PT-2026-122697

Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

UBUNTU-CVE-2026-103503

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacertspath to a CA store that leaves that CA out...

PT-2026-114869

Name of the Vulnerable Software and Affected Versions Eclipse Jetty affected versions not specified Description In jetty-server and jetty-proxy, the host whitelist and blacklist mechanisms are case-sensitive. This allows hosts to bypass security filters if they differ only by the casing of the...

PT-2026-122850

Security vulnerability affects the nfs-subdir-external-provisioner package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792085312)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due t...

CVE-2026-94134: Key Exchange without Entity Authentication

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position...

CVE-2026-3712: Server-Side Request Forgery (SSRF)

The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...

PT-2026-115218

Name of the Vulnerable Software and Affected Versions BeyondTrust Remote Support versions prior to 26.2.3 Description Internal messaging components of the product fail to adequately validate the origin of received messages. This improper origin validation allows an unauthenticated remote attacker...

PT-2026-114821

Name of the Vulnerable Software and Affected Versions bhyve affected versions not specified Description The HDA audio device model fails to verify zero-length Buffer Descriptor List BDL entries when initiating a stream. This oversight leads to out-of-bounds read or write operations during Direct...

PT-2026-114761

The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...

PT-2026-114820

Name of the Vulnerable Software and Affected Versions bhyve affected versions not specified Description The xHCI USB 3 device model fails to validate or save the event ring size provided by the guest. Because the size is re-read from guest memory during each use, Transfer Request Block TRB fields...

CVE-2026-101309: Concurrent Execution using Shared Resource with Improper Synchronization

The xHCI USB 3 device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Transfer Request Block TRB fields were loaded without protection against concurrent modification by the guest. This race condition could be...

My Credentials, Please: Detecting Filesystem Capability Laundering in MCP Servers at Scale

The Model Context Protocol MCP standardizes how AI agents invoke external tools. MCP servers expose tools through a declared contract consisting of a name, description, and argument schema. In typical local deployments, client-side approval of a tool call grants the underlying server process broa...

CVE-2026-101311: Concurrent Execution using Shared Resource with Improper Synchronization

The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally, writes to the framebuffer BAR could set arbitrary width and height values without validation, and the framebuffer BAR I/O and RFB rendering...

PT-2026-115312

The Apache Airflow SFTP provider's deferrable code paths SFTPTrigger, SFTPHookAsync, SFTPClientPool disable SSH host-key verification by default unless the connection explicitly sets no host key check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An...

PT-2026-115091

New Citrix XenServer flaws in versions 8.4 & 9 threaten host systems if VMs have elevated rights. Watch out for CVE-2026-79610, CVE-2026-102700, CVE-2026-102701 & -79611. The bulletin reveals host-impacting vulnerabilities, guest crash risks, and no full exploit code yet. Confirm your XenServer...

PT-2026-122845

Security vulnerability affects the ollama-fips package. Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component...

EUVD-2026-102130

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...

CVE-2026-110835 FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by httpproxyconnect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a prox...

kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device

A flaw was found in the Linux kernel's AFIUCV Advanced Program-to-Program Communication over IUCV network protocol implementation. The afiucvhsrcv function, responsible for receiving frames, does not properly filter incoming frames based on the ingress network device. This oversight allows a loca...