Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: prefer nftchainvalidate nftchainvalidate already performs loop detection, as a cycle in the process could lead to a call stack overflow ctx-level = NFTJUMPSTACKSIZE. It also iterates through the maps via t...

Astra Linux - vulnerability in htmldoc

A stack-based buffer under-read in htmldoc prior to version 1.9.12 allows attackers to trigger a denial of service by sending a specially crafted BMP image to imageloadbmp...

Astra Linux – Vulnerability in pyyaml

In PyYAML before version 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1, and the 'UnsafeLoader' has been introduced to maintain backward compatibility with this function...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added null pointer check to attrloadrunsvcn Certain metadata files are processed prior to MFT. This includes a null pointer check for some edge cases that could lead to NPD when reading these metadata files from a...

Astra Linux – Vulnerability in Tomcat9

Occasional URL redirection to untrusted sites is a vulnerability in Apache Tomcat, caused by the LoadBalancerDrainingValve. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.18, 10.1.0-M1 through 10.1.52, 9.0.0.M23 through 9.0.115, and 8.5.30 through 8.5.100. Other,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “Revert ‘sched/fair: Make sure to try to detach at least one movable task’” This change is reflected in commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06. The patch b0defa7ae03ec changed the load balancing logic to ignore env.maxlo...

CVE-2026-110877: Out-of-bounds Read

AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmounpacker::decrypt, opened via...

AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792085312)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to...

PT-2026-115127

Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description A heap out-of-bounds read occurs in the CdmoLoader::load function within src/dmo.cpp. This issue allows an attacker to read data beyond a heap allocation by providing a truncated TwinTeam DMO file...

PT-2026-115171

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.16 Description An out-of-bounds read occurs in the MultiTracker loader MTM Load function because the module channel count is not clamped. A remote attacker can provide a specially crafted .mtm file with a channe...

PT-2026-115172

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.16 Description A heap out-of-bounds read exists in the IMF Load loader. An attacker can trigger this by providing a specially crafted IMF module with the linear-period header flag enabled and notes mapped to...

Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792085312)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due t...

CVE-2026-101960

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops allows an attacker to cause an rpd crash...

CVE-2026-101960 Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops allows an attacker to cause an rpd crash...

CVE-2026-101960

Juniper Networks Junos OS Evolved on QFX5240 , QFX5241 , and QFX5250 models contains an Out-of-bounds Write vulnerability (CWE-787) in the routing protocol daemon (rpd) . The issue occurs when the device is configured for BGP global-load-balancing and handles more than 128 ecmp next-hops . A mali...

EUVD-2026-101428

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops allows an attacker to cause an rpd crash...

curl: CVE-2026-111481: server-set cookie still aborts cookie jar

Suggested CWE: CWE-1284: Improper Validation of Specified Quantity in Input H1 didn't let me chose this AI Disclaimer: I've written this report with the help of AI, please feel free to let me know if I made a mistake, I've read the final revision of this report a few times to ensure it was solid...

PT-2026-113627

Name of the Vulnerable Software and Affected Versions PO/MO Editor versions prior to 1.4.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above to perform Stored Cross-Site Scripting. By manipulating the podata...

PT-2026-113955

The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx page header data size is never validated against the glyph data a page actually contains, the two passes can read different...

PT-2026-114113

Name of the Vulnerable Software and Affected Versions Praat versions prior to 7.0.03 Description An issue exists in the Model Loader component within the file external/whispercpp/whisper.cpp. Specifically, the whisper model load function is susceptible to an out-of-bounds write, which occurs when...