PT-2026-78321

Name of the Vulnerable Software and Affected Versions swtpm affected versions not specified Description An out-of-bounds read exists in the SWTPM NVRAM CheckHeader function. The issue occurs because the entry guard validates the buffer length using sizeofbh, which refers to the size of a pointer,...

PT-2026-102487

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the Catapult DCT2000 protocol dissector can lead to a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.8 to...

PT-2026-78846

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.4.0 through 4.4.18 Wireshark versions 4.6.0 through 4.6.7 Description A crash occurs in the Tektronix K12xx file parser, which can lead to a denial of service. Recommendations Update Wireshark versions 4.4.0 through 4.4.18...

PT-2026-78851

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the sharkd component occurs due to an expired pointer dereference, which can lead to a denial of service. Recommendations Update Wireshark...

CVE-2026-53451: Improper Limitation of a Pathname to a Restricted Directory

Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the unauthenticated save-waterfall-snapshot Socket.IO command passes attacker-controlled snapshotName input from backend/handlers/entities/sdr.py to...

CVE-2026-55564: Out-of-bounds Read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...

PT-2026-78635

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...

PT-2026-78867

Name of the Vulnerable Software and Affected Versions TP-Link TL-MR100 version 3.2 TP-Link TL-MR150 version 3.2 TP-Link TL-MR6400 version 8.0 TP-Link Archer MR600 version 2 Description An unauthenticated denial-of-service issue exists due to improper handling of exceptional request conditions,...

Linux Distros Unpatched Vulnerability : CVE-2026-65832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP value...

Linux Distros Unpatched Vulnerability : CVE-2026-56684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while...

Fedora 44 : radsecproxy (2026-099bb42b08)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-099bb42b08 advisory. radsecproxy 1.11.4 2026-08-10 Bug Fixes - Fix potential crash when rewrite is too big - Fix Message-Authenticator verification for CoA/Disconnect-Request - F...

PT-2026-83508

Name of the Vulnerable Software and Affected Versions Imager::File::PNG versions 1.003 through 1.003 Description A heap corruption issue exists when reading a PNG file containing a tRNS transparency chunk via the read direct8 function. The function adds an alpha channel to the created image but...

PT-2026-78324

Name of the Vulnerable Software and Affected Versions mod cluster affected versions not specified Description A flaw exists in the AdvertiseListenerImpl of the org.jboss.modcluster core module. An unauthenticated attacker can cause a denial of service by sending a single crafted UDP multicast...

PT-2026-78845

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A buffer over-read in the ERF file parser can lead to a crash, resulting in a denial of service. Recommendations At the moment, there is no information...

PT-2026-78684

The HL7800 cellular modem driver's +CGCONTRDP: response handler on cmd atcmdinfo ipaddr in drivers/modem/vendor standalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is...

PT-2026-78852

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the sharkd component occurs due to an expired pointer dereference, which can lead to a denial of service. Recommendations Update Wireshark...

CVE-2026-16828: Out-of-bounds Read

IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can cause the ASMI web server to crash with possible memory...

PT-2026-78583

IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware NVRAM parsing. An attacker with root access to a guest partition on an OpenPOWER system can write a specially crafted NVRAM...

CVE-2026-55192: Out-of-bounds Read

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream without comparing the decoded width and height to the RDPGFX surface dimensions used to validate region rectangles. A malicious RDP serve...

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...