PT-2026-65292

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description An...

CVE-2026-51297

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

RockyLinux 9 : compat-openssl11 (RLSA-2026:44438)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44438 advisory. openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the preceding description block directly from the RockyLinux security...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39782)

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2logdocheckpoint Both jbd2logdocheckpoint and jbd2journalshrinkcheckpointlist periodically release jlistlock after processing a batch of buffers to avoid long hold times on the jlistlock. However,...

Linux Distros Unpatched Vulnerability : CVE-2026-64550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation is disabled, rmnetmapingresshandler passes the skb straight to...

SUSE CVE-2026-12617

The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.0-0.6.hum1 aarch64, x8664 nodejs24-bin-24.18.0-0.6.hum1 noarch nodejs24-devel-24.18.0-0.6.hum1 aarch64, x8664 nodejs24-docs-24.18.0-0.6.hum1 noarch...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: systemd: systemd-261.2-1.hum1 aarch64, x8664 systemd-boot-unsigned-261.2-1.hum1 aarch64, x8664 systemd-container-261.2-1.hum1 aarch64, x8664 systemd-devel-261.2-1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.4-2.hum1 aarch64, x8664 nginx-all-modules-1.30.4-2.hum1 noarch nginx-core-1.30.4-2.hum1 aarch64, x8664 nginx-filesystem-1.30.4-2.hum1 noarch nginx-mod-devel-1.30.4-2.hum1 aarch6...

tipc: fix out-of-bounds read in broadcast Gap ACK blocks

...

Linux Distros Unpatched Vulnerability : CVE-2026-64530

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return...

Security update for nginx (important)

openSUSE security update: security update for nginx ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21439-1 Rating: important References: bsc1265228 bsc1267525 bsc1268492 bsc1268495 Cross-References: CVE-2026-40460 CVE-2026-42055 CVE-2026-48142 CVSS...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.0-0.5.hum1 aarch64, x8664 nodejs24-bin-24.18.0-0.5.hum1 noarch nodejs24-devel-24.18.0-0.5.hum1 aarch64, x8664 nodejs24-docs-24.18.0-0.5.hum1 noarch...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.5.0-1.5.hum1 aarch64, x8664 nodejs26-bin-26.5.0-1.5.hum1 noarch nodejs26-devel-26.5.0-1.5.hum1 aarch64, x8664 nodejs26-docs-26.5.0-1.5.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-canary-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-logcli-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-3.7.4-0.1.hum1.src src...

Updated graphite2 packages fix a security vulnerability

The updated packages fix a security vulnerability: Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range. CVE-2026-50593...

SUSE CVE-2026-64302

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages Commit bf9e4e30f353 "x86/mm: use pagetablefree", switched from freeing non-boot page tables through freepages to pagetablefree. However, the function is also called to free vmemmap...

SUSE CVE-2026-64413

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: zero chainstack array sashiko reports: looking at ebtables table translation, could a sparse cpupossiblemask lead to an uninitialized pointer free? If cpupossiblemask is sparse for example, CPU 0 and CPU 2 ar...

SUSE CVE-2026-64436

In the Linux kernel, the following vulnerability has been resolved: net: afkey: initialize algkeylen for IPComp states pfkeymsg2xfrmstate handles the IPComp SADBXSATYPEIPCOMP case by allocating x-calg and copying only the algorithm name: x-calg = kmallocobjx-calg; if !x-calg err = -ENOMEM; goto...

CVE-2026-10681 SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...