Photon OS 5.0: Libxml2 PHSA-2026-5.0-91-0874

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

xmloxide v0.5.0

xmloxide A pure Rust reimplementation of libxml2 — the de facto standard XML/HTML parsing library in the open-source world. libxml2 became officially unmaintained in December 2025 with known security issues. xmloxide aims to be a memory-safe, high-performance replacement that passes the same...

Bluetooth: qca: fix NVM tag length underflow in TLV parser

...

ECHO-A10B-DD74-A1AF

Bulletin has no description...

JLSEC-2026-1225

libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...

SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2026:3527-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3527-1 advisory. This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in...

WordPress Core XSS2Shell RCE (CVE-2026-64638)

Exploits CVE-2026-64638 in WordPress Core 4.7.0 through 7.0.2: a striptags/KSES parser differential on /wp-login.php injects live DOM id=ajaxurl clobber. Default mode confirms the unauthenticated XSS primitive. With SERVE=true, hosts the full chain Application Password theft - REST - plugin uploa...

CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

Uncontrolled Resource Consumption

jackson-core is vulnerable to uncontrolled resource consumption. The vulnerability is due to the non-blocking parser failing to enforce the maxNumberLength constraint when processing excessively long numeric tokens, which allows an attacker to submit a JSON payload containing an arbitrarily long...

Linux Distros Unpatched Vulnerability : CVE-2026-20346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

EulerOS 2.0 SP11 : libsolv (EulerOS-SA-2026-3078)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containing...

Linux Distros Unpatched Vulnerability : CVE-2026-20348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

PT-2026-69208

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow occurs in the DDS DirectDraw Surface file parser. The issue arises when a crafted DDS file specifies a D3D9 pixel format but provides a lower bits-per-pixel bpp valu...

CVE-2026-42170: Incorrect Calculation of Buffer Size

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

Linux Distros Unpatched Vulnerability : CVE-2026-20339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...

Security Bulletin: IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser (CVE-2026-10534)

Summary IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser. Vulnerability Details CVEID:CVE-2026-10534 DESCRIPTION: Db2 is vulnerable to buffer overflow in the IXF IMPORT parser. CWE:CWE-121: Stack-based Buffer Overflow CVSS Source: IBM CVSS Base score: 8.4 CVSS...

CVE-2026-62296

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...

CVE-2026-62296

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...

CVE-2026-62296 HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...

CVE-2026-62296

CVE-2026-62296 affects HAPI FHIR (Java). The vulnerable component is the XHTML parser (XhtmlParser.java) where, prior to 6.9.11, there is no maximum element nesting depth, allowing deeply nested text.div narratives to trigger unbounded recursion between parseElementInner() and parseElement(). Thi...