Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-8819-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8819-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

CVE-2026-91838

A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special characters, known as shell metacharacters, into VPN connection profile fields such as CA certificate or proxy settings. These unescaped...

USN-8819-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

USN-8819-2 linux-aws, linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

DEBIAN-CVE-2026-97554

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory entry is encountered e.g. invalid SID lengths from an untrusted server,...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

EUVD-2026-85185

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

EUVD-2026-85167

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798 Foxit PDF Editor/Reader Updater Privilege Escalation

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader . The flaw is caused by an insecure permission configuration that allows regular users to modify the configuration file. This vulnerability could lead to arbitrary script execution with higher privil...

CVE-2026-91798 Foxit PDF Editor/Reader Updater Privilege Escalation

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

CVE-2026-91798: Incorrect Permission Assignment for Critical Resource

A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges...

PT-2026-97278

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsget app manager, which just hands back the manager object from...

PT-2026-97217

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A local privilege escalation issue exists in the update daemon of Foxit PDF Editor/Reader. This is caused by an insecure permission configuration that allows regular users to...

[SECURITY] Fedora 45 Update: mpd-0.24.14-2.fc45

A daemon for playing music of various formats. Music is played through the server's audio device. The daemon stores info about all available music, and this info can be easily searched and retrieved. Player control, info retrieval, and playlist management can all be managed remotely...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openldap (UTSA-2026-090144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090144 advisory. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon crash. Tenable has extract...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libreswan (UTSA-2023-001671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001671 advisory. pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The earliest...