CVE-2026-95391: Use After Free

ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service...

CVE-2026-95392: Buffer Over-read

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-102722

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...

Wireshark : CVE-2026-95392 : MBIM protocol dissector crash

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Wireshark : CVE-2026-95391 : ZigBee ZCL protocol dissector crash

ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-95393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95393 Note that Nessus relies on the presence of the...

CVE-2026-95393: Heap-based Buffer Overflow

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Wireshark : CVE-2026-95393 : CSN.1 protocol dissector crash

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95393

CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Important: nodejs22

Issue Overview: undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protoc...

Linux Distros Unpatched Vulnerability : CVE-2026-95389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95389 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2026-95395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-95395 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2026-96422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-96422 Note that Nessus relies on the presence of the...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Libwebsockets vulnerabilities (USN-8822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8822-1 advisory. It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A...

PT-2026-102976

Impact A denial-of-service vulnerability exists in Engine.IO / Socket.IO servers that allow transport upgrades. The Engine.IO protocol revision is negotiated during the initial handshake and stored on the session, but a newly-created transport, including a WebSocket upgrade transport, could...

Linux Distros Unpatched Vulnerability : CVE-2026-95391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95391 Note that Nessus relies on the presence of the package as reported...

SUSE CVE-2025-1218

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

SUSE CVE-2026-67411

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18, 4.0.23, 4.1.14, 4.2.9, and 4.3.3, native MQTT and MQTT over WebSocket behind a trusted PROXY Protocol frontend could lose the proxy-derived client address before the MQTT authentication path checked loopbackusers, causing th...

CVE-2026-101101

A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of the component Middleware. The manipulation leads to uncaught exception. Remote exploitation of the attack is possible. Upgrading to version 2026-09-...

CVE-2026-101100

A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file sdks/typescript/packages/client/src/middleware/filter-tool-calls.ts of the component Middleware. Executing a manipulation can lead to incomplete cleanup. T...