CVE-2025-15691

The WPFunnels WordPress plugin, in versions before 3.13.0 , contains an authentication bypass vulnerability. The plugin fails to verify if user registration is enabled on the site before creating accounts from opt-in form submissions, incorrectly relying on a value provided within the request. Th...

CLEANSTART-2026-XF15574 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Security vulnerability affects the octo-sts package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...

PT-2026-85744

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

Linux Distros Unpatched Vulnerability : CVE-2026-84451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full- item branch of...

Linux Distros Unpatched Vulnerability : CVE-2026-84450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item containing a clap property and an ispe width or heigh...

Linux Distros Unpatched Vulnerability : CVE-2026-85393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-106458)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106458 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...

Linux Distros Unpatched Vulnerability : CVE-2026-84732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that...

PT-2026-85404

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...

Fedora 43 : kernel (2026-a7b1ccd14c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a7b1ccd14c advisory. The 7.1.13 stable kernel update contains a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream...

Linux Distros Unpatched Vulnerability : CVE-2026-71198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import...

Linux Distros Unpatched Vulnerability : CVE-2026-76925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...

RHEL 7 : kernel-rt (RHSA-2026:63539)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:63539 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

UBUNTU-CVE-2026-84450

Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read...

OPENSUSE-SU-2026:11679-1 agama-24+0.a836cced5-54.1 on GA media

These are all security issues fixed in the agama-24+0.a836cced5-54.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2026-84451

Incomplete fix for GHSA-73p7-m7gg-w2jv leaves libheif 1.23.1 vulnerable to an out-of-bounds read...

OPENSUSE-SU-2026:11691-1 trivy-0.74.0-3.1 on GA media

These are all security issues fixed in the trivy-0.74.0-3.1 package on the GA media of openSUSE Tumbleweed...

firefox-esr-153.2.0-1.1 on GA media (moderate)

firefox-esr-153.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11666-1 Rating: moderate Cross-References: CVE-2026-74952 CVE-2026-75874 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84129 CVE-2026-84130...

glances-common-4.5.6-1.1 on GA media (moderate)

glances-common-4.5.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11674-1 Rating: moderate Cross-References: CVE-2021-23418 CVE-2026-62982 CVE-2026-68517 CVE-2026-68518 CVE-2026-68519 CVE-2026-68520 Affected Products: openSUSE Tumbleweed An update that solves 6 vulnerabilities can now be...

PT-2026-86429

Name of the Vulnerable Software and Affected Versions gRPC-Go versions prior to 1.82.2 gRPC-Go versions prior to 1.83.2 Description Servers created with xds.NewGRPCServer are susceptible to a Denial of Service DoS because the HTTP/2 server transport may accept RPCs missing both the :authority...