CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

EUVD-2026-66133

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response EIR packet that causes a buffer overflow when the target device performs Bluetooth discovery. This...

PT-2026-82044

Name of the Vulnerable Software and Affected Versions TeamViewer Desktop Clients versions prior to 15.81.5 Description Improper neutralization of path traversal sequences allows an authenticated remote session participant to write files to unintended locations on the local file system. This occur...

CVE-2025-70290

CVE-2025-70290 affects Denx U-Boot before 2026.04 . An integer overflow in the ZFS filesystem support can be triggered by malformed on-disk metadata , leading to incorrect memory allocation and subsequent out-of-bounds memory access . This may result in a crash or arbitrary code execution during ...

EUVD-2026-66747

JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...

CVE-2025-61165

An arbitrary file upload vulnerability in the /v1/mydrive/batchupload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file...

CVE-2026-39275

Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...

CVE-2026-75363

Comfast CF-WR630AX v.2.7.0.2 is vulnerable to arbitrary code execution via the /usr/bin/webmgnt and /cgi-bin/mbox-config endpoints, specifically through the timestr and display_n parameters. The attack requires an adjacent-network position and high privileges (CVSS 3.1: 6.8, Medium). CISA's SSVC ...

CVE-2026-52103

A zero-click remote code execution vulnerability in the /Terminal/Notification.hs component of SimpleX Chat versions prior to v6.5 allows an attacker to execute arbitrary commands in the context of the application by sending a crafted payload in a text message , with no user interaction required....

PT-2026-82281

Name of the Vulnerable Software and Affected Versions ZoneMinder affected versions not specified Description An authenticated OS command injection issue exists in the event export functionality. An authenticated user with View Events permission can execute arbitrary operating system commands on t...

Linux Distros Unpatched Vulnerability : CVE-2026-79142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

RHEL 9 : sqlite (RHSA-2026:59956)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59956 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a sing...

Linux Distros Unpatched Vulnerability : CVE-2026-79275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093176 advisory. Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-depende...

Linux Distros Unpatched Vulnerability : CVE-2026-79244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-79140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104764 advisory. Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds vi...

Linux Distros Unpatched Vulnerability : CVE-2026-79286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside...

Linux Distros Unpatched Vulnerability : CVE-2026-78905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-79057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute...