PT-2026-93187

Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame put file.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in put parame file cgi.c to bypass restricted restore archive handling...

PT-2026-91998

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Firefox ESR versions prior to 153.3 Thunderbird versions prior to 156 Thunderbird versions prior to 153.3 Description Privilege escalation in the Session Restore component. Recommendations Update Firefox to versio...

CVE-2026-92062: Improper Privilege Management

Privilege escalation in the Session Restore component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

MiracleLinux 9 : redis:7 (AXSA:2026-1844:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1844:01 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in...

MiracleLinux 8 : redis:6 (AXSA:2026-1841:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1841:01 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fixed a memory leak during the suspend/resume procedure. The vblk-vqs should be freed before calling initvqs in virtblkrestore...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbcon: The old font data is always restored in fbcondosetfont. The commit a5a923038d70 fbdev: fbcon: Properly revert changes when vcresize fails started restoring old font data upon failure of vcresize. However, this only applies...

Astra Linux – Vulnerability in iptables

A buffer overflow in iptables-restore within netfilter iptables version 1.8.2 allows an attacker to at least cause the program to crash or potentially gain control of the system through a specially crafted iptables-save file. This issue is related to the addparamtoargv function in xshared.c...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Warns when a triple fault assertion never “escapes” from L2 The warnings are removed because they perform a sanity check that ensures KVM never allows a triple fault in L2 to escape and end up in L1. In normal operation...

CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

UBUNTU-CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

EUVD-2023-60662

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

Debian: CVE-2023-34854: hoteldruid -- security update

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

CVE-2023-34854

HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...

RHEL 9 : redis (RHSA-2026:67461)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67461 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...