CVE-2025-67823

CVE-2025-67823 affects Mitel MiContact Center Business up to version 10.2.0.10 and Mitel CX up to 1.1.0.1. The vulnerability is in the Multimedia Email component and stems from insufficient input validation, enabling an unauthenticated attacker to perform a Cross-Site Scripting (XSS) attack. A su...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002824 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003524 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002605 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002631)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002631 advisory. Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with loca...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002555)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002555 advisory. Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially...

PT-2026-4736

Summary The application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing "Favourite Output Channel Configurations." Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to...

PT-2026-3136

Name of the Vulnerable Software and Affected Versions Mitel MiContact Center Business versions through 10.2.0.10 Mitel CX versions through 1.1.0.1 Description A flaw exists in the Multimedia Email component that could allow an unauthenticated attacker to perform a Cross-Site Scripting XSS attack...

CVE-2025-67823

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting XSS attack due to insufficient input validation. A successful exploit requires user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003516 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003559)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003559 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002063)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002063 advisory. Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003094 advisory. The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003131 advisory. Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003218 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003453)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003453 advisory. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user...

CVE-2026-22856

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

CVE-2026-22851

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...

UBUNTU-CVE-2026-22856

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race in the serial channel IRP thread tracking allows a heap use‑after‑free when one thread removes an entry from serial-IrpThreads while another reads it. This vulnerability is fixed in 3.20.1...

UBUNTU-CVE-2026-22851

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...