ALSA-2026:92615 Important: aspell security update

GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security Fixes: aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 For more details about the security issues, including th...

CVE-2026-51832

The IDrive IDrive Backup for Windows software (version 7.0.1.1 and below ) contains a vulnerability in the id_service.exe component. This issue allows a local attacker to perform arbitrary code execution . The vulnerability has been remediated in Version 7.0.1.2 . No specific exploit information ...

EUVD-2026-113367

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the idservice.exe component...

CVE-2023-22793: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the…

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

PT-2026-132855

Name of the Vulnerable Software and Affected Versions Veeam Management Pack for Microsoft System Center versions prior to 13.1.0.334 Description An unauthenticated attacker can perform remote code execution RCE on servers running the Veeam Virtualization Extensions service. This allows the attack...

PT-2026-132124

Name of the Vulnerable Software and Affected Versions Agno versions prior to 3.1.12 Description An unsafe reflection issue exists in PandasTools where model-controlled function names are passed to the getattr function. This allows an attacker to use prompt injection to invoke arbitrary pandas...

EUVD-2026-113265

An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to execute arbitrary code via supplying a crafted POST request...

CVE-2026-107239: Veeam Management Pack for Microsoft System Center: A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution…

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

PT-2026-132812

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sys get temp dir and reuses that directory without verifying it...

CVE-2026-119193: sebastianbergmann phpunit: PHPUnit is a testing framework for PHP

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sysgettempdir and reuses that directory without verifying its...

PT-2026-132230

Name of the Vulnerable Software and Affected Versions Langflow OSS versions 1.0.0 through 1.12.8 Description Improper control of code generation allows an unauthenticated remote attacker to execute arbitrary code on the server. This issue also involves an unauthenticated code-execution exposure...

PT-2026-132851

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as 100, ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the...

CVE-2026-115943: Eval Injection

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as 100, ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the...

PT-2026-132785

Name of the Vulnerable Software and Affected Versions ServiceNow AI Platform affected versions not specified Description A sandbox escape issue exists in the ServiceNow AI Platform. An authenticated user with the admin role can bypass Rhino sandbox restrictions to execute arbitrary code on the...

CVE-2026-107238: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account…

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-51831

An issue in IDrive IDrive Backup for Windows affects versions 7.0.1.1 and below . The vulnerability exists in the id_service.exe component, which allows a local attacker to execute arbitrary code. The issue is remediated in Version 7.0.1.2 . No specific exploit details or in-the-wild exploitation...

FreeBSD : Pillow -- multiple vulnerabilities (b9a3fd21-d2af-11f1-bae2-3497f65b111b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b9a3fd21-d2af-11f1-bae2-3497f65b111b advisory. The Pillow project published security advisories for issues fixed in release 13.0.0. They...

CVE-2026-92744: Delinea Privilege Manager: Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as…

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem...

ALSA-2026:92419 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...