PT-2026-65627

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center KDC password change kpasswd service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos...

ALSA-2026:46990 Important: sssd security, bug fix, and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

RockyLinux 8 : sssd (RLSA-2026:46990)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:46990 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd: sssd:...

Suricata 7.x < 7.0.17 / 8.x < 8.0.6 Multiple Vulnerabilities

The version of OISF Suricata installed on the remote host is 7.x prior to 7.0.17 or 8.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities, including: - Suricata could be crashed or made to enter an infinite loop when processing crafted network traffic, leading to denial of...

Oracle Linux 10 : kernel (ELSA-2026-21557)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21557 advisory. - crypto: ccp - copy IV using skcipher ivsize CKI Backport Bot RHEL-188463 CVE-2026-53016 - futex/requeue: Revert 'Prevent NULL pointer dereference i...

TencentOS Server 2: ruby (TSSA-2026:0763)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0763 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Malicious Package

Overview ckcc-protocol is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2021-32087

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service...

CVE-2026-53667 React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

EUVD-2026-49629

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2026-53667

CVE-2026-53667 affects React Router (versions 7.11.0–7.17.0) where the RSCErrorHandler failed to validate protocol, enabling possible cross-site scripting via redirects from untrusted sources when using the unstable RSC APIs. The issue stems from missing protocol validation in the RSCErrorHandler...

CVE-2026-53667

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2026-53667 React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

CVE-2026-53667 React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)

React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, allowing for redirects from untrusted sources. This issue is a follow up to CVE-2026-53667, and only affects consuming applications if they are using the unstable RSC APIs...

UBUNTU-CVE-2026-64551

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...

pilotprotocol v1.13.7

Pilot Protocol The network stack for AI agents. Addresses. Ports. Tunnels. Encryption. Trust. Docs · Wire Spec · Whitepaper · IETF Draft · Agent Skills · Polo Live Dashboard The internet was built for humans. AI agents have no address, no identity, no way to be reached. Pilot Protocol is an overl...

CVE-2026-64551

CVE-2026-64551 concerns the Linux kernel SCTP stack. A vulnerability in the handling of an ERROR chunk with a STALE_COOKIE cause in the COOKIE_ECHOED state can cause an out-of-bounds read: the code reads the 4-byte Measure of Staleness from after the cause header, but the staleness field may not ...

CVE-2026-64551 sctp: validate STALE_COOKIE cause length before reading staleness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...