httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server

A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...

UBUNTU-CVE-2026-16445

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

CVE-2026-16445

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

CVE-2026-59842

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

CVE-2026-63896

A flaw was found in the Linux kernel's USB gadget composite driver. A remote attacker, acting as a malicious USB host, could send a specially crafted GETURL request. This request, with a small wLength value, triggers an integer underflow when calculating the buffer length for a memory copy...

CVE-2026-59842 Libssh: libssh: information disclosure via short gssapi curve25519 public key

A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small...

DEBIAN-CVE-2026-15812

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

CVE-2026-53369

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could craft a malicious UDF image with an oversized Cyclic Redundancy Check CRC length. This could allow the attacker to bypass the integrity validation of UDF descriptors, leading to the acceptance of...

CVE-2026-15812

CVE-2026-15812 affects kronosnet (

EUVD-2026-46152

A vulnerability was found in the internal Access Control List ACL subsystem of kronosnet Version affected: = 1.34. When the framework is explicitly configured to manage dynamic links accepting network traffic from any IP address without network payload encryption, the validation architecture...

PT-2026-63161

Name of the Vulnerable Software and Affected Versions Oracle Advanced Benefits version 12.2.15 Description A flaw in the Internal Operations component of Oracle Advanced Benefits allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...

PT-2026-62108

Name of the Vulnerable Software and Affected Versions ECOS affected versions not specified Description A flaw in the web-based management interface allows a highly privileged, authenticated remote attacker to access the device filesystem. This could enable the attacker to access sensitive files o...

PT-2026-62542

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

PT-2026-62527

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

PT-2026-62268

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability...

PT-2026-62544

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebCenter Content: Imaging version 12.2.1.4.0 Oracle Fusion Middleware WebCenter Content: Imaging version 14.1.2.0.0 Description A flaw in the Core component allows a low privileged attacker with network access via HTT...

PT-2026-62566

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture versions 12.2.1.4.0 and 14.1.2.0.0 Description A flaw in the Client Bundle component of Oracle WebCenter Enterprise Capture allows a low privileged attacker with network access via T3 and IIOP to compromise...

PT-2026-62705

Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Mexico product of Oracle PeopleSoft component: Global Payroll for Mexico. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2026-62239

Name of the Vulnerable Software and Affected Versions Oracle GoldenGate versions 19.1.0.0.0 through 19.29.0.0 Oracle GoldenGate versions 21.3 through 21.21 Oracle GoldenGate versions 23.4 through 23.26.1.0.0 Description An issue exists in the Service Manager component that allows a low privileged...

PT-2026-62531

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Enterprise Capture version 12.2.1.4.0 Oracle WebCenter Enterprise Capture version 14.1.2.0.0 Description A flaw in the Client Bundle component allows a low privileged attacker with network access via T3 and IIOP protocols to...