Linux Distros Unpatched Vulnerability : CVE-2026-63861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe...

Linux Distros Unpatched Vulnerability : CVE-2026-15813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly...

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 stable and 1.31.3 mainline, and in NGINX Plus 37.0.3.1; anyone on an...

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861

The CVE covers a Linux kernel SPI subsystem issue: the mtk-snfi (on-host NAND ECC) engine registered during mtk_snand_probe() lacked proper teardown on probe unwind and remove-time cleanup. The fix introduces a devm cleanup action so nand_ecc_unregister_on_host_hw_engine() is automatically invoke...

CVE-2026-63861 spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

EUVD-2026-45545

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action aft...

CVE-2026-53375 drm/amdgpu/vce: Prevent partial address patches

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

EUVD-2026-45448

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

Server-Side Request Forgery (SSRF)

com.arcadedb:arcadedb-engine is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the IMPORT DATABASE statement accepting unvalidated source URLs without requiring administrative privileges, which allows an authenticated attacker to issue requests to arbitrary internal o...

SUSE SLED15 / SLES15 Security Update : python-python-engineio (SUSE-SU-2026:3085-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3085-1 advisory. - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through t...

Fedora 43 : chromium (2026-32e3e23696)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-32e3e23696 advisory. Update to 150.0.7871.124 CVE-2026-15764: Use after free in Ozone CVE-2026-15765: Use after free in Ozone CVE-2026-15766: Uninitialized Use in Skia...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.dstu3.support (>=6.9.5, <=6.9.8) +5 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version =6.9.5, =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

health.matchbox:matchbox-engine (>=4.1.8, <=4.1.10), org.hl7.fhir.publisher:org.hl7.fhir.publisher (>=2.2.7, <=2.2.8) +2 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.7, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.9.7, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r4b (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.r4b MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...

ca.uhn.hapi.fhir:org.hl7.fhir.convertors (>=6.9.5, <=6.9.8), ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.9.5, <=6.9.8) +4 more potentially affected by CVE-2026-49485 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.9.5, <=6.9.8)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.9.5, =6.9.5, =6.9.5, =4.1.8, =2.2.7, =2.2.7, =2.2.7, =2.2.8 Source cves: CVE-2026-49485 Source advisory: MEND:CVE-2026-49485...