Siemens SIMATIC S7-1500 TM MFP Use After Free (CVE-2025-21700)

In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc tc qdisc add dev lo...

Linux Distros Unpatched Vulnerability : CVE-2026-98497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination prefix lengths. mlx5eipsecpolicymask builds the...

Linux Distros Unpatched Vulnerability : CVE-2026-98791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix AFXDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested ...

Linux Distros Unpatched Vulnerability : CVE-2026-98564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq mt7530removecommon disposes the per-PHY interrupt mappings from .remove, but the regmap-irq chip tha...

Linux Distros Unpatched Vulnerability : CVE-2026-98563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink o...

Linux Distros Unpatched Vulnerability : CVE-2026-98487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: mdb: restart port group walk after deletion brmdbflushpgs keeps a pointer-to-pointer cursor while walking mp-ports. brmulticastdelpg can re-enter t...

Linux Distros Unpatched Vulnerability : CVE-2026-98495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack object. Its arpdev field may contain IFNAMSIZ byte...

Linux Distros Unpatched Vulnerability : CVE-2026-98804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pagepool: fix use-after-free in pagepoolrecycleringbulk With CONFIGPAGEPOOLSTATS=y, pagepoolrecycleringbulk updates the recycle stats after dropping the...

Linux Distros Unpatched Vulnerability : CVE-2026-83520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-83520 Note that Nessus relies on the presence...

Linux Distros Unpatched Vulnerability : CVE-2026-98612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: catc: bound the RX packet length in catcrxdone catcrxdone walks a multi-packet URB, reading a two-byte length from each packet header. Its bound, pktl...

Linux Distros Unpatched Vulnerability : CVE-2026-96959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-96959 Note that Nessus...

PT-2026-119305

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nfnatregisterfn function in the net/netfilter/nfnatcore.c component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality,...

ALSA-2026:86196 Important: golang security, bug fix, and enhancement update

The golang packages provide the Go programming language compiler. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references CVE-2026-97031 net/http:...

Linux Distros Unpatched Vulnerability : CVE-2026-70194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70194 Note that Nessus...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53080)

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of 'old' filters before change Like pointed out by Sashiko 1, since commit ed76f5edccc9 'net: sched: protect filterchain list with filterchainlock mutex' TC filters are added to a shared blo...

ALSA-2026:86169 Critical: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Critical: .NET 8.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Critical: .NET 9.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Critical: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...