UBUNTU-CVE-2026-70194

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...

UBUNTU-CVE-2026-70007

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96232: Out-of-bounds Read

Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-113552

Name of the Vulnerable Software and Affected Versions MessagePack for C versions prior to 2.5.303 MessagePack for C versions prior to 3.1.9 Description Deserializing attacker-controlled MessagePack data as System.Object through the PrimitiveObjectFormatter function can lead to excessive memory...

Microsoft .NET: CVE-2026-87697: .NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96238: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96957: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-66822: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

ROS-20261013-73-0467

The vulnerability of the tapgetuserxdp function in the drivers/net/tap.c file of the Linux kernel network device driver involves copying buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Kernel Out-of-Bounds Write

Summary Apache NuttX is a free and open-source FOSS real-time operating system RTOS with an emphasis on standards compliance and small footprint. Scalable from 8-bit to 64-bit microcontroller environments, the primary governing standards in NuttX are POSIX and ANSI standards. Additional standard...

CVE-2026-96235: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

Siemens .NET Client Library for SIMATIC S7 Webserver API path traversal vulnerability

The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 has a path traversal vulnerability. This vulnerability stems from the failure to properly validate the file names received from the remote server during ticket downloads. As a result, path traversal is possible,...

Siemens .NET Client Library for SIMATIC S7 Webserver API information leakage vulnerability

The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 has a vulnerability related to information leakage. This vulnerability arises from the improper masking of the PLC recovery password from HTTP error messages. As a result, attackers with access to logs or other...

USN-8914-1 google-guest-agent, google-osconfig-agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability

It was discovered that the Go x/net/idna package, vendored in Google Guest Agent and Google OS Config Agent, incorrectly accepted Punycode-encoded labels that decoded to ASCII-only labels when processing internationalized domain names. A remote attacker could possibly use this issue to bypass...

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go 1.26.9 bsc1255111: CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection bsc1284767. CVE-2026-78659:...