026-11744: Improper Neutralization of Input During Web Page Generation

An input validation vulnerability exists in the PaperCut Hive embedded application for Ricoh devices. The application fails to properly sanitize input received during the NFC card reading process before passing it to the application's web view interface. A local attacker with physical access to t...

CVE-2026-89078: Double Free

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

CVE-2026-97230: Embedded Malicious Code

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

PT-2026-97825

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.16 through 0.1.38 Description A remote attacker can execute arbitrary code through the open function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-98258

Name of the Vulnerable Software and Affected Versions AWS pgcollection versions 2.0.0 through 2.1.1 Description A type confusion issue exists in this PostgreSQL extension. An authenticated remote user can execute arbitrary code as the postgres operating system user by using crafted SQL statements...

PT-2026-98314

Name of the Vulnerable Software and Affected Versions IO::Socket::SSL::SelfCertificate version 1.00 Description This software contains malware that executes Python code retrieved from an obfuscated URL. The generate certificate function runs a Python script stored as a certificate file located in...

PT-2026-97735

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the GIMPressionist plug-in where vector indices are not properly validated before being written into fixed-size arrays when processing a specially crafted preset file. This...

PT-2026-98270

Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code...

PT-2026-97839

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary code due to improper neutralization of special elements used in an OS command. This issue occurs when the system fails to...

PT-2026-97845

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A remote authenticated attacker can execute arbitrary code due to unsafe deserialization of untrusted data. Deserialization is the process of converting a data stream back into an...

PT-2026-97798

Name of the Vulnerable Software and Affected Versions rpm affected versions not specified Description A flaw exists where the software processes crafted manifest files during operations such as rpm -q -p or similar manifest-processing flows. The issue occurs because manifest entries undergo...

PT-2026-105045

A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...

CVE-2026-97185: Out-of-bounds Write

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to...

Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks...

LibreNMS Shell Exec RCE

The vulnerability of the shellexec function in the LibreNMS network monitoring system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress Kernel Code Execution

The vulnerability of the WordPress website content management system’s kernel is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DAP-1360 Code Execution

The vulnerability of the web interface for managing microprogrammed wireless access points from D-Link DAP-1360 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted...

D-Link DIR-825 Router Code Execution

The vulnerability of the tunnelsetparams function in the rp-l2tp component of D-Link’s DIR-825 router software lies in the fact that the operation of writing data beyond the buffer in memory occurs when processing the peerhostname parameter. Exploiting this vulnerability allows a remote attacker ...