CVE-2026-98387

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing loops in ecbaescrypt and ctraescrypt. If skcipherwalkvirt fails, the wa...

PT-2026-114229

Name of the Vulnerable Software and Affected Versions mcp versions 1.8.0 through 1.29.9 mcp versions 2.0.0 through 2.1.9 Description Stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamable http app, and StreamableHTTPSessionManager, retain session entries without an idle...

Linux Distros Unpatched Vulnerability : CVE-2026-109677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcardLocateCardsByATRACall because the ATR pattern cbAtr byte count i...

Media Foundation Code Execution

The vulnerability of the Media Foundation component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-86856: Out-of-bounds Write

A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption...

UBUNTU-CVE-2026-98420

In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbdsessionregister destroys valid sessions after ten seconds of inactivity whenever a client starts another SessionSetup exchange. This confuses Session.IdleTime with...

Media Component DoS

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130141 advisory. rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries wit...

Linux Distros Unpatched Vulnerability : CVE-2026-98387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix skcipherwalk return code handling in aess390 The return codes from skcipherwalkvirt were not properly checked before entering the processing...

Linux Distros Unpatched Vulnerability : CVE-2026-109951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that...

AlmaLinux 8 : ruby:3.3 (ALSA-2026:72285)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:72285 advisory. resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses CVE-2026-80212 Tenable has extracted the preceding description blo...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130158 advisory. Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : FFmpeg vulnerabilities (USN-8915-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8915-1 advisory. Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. A...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: dovecot (UTSA-2026-130075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130075 advisory. An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory...

Linux Distros Unpatched Vulnerability : CVE-2026-86563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. CVE-2026-86563 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-107611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to re...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130146 advisory. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. Tenable has extracte...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: dovecot (UTSA-2026-130073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130073 advisory. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in, which causes memory and CPU usage to grow...

Linux Distros Unpatched Vulnerability : CVE-2026-100231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GStreamer multimedia framework's ASF muxer plugin asfmux. When writing string metadata tags containing Unicode characters outside the...

Linux Distros Unpatched Vulnerability : CVE-2026-109947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via...