EUVD-2026-101405

A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic...

EUVD-2026-101388

A Stack-based Buffer Overflow vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message. This issue only affects platforms that support...

CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used

A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled...

CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used

A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

HPE NonStop Kernel Level Thread Model Lib buffer error vulnerability

The HPE NonStop Kernel Level Thread Model Lib T1132L01 version contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow and may lead to arbitrary code execution...

Siemens Software Center: Permissions, licensing, and access control issues

The Siemens Software Center has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from the loading of dynamic link libraries DLLs from uncontrolled search paths. This could allow authenticated local attackers to place malicious DLLs in the application’...

WebPros SolusVM 2: Code Injection Vulnerability

WebPros SolusVM 2 2.0.0-44576 and earlier versions have a code injection vulnerability. This vulnerability stems from server-side template injection, which may allow remotely authenticated users with root privileges to execute arbitrary code...

TotalSecurity TotalAV has a path traversal vulnerability

TotalSecurity TotalAV versions 7.1.17 and earlier have a security vulnerability. This vulnerability stems from an issue with local privilege escalation, allowing non-privileged local users to forge GRPC IPC authentication tokens by loading IPC.dll. These users can then abuse the SYSTEM service in...

Tatsh bincookie buffer error vulnerability

Versions of Tatsh bincookie prior to 0.1.9 contain a buffer error vulnerability. This vulnerability stems from the bincookieinitfile function in bincookie.h, which allocates buffers based on the actual length of the .binarycookies file. However, it uses the numpages field of the file as the loop...

Amazon Neptune Engine deserialization injection vulnerability

A security vulnerability exists in Amazon Neptune Engine versions from 1.2.0.0 up to but including 1.5.0.0. This vulnerability stems from the Gremlin graph data import component’s deserialization of untrusted data, potentially allowing authenticated remote attackers with standard database...

Telegram numerical error vulnerability

Telegram version 6.6.2 has a numerical error vulnerability, which stems from the rlottie library’s numerical truncation errors. There is a lack of proper validation of the data provided by users. This can lead to data being written before the allocated buffer starting position. Attackers can...

Ansible code injection vulnerability

Ansible has a code injection vulnerability stemming from Jinja2 template injection. Low-privilege Kubernetes users can craft malicious custom resource specification values, causing embedded Jinja2 expressions to execute within operator pods. This may lead to arbitrary code execution and privilege...

CVE-2026-92892

A flaw was found in JFrog CLI. Under specific configurations, a remote attacker can achieve arbitrary code execution on the host running the utility by exploiting improper command argument handling. Successful exploitation allows the attacker to run unauthorized commands within the context of the...

freeipa: ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL

A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting XSS vulnerability in the FreeIPA/IdM Web UI password reset page. By enticing a victim to click a specially crafted link and complete a password reset, the attacker could inject and execute...

EUVD-2026-101106

Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pullrequesttarget event. A fork author can modify a referenced reusable workflow so attacker-controlled code executes with the repository and organization secrets available to tha...

[SECURITY] [DSA 6560-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6560-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 14, 2026 https://www.debian.org/security/faq -...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...