CVE-2026-123279: JetBrains Datalore: In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators

In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators...

CVE-2026-123302: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted…

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted projects via script engine discovery...

CVE-2026-123304: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path

In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path...

CVE-2026-123308: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects

In JetBrains IntelliJ IDEA before 2026.3 code execution via the document import was possible in untrusted projects...

CVE-2026-123838: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file...

CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-123151

A flaw was found in the GNU debugger GDB. When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with...

CVE-2026-123280: JetBrains Datalore: In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports

In JetBrains Datalore before 2026.2.4 unauthenticated users could execute code via published interactive reports...

RHEL 8 / 9 : Satellite 6.16 EUS (RHSA-2026:95655)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95655 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities describe...

RHEL 9 : tesseract (RHSA-2026:95086)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95086 advisory. A commercial quality OCR engine originally developed at HP between 1985 and 1995. In 1995, this engine was among the top 3 evaluated by UNL...

HPESBVS05168 rev.1 - HPE VM Essentials Software, Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Morpheus Software - VM Essentials HPE VME 9.0 9.0.2 HPE Morpheus Software HPE VME 9.0 9.0.2 - N/A HPE Morpheus Software - Advanced HPE VME 9.0 9.0.2 - N/...

CVE-2026-123831: JetBrains CLion: In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings

In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings...

RHEL 9 : Satellite 6.19 (RHSA-2026:95652)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:95652 advisory. This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described...

AlmaLinux 8 : tesseract (ALSA-2026:95725)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:95725 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

UBUNTU-CVE-2026-122328

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

UBUNTU-CVE-2026-123151

A flaw was found in the GNU debugger GDB. When GDB connects to a remote debug target, a malicious target can cause GDB to overflow a buffer on the stack while parsing the target's replies. This can crash GDB or potentially allow the target to execute arbitrary code in the GDB client process with...

CVE-2026-90436: Apache Software Foundation Apache Axis 1.x (EOL): ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated…

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-123276: JetBrains CLion: In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug…

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

rdpgfx FreeRDP Code Execution

The vulnerability in the rdpgfx component of the FreeRDP RDP client is related to use-after-free memory allocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

PT-2026-138093

Name of the Vulnerable Software and Affected Versions JetBrains CLion versions prior to 2026.2 Description Remote code execution is possible in Safe Mode through the manipulation of Meson project settings. Recommendations Update to version 2026.2 or later...