ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...

MINI-97V8-JVMC-J6P3

Bulletin has no description...

MINI-VV8W-MF65-Q8R7

Bulletin has no description...

MINI-XJMR-WXVH-GX2V

Bulletin has no description...

EUVD-2026-57687

A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-ap...

PT-2026-71757

Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker. An authenticated user holding only read privileges on a single searchable index can submit one...

PT-2026-71687

The address standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize address to trigger memory corruption by providing a rules tab...

PT-2026-71615

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca cipher2protkey Add validation of both the actual key buffer size and token length fields in all the cca check sectoken functions. Additionally check in cca gencipherkey for possible...

Linux Distros Unpatched Vulnerability : CVE-2026-48809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - python-engineio is a Python implementation of the Engine.IO realtime client and server. Versions prior to 4.13.2 have two specific configurations of the...

Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2026-73500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etc...

The vulnerability of the slaves/w1_therm.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the slaves/w1therm.c component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71898

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Resolving relative paths containing parent directory '..' segments previously performed string conversions and buffer rewrites at each step. This process resulte...

PT-2026-71778

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

PT-2026-71466

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...

PT-2026-71607

Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets reach the serve...

ALSA-2026:54510 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

ALSA-2026:54654 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

UBUNTU-CVE-2026-73150

GHSA-4f8x-49pf-3x5v: Buffer overflow in APRS message construction...

Linux Distros Unpatched Vulnerability : CVE-2026-18370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies...