Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104612 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpfmsgpopdata bounds check start and len are u32, so u64 la...

Linux Distros Unpatched Vulnerability : CVE-2026-74736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098723)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098723 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebtredirecttg dereferences brportgetrcu return without a NULL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104587)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104587 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at...

FreeBSD : FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions (9c2801aa-a0fd-11f1-ae1f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9c2801aa-a0fd-11f1-ae1f-bc241121aa0a advisory. When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs own...

Linux Distros Unpatched Vulnerability : CVE-2026-80552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of t...

CVE-2026-80202 Kimai before 2.56.0 Authorization Bypass via TimesheetVoter

Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute, which maps permissions only to owntimesheet or othertimesheet. As a result, any authenticated user with ROLETEAMLEAD or a role holding editothertimesheet/deleteothertimesheet can read, modify, and...

CVE-2026-80193 Kimai before 2.62.0 Authorization Bypass via QuickEntry

Kimai before 2.62.0 fails to validate createothertimesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with viewothertimesheet and editothertimesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassin...

UBUNTU-CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2026-66094

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65097

NVIDIA NemoClaw for Linux is affected by a vulnerability in its installation scripts , where an attacker could cause a download of code without integrity check . A successful exploit could lead to code execution , escalation of privileges , information disclosure , and data tampering . The CVSS 3...

GO-2026-6271 Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) in github.com/axllent/mailpit

Mailpit: WebSocket origin check bypass via percent-encoded path regression of CVE-2026-22689 in github.com/axllent/mailpit...

GO-2026-6285 Mattermost doesn't require system-level permission when patching protected default system roles in github.com/mattermost/mattermost-server

Mattermost doesn't require system-level permission when patching protected default system roles in github.com/mattermost/mattermost-server...

EUVD-2026-65743

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

GHSA-XQQH-3W52-Q8P7 Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wx95-c6cv-8532. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method,...

Duplicate Advisory: Nokogiri does not check the return value from xmlC14NExecute

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wx95-c6cv-8532. This link is maintained to preserve external references. Original Description Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method,...

CVE-2026-79788

Dradis Community Edition versions 5.1.0 through 5.2.0 are affected by a Server-Side Request Forgery (SSRF) vulnerability (CVSS 7.1, HIGH). The root cause is that ProvidersController and AgentsController gate their admin_required authorization on defined?(Dradis::Pro), a constant never defined in ...