PT-2026-116088

🚨 CVE-2026-111689 Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attackers can request GET /xboot/user/getByDepartmentId/departmentId with arbitrary department ids to...

PT-2026-125070

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: One-Byte Buffer OverRead in HTTP Request Header Parsing。CVE-2024-28124...

PT-2026-116115

Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/routers/sources.py skip can access document. Attackers can call the plan, progress, PATCH, retry and approve-extraction...

UBUNTU-CVE-2026-111271

libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2 in src/loadams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder...

PT-2026-125055

Seekable did not record whether it was initialized. On a fresh Seekable, or one whose init buff failed, decompress, offset to frame index and frame decompressed size made the C library read a NULL seek table. After a failed re-initialization, decompress returned data from the refused buffer using...

PT-2026-116076

Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap...

Linux Distros Unpatched Vulnerability : CVE-2026-110758

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace,...

Linux Distros Unpatched Vulnerability : CVE-2026-111141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped centr...

Linux Distros Unpatched Vulnerability : CVE-2026-111142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central...

Linux Distros Unpatched Vulnerability : CVE-2026-111143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilovexbin in src/loaders/xbin.c that lacks bounds checks for compressed...

Linux Distros Unpatched Vulnerability : CVE-2026-111145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF...

Linux Distros Unpatched Vulnerability : CVE-2026-111146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint that allows attackers to read past heap allocations by supplying compressed RT...

Linux Distros Unpatched Vulnerability : CVE-2026-111147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedbrecordgetmultivalue that allows attackers to read past buffers via...

Linux Distros Unpatched Vulnerability : CVE-2026-111131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c...

Linux Distros Unpatched Vulnerability : CVE-2026-111124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before...

Linux Distros Unpatched Vulnerability : CVE-2026-111125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed til...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131736)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131736 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in hdrdeletede Here is a BUG report from syzbot: BUG: KASAN...

Linux Distros Unpatched Vulnerability : CVE-2026-111148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an...

Linux Distros Unpatched Vulnerability : CVE-2026-111152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Game Music Emu libgme through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the...

Linux Distros Unpatched Vulnerability : CVE-2026-111159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewflefextendedattributereaddata because UTF-16 name and value sizes are validated...