CVE-2026-107888

OpenPrinting CUPS versions before 2.4.20 are vulnerable to a NULL pointer dereference in the cupsdCheckJobs() function. The issue occurs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Because cleanup removes the destination without cancelin...

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...

CLEANSTART-2026-GS47054 By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault

Security vulnerability affects the apache2 package. By specially crafting HTTP requests, the modmd challenge handler would dereference a NULL pointer and cause the child process to segfault...

CLEANSTART-2026-QJ65507 Malformed requests may cause the server to dereference a NULL pointer

Security vulnerability affects the apache2 package. Malformed requests may cause the server to dereference a NULL pointer...

CLEANSTART-2026-GK10724 crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can all...

Security vulnerability affects the apache2 package. A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer dereference or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix...

CLEANSTART-2026-OA48166 Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance

Security vulnerability affects the apache2 package. Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance...

CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...

PT-2026-109179

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PT-2026-109195

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1791552138)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791552138 advisory. - A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untruste...

Linux Distros Unpatched Vulnerability : CVE-2026-107708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client...

PT-2026-108981

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The XCF loader fails to verify the presence of parasite data before dereferencing it when processing image-simulation-intent and image-simulation-bpc parasites. A NULL pointer dereference, which...

CVE-2026-108093: NULL Pointer Dereference

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...

CVE-2026-104114: NULL Pointer Dereference

A NULL pointer dereference in the illumos Network Auto-Magic daemon nwamd allows a local user to crash the daemon. nwamddoorswitch in usr/src/cmd/cmd-inet/lib/nwamd/doorif.c writes to the caller's request structure before checking that a request was supplied, and before checking the caller's...

Linux kernel idpf_attach_and_open idpf_detach_and_close DoS

The vulnerability of the functions idpfattachandopen and idpfdetachandclose in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux kernel is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

driver/net/ethernet/intel/idpf/idpf_lib.c component of the DoS

The vulnerability in the drivers/net/ethernet/intel/idpf/idpflib.c component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

HAProxy hpack_dht_insert Heap Buffer Overflow DoS

The vulnerability of the hpackdhtinsert function in the source file src/hpack-tbl.c of the HAProxy server software is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-107655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an...

PT-2026-108793

Name of the Vulnerable Software and Affected Versions CUPS affected versions not specified Description An issue exists when processing embedded job ticket comments within documents, where the service improperly handles specific Internet Printing Protocol IPP attributes. This leads to an unhandled...

CVE-2026-107655: NULL Pointer Dereference

A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Interne...