PT-2026-126617

A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute arbitrary code with elevated privileges. Exploitation requires user interaction...

PT-2026-126627

A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Service condition and potentially execute arbitrary code by...

APSB26-178 : Security updates available for Substance 3D Painter

Adobe has released a priority 3 update for Adobe Substance 3D Painter. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

APSB26-162 : Security update available for Adobe Campaign Classic

Adobe has released a priority 2 security update for Adobe Campaign Classic. This update addresses vulnerabilities rated critical that could result in arbitrary code execution, security feature bypass, and privilege escalation. Adobe is not aware of any exploits in the wild for any of the issues...

APSB26-182 : Security update available for Adobe Connect

Adobe has released a priority 2 security update for Adobe Connect. This update resolves a vulnerability rated critical that could result in arbitrary code execution. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nodejs (UTSA-2026-146122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146122 advisory. A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : nginx vulnerabilities (USN-8955-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8955-1 advisory. It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite...

Adobe Connect <= 4.4 Arbitrary Code Execution Vulnerability (APSB26-182)

The version of Adobe Connect installed on the remote host is prior to 4.5. It is, therefore, affected by a vulnerability as referenced in the apsb26-182 advisory. - Improper Control of Generation of Code 'Code Injection' CWE-94 potentially leading to Arbitrary code execution CVE-2026-48360 Note...

KLA91382 Multiple vulnerabilities in TeamViewer

Multiple vulnerabilities were found in TeamViewer. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be...

PT-2026-126704

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

RockyLinux 10 : freeipmi (RLSA-2026:89905)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89905 advisory. FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses CVE-2026-85504 FreeIPMI: FreeIPMI: Arbitrary code executi...

PLANET IGS-5225-8P2T4S Stack-based Buffer Overflow (CVE-2026-81944)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : Brotli vulnerability (USN-8956-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8956-1 advisory. It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to...

TencentOS Server 3: postgresql:12 (TSSA-2026:1216)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1216 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-126432

Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's init .py module when the plugin is marked enabled in the config file, without verifying its plugin-password signature. A rogue local process with write access to the Electrum data...

PLANET IGS-5225-8P2T4S Active Debug Code (CVE-2026-81943)

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

TencentOS Server 4: xdg-dbus-proxy (TSSA-2026:1181)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1181 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RockyLinux 8 : xorg-x11-server (RLSA-2026:89747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89747 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Adobe Substance 3D Painter 12.0.0 < 12.2.0 Multiple Vulnerabilities (APSB26-178)

The version of Adobe Substance 3D Painter installed on the remote host is prior to 12.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-178 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2026-48379 -...