PT-2026-71359

Name of the Vulnerable Software and Affected Versions acm-search-v2-rhel9 affected versions not specified Description An attacker with administrative privileges on the hub cluster, specifically those with patch access to the Search Custom Resource CR, can exploit a flaw in the...

PT-2026-70976

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

The vulnerability of the Linux operating system’s kernel, related to the use of an uninitialized resource, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-73215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd...

RockyLinux 8 : resource-agents (RLSA-2026:53364)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53364 advisory. pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values CVE-2026-59886 Tenable has extracted the preceding description block directly from the RockyLinux...

F5 Networks BIG-IP : BIND vulnerability (K000162883)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162883 advisory. An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enablin...

The vulnerability in the driver component drivers/pmdomain/arm/scmi_pm_domain.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the driver/scsi/smartpqi/smartpqi_init.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71081

Name of the Vulnerable Software and Affected Versions Prowler versions prior to 5.37.0 Description The HTML output formatter in the file prowler/lib/outputs/html/html.py fails to perform HTML escaping when inserting finding.resource tags into generated reports. These tags are assembled using the...

Linux Distros Unpatched Vulnerability : CVE-2026-68314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mctp i3c: clean up notifier and buses if driver register fails mctpi3cmodinit registers the I3C bus notifier and then walks the existing buses with...

SUSE CVE-2026-68084

In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...

SUSE CVE-2026-68091

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

SUSE CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

SUSE CVE-2026-68422

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in mergerelocroots If we have an unexpected relocroot for our root, we jump to the out label but never drop the reference we obtained for root, resulting in a leak. Add a missi...

SUSE CVE-2026-68425

In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response is matched to an outstanding send. The normal match happens later, aft...

CVE-2026-63133 Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat...

CVE-2026-18687

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a...

CVE-2026-68797

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:56+00:00| seen|...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...