PT-2026-85532

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-75162

An information disclosure vulnerability in the opcua-configuration method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows any remote authenticated user, including users with the low-privileged Standard role, to retrieve the configured OPC-UA authentication credentia...

CVE-2026-19080: Observable Response Discrepancy

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

PT-2026-86153

Name of the Vulnerable Software and Affected Versions undici versions 7.1.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The dump interceptor reads and discards response bodies up to a configurable maximum size. When a response is chunked and lacks a Content-Length, the...

PT-2026-91806

undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers. This happens when an upstream server delivers part of a body without a trustworthy resume...

CVE-2026-85504

FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...

PT-2026-86160

Name of the Vulnerable Software and Affected Versions undici versions prior to 6.28.1 undici versions 7.0.0 through 7.29.1 undici versions 8.0.0 through 8.10.2 Description The retry interceptor can append the body of a ranged retry response to bytes already delivered from a previous partial...

PT-2026-86159

Name of the Vulnerable Software and Affected Versions undici versions 7.11.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The retry handler can leave a response body pending indefinitely. This occurs when a server provides a successful response with a Content-Length but closes...

CVE-2026-85509

FreeIPMI before 1.6.19 has a stack-based buffer overflow in readfrudata in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested...

MiracleLinux 8 : freerdp-2.11.7-12.el8_10 (AXSA:2026-1756:28)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1756:28 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafte...

PT-2026-86170

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client http client.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

PT-2026-86167

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response update service route in pjsua acc.c. This affects applications that register using the...

Zimbra CVE-2026-73570 Incident Response Toolkit

Zimbra CVE-2026-73570 Incident Response Toolkit is a collection of detection and evidence-preservation utilities for administrators investigating suspected exploitation of CVE-2026-73570. The toolkit searches Zimbra and mail logs for exploitation indicators, examines JSP persistence locations,...

CVE-2026-18540: Inconsistent Interpretation of HTTP Requests

undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers. This happens when an upstream server delivers part of a body without a trustworthy resume...

CVE-2026-84947: Improper Input Validation

undici's dump interceptor reads and discards a response body up to a configurable maximum size. When a response declares a Content-Length that exceeds the maximum, the interceptor aborts cleanly, but when a response has no Content-Length and is chunked, the interceptor instead signals completion...

Linux Distros Unpatched Vulnerability : CVE-2026-85505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a...

PT-2026-85396

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi sel oem fujitsu get sel entry long text function within the libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c file. This issue is triggered when...

PT-2026-85604

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci event: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hci cc le set cig params...

CVE-2026-18540: Inconsistent Interpretation of HTTP Requests

undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers. This happens when an upstream server delivers part of a body without a trustworthy resume...

CVE-2026-19205: Observable Response Discrepancy

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...