CVE-2026-110618: Missing Authentication for Critical Function

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. Attackers can call the default-enabled endpoints to read SMS, call logs and contacts, send SMS, and export or...

RockyLinux 8 : OpenEXR (RLSA-2026:82345)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82345 advisory. OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files CVE-2026-59184 OpenEXR: OpenEXR: Heap out-of-bounds write via crafted tiled EX...

Rocky Linux 8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80506)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680506 advisory. emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-77219 emacs: local shell command injection through the user...

ROS-20261014-73-0154

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-114039

Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute bounds...

MiracleLinux 9 : compat-openssl11-1.1.1k-5.el9_8.6 (AXSA:2026-2042:05)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2042:05 advisory. openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer...

CVE-2026-110716: Out-of-bounds Read

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshieldgetfiletable that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range filetableoffset or large file counts to...

PT-2026-114118

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield get file table that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file table offset or large file count...

Linux Distros Unpatched Vulnerability : CVE-2026-110143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the...

CVE-2026-110774: Authorization Bypass Through User-Controlled Key

Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed owner check. Attackers can supply another user's stored filename, following a basename plus millisecond-timestamp...

CVE-2025-71433: Missing Authorization

Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links,...

CVE-2024-58392: Out-of-bounds Read

PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in PHYSFSutf8codepoint that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted archive with entry names ending in six-octet sequences, causing...

PT-2026-113766

A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service DoS condition by sending a specially crafted API request. The security risk posed by this issue is significantly minimized by...

PT-2026-114116

Name of the Vulnerable Software and Affected Versions libsmb2 versions prior to 6.2 Description An integer underflow exists in the decode acl function. This allows malicious SMB servers or attackers intercepting unsigned sessions to trigger heap out-of-bounds reads by sending a crafted security...

PT-2026-114173

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.2.0 Description An argument injection issue exists in the Head.checkout function. Remote attackers can read arbitrary files by providing a branch name that is parsed as a git option. For instance, an attacker coul...

CVE-2026-110694: Out-of-bounds Read

A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function gettmfilemodel of the file source/serializer/tmfile/tm2serializer.c of the component tmfile Model Loader. Such manipulation of the argument offsetroot leads to out-of-bounds read. It is possible t...

Security Updates for Microsoft Access Products C2R (October 2026)

The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. CVE-2026-102849, CVE-2026-102850, CVE-2026-105591,...

PT-2026-113961

Name of the Vulnerable Software and Affected Versions Nessus affected versions not specified Description An SQL injection allows an authenticated user to read or modify data stored by the system. SQL injection is a technique where malicious SQL statements are inserted into entry fields for...

CVE-2026-73252: Integer Underflow (Wrap or Wraparound)

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MGTLSBUILTIN in src/tlsbuiltin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mgtlsrecvrecord, the msgsz...

CVE-2026-110655: Out-of-bounds Read

miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...