Linux Distros Unpatched Vulnerability : CVE-2026-79293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromiu...

Linux Distros Unpatched Vulnerability : CVE-2026-79001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-78941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093579 advisory. An exploitable information disclosure vulnerability exists in the devread functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-79074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-79144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium securit...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093635 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and...

Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-8665-1)

"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8665-1 advisory. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093256)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093256 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 5.6.45 and prior and 5.7....

Linux Distros Unpatched Vulnerability : CVE-2026-78987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium...

RHEL 10 : python-urwid (RHSA-2026:60353)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:60353 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093586)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093586 advisory. An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs- Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: colord (UTSA-2026-054050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054050 advisory. There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist becau...

Linux Distros Unpatched Vulnerability : CVE-2026-79034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data vi...

Linux Distros Unpatched Vulnerability : CVE-2026-79104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093563)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093563 advisory. An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause...

CVE-2026-80198 Kimai before 2.56.0 Information Disclosure via config() Twig Function

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80198 Kimai before 2.56.0 Information Disclosure via config() Twig Function

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-80198

Kimai versions before 2.56.0 fail to properly restrict the config() Twig function within sandboxed invoice and export templates. This allows users with admin privileges to upload malicious templates that read arbitrary configuration keys, potentially exfiltrating sensitive server-wide secrets suc...

CVE-2026-80194

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_project_view_export). Authorization guards are attached to the sibling __invoke method rather than at the class level, leaving the export route without any authorization checks. As...