CVE-2026-110936: Uncontrolled Search Path Element

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

CVE-2026-105474: Improper Neutralization of Special Elements Used in a Template Engine

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

CVE-2026-110746: Improper Limitation of a Pathname to a Restricted Directory

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-47168: Deserialization of Untrusted Data

EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored in background MassAction or Export parameters and later deserialized by the application. The deserialization paths do...

CVE-2026-110812: Deserialization of Untrusted Data

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

CVE-2026-79831: Heap-based Buffer Overflow

A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution...

CVE-2026-79830: Stack-based Buffer Overflow

A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution...

HPE NonStop Posix User Threads buffer error vulnerability

The HPE NonStop Posix User Threads T1280L02 ACG and earlier versions contain a buffer error vulnerability stemming from a heap buffer overflow, which may lead to arbitrary code execution...

PT-2026-114897

A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution...

PT-2026-115330

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code...

RockyLinux 8 : idm:DL1 (RLSA-2026:83460)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83460 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...

PT-2026-114957

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 9.3.7 Description An authenticated administrator can provide crafted serialized PHP object data stored in background MassAction or Export parameters. The application later deserializes this data without restricting...

PT-2026-115333

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

PT-2026-115003

🚨 CVE-2026-92982 A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded...

PT-2026-115315

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption in Workers allows a remote attacker to potentially execute arbitrary code inside the sandbox when a user opens a crafted HTML page. Recommendations Update Google Chrom...

PT-2026-115314

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption occurs in the DOM Document Object Model, which is the programming interface for HTML and XML documents. This issue allows a remote attacker to execute arbitrary code...

PT-2026-115322

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description A use after free issue exists in V8, which is the open-source JavaScript and WebAssembly engine used in Google Chrome. A remote attacker can execute arbitrary code within the sandbox by...

MiracleLinux 9 : flatpak-1.12.9-4.el9_8.4 (AXSA:2026-2050:04)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2050:04 advisory. flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via...

Rocky Linux 8 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81613)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681613 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Out-of-bounds write via lar...

Debian dsa-6563 : mutt - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6563 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6563-1 [email protected] https://www.debian.org/security/ Moritz...