CVE-2026-46242

CVE-2026-46242 full poc and lpe Kernel Range Status Notes 5.15.209 - 5.16 Affected Backported introducing commit 6.1.175 - 6.2 Affected Backported introducing commit 6.4 - 6.18.32 Affected Bug introduced in mainline 6.4 6.19 - 7.0.9 Affected Includes latest stable v6.1-based Pixel 8, older NOT...

New-lib3mf.dll-for-MeshMixer

New lib3mf.dll for MeshMixer Precompiled lib3mf.dll for MeshMixer which includes a backported patch for CVE-2021-21772, and an updated zlib 1.3.1. Replace your original one at C:\Program Files\Autodesk\Meshmixer\ Source code included, if you desire to compile it yourself. CVE-2021-21772:...

salt-security-backports

Se pueden solicitar parches oficiales para versiones anteriores en: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Los parches aquí son personalizados y pueden diferir de los oficiales ⚠ Parches de seguridad retroportados para versiones no compatibles de Salt Los parches en este...

CVE-2025-12543-Fix-for-Wildfly

Imagen Base WildFly 11.0.0.Final — Parche CVE-2025-12543 Resumen Este repositorio proporciona una imagen base Docker construida sobre WildFly 11.0.0.Final con una corrección retroportada para CVE-2025-12543 , una vulnerabilidad crítica de validación del encabezado Host en Undertow. La imagen está...

Fedora 44 : freerdp2 (2026-d91338eea8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d91338eea8 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

USN-8700-1 mysql-8.0, mysql-8.4 vulnerabilities

Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.11 in Ubuntu 26.04 LTS. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly...

Fedora 44 : libxls (2026-73af37bdd0)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-73af37bdd0 advisory. - Backport CVE patches - fixes CVE-2026-26824 rhbz2484566 - fixes CVE-2026-26825 rhbz2484567 Tenable has extracted the preceding description block...

Fedora 46 : libxls (2026-dabb47ed4a)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dabb47ed4a advisory. Automatic update for libxls-1.6.3-9.fc46. Changelog Sat Aug 15 2026 Elliott Sales de Andrade - 1.6.3-9 - Backport CVE patches - fixes CVE-2026-26824...

CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

GHSA-C4C3-PG64-4M4V Mermaid configuration APIs allow prototype pollution

Summary Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge the caller-supplied configuration object into Mermaid's internal config using the assignWithDepth deep-merge helper that is vulnerable to prototype pollution. Because these APIs...

RHEL 9 : Backport fixes for CVE-2026-64835 and CVE-2026-58049 (Important) (RHSA-2026:51180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51180 advisory. CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-5804...

Exploit for CVE-2026-64560

CVE-2026-64560 — Linux Kernel posix-cpu-timers Non-leader exec...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

PackageKit security update

1.1.10-2.0.3 - Backport fix for CVE-2026-41651 Orabug: 39467887...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

libpq security update

13.23-3 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 13.23-2 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239...

Oracle Linux 10 : freerdp (ELSA-2026-19142)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19142 advisory. - Backport several CVE fixes CVE-2026-40033, CVE-2026-44420, CVE-2026-44421, CVE-2026-44422, CVE-2026-45700 Resolves: RHEL-186978, RHEL-186967,...

Fedora 43 : python-pillow (2026-fc2ded926e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc2ded926e advisory. Backport fixes for CVE-2026-59197 and CVE-2026-54058. ---- Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 Tenabl...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...