PT-2026-86682

The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. This is due to the 'content process images' function using a flawed regex-based HTML attribute parser. This makes it possible for...

LOYTEC L-IP BACnet/IP Routers Out-of-bounds Read (CVE-2026-55732)

The BACnet packet parser of a LOYTEC L-IP BACnet/IP router reads out of bounds of the internal 'bacdtdaystillmonth' lookup table in 'bacdtdatetimetotod' when it processes a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet carrying an invalid month value. An unauthenticated...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

PT-2026-89677

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.2.0 through 6.0.7 Description A NULL pointer dereference exists in the x509 plugin's attribute certificate parser. This issue is network exploitable and requires no authentication, potentially leading to a Denial of Servi...

TencentOS Server 4: perl-XML-Parser (TSSA-2026:0964)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0964 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2026-89737

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.2.0 through 6.0.7 Description A memory leak occurs in the x509 plugin's attribute certificate parser, where memory is not released after its effective lifetime. Recommendations Update strongSwan to a version later than...

Security Bulletin: IBM Integration Designer is vulnerable to CVE-2026-68494

Summary The following vulnerability is resolved: CVE-2026-68494 Vulnerability Details CVEID:CVE-2026-68494 DESCRIPTION: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-073378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073378 advisory. In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute...

PT-2026-94387

Name of the Vulnerable Software and Affected Versions Soup Sieve versions prior to 2.9 Description A Regular Expression Denial of Service ReDoS exists in the selector parser located in src/soupsieve/css parser.py. The IDENTIFIER pattern uses adjacent quantified groups over overlapping character...

Unity Linux 20.1070e Security Update: gstreamer1-plugins-bad-free (UTSA-2026-035846)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-035846 advisory. A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library gst-plugins-bad. When parsing a buffering period SEI message, the parser uses an...

Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15983 Malicious code in fast-html-dom-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee035fff3db95c6f14a41fe379add7ee78607149e7d5435b4afad505d973b410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2026-3670 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...

OESA-2026-3671 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...

OESA-2026-3669 expat security update

expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...

OESA-2026-3640 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg versions 2.7...

OESA-2026-3639 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg versions from 0....

OESA-2026-3638 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg versions from 0....

OESA-2026-3621 python-soupsieve security update

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. It aims to provide selecting, matching, and filtering using modern CSS selectors. Soup Sieve currently provides selectors from the CSS level 1 specifications up through the latest CSS level 4 drafts and beyond though...

OESA-2026-3610 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...