PT-2026-109195

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.3. It stems from bpfoffloaddevmatch within the bpf subsystem, which reverts to using an offdev pointer when netdev fails to match. As a result, programs bound to devices can run on other devices. Attackers possessing CAPBPF and CAPNETADMIN...

Linux Distros Unpatched Vulnerability : CVE-2026-107890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed...

Linux Distros Unpatched Vulnerability : CVE-2026-107708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client...

Wireshark 1.6.x < 1.6.5 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.5 advisory. - Laurent Butti discovered that Wireshark failed to properly check record sizes for many packet capture...

Linux Distros Unpatched Vulnerability : CVE-2026-107655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.5:CLSA-2026:1791552137)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791552137 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...

CVE-2026-107888: NULL Pointer Dereference

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...

ROS-20261009-73-0015

The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-107655: NULL Pointer Dereference

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...

driver/net/ethernet/intel/idpf/idpf_lib.c component of the DoS

The vulnerability in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-104114: NULL Pointer Dereference

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

PT-2026-108922

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamd door switch in usr/src/cmd/cmd-inet/lib/nwamd/door if.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

CVE-2026-107890: NULL Pointer Dereference

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob converts these separators to IPPTAGJOB. During job startup, getoptions/ipplength subsequentl...

HAProxy Server DoS

The vulnerability in the hpackdhtinsert function within the src/hpack-tbl.c file of the HAProxy server software is related to dereferencing a null pointer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

PT-2026-117549

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...

PT-2026-108721

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.20 Description A NULL pointer dereference occurs in the cupsdCheckJobs function when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. The temporary-print...

Linux Distros Unpatched Vulnerability : CVE-2026-107888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that ha...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1791552138)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791552138 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...

PT-2026-108793

Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description An issue exists when processing embedded job ticket comments within documents, where the service improperly handles specific Internet Printing Protocol IPP attributes. This leads to an unhandled...