LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)

The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...

TencentOS Server 4: wireshark (TSSA-2026:0956)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0956 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-16028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a...

Linux Distros Unpatched Vulnerability : CVE-2026-86432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag...

Linux Distros Unpatched Vulnerability : CVE-2026-18708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed withi...

Linux Distros Unpatched Vulnerability : CVE-2026-86428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes...

Linux Distros Unpatched Vulnerability : CVE-2026-86435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions...

Linux Distros Unpatched Vulnerability : CVE-2026-86430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and...

TencentOS Server 4: iperf3 (TSSA-2026:0958)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0958 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2026-86429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The league/commonmark thephpleague/commonmark library in versions = 1.5.0 and 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and...

The vulnerability in the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the built-in tool for measuring channel bandwidth on the RouterOS operating system of MikroTik routers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failur...

ROS-20260907-73-0018

The vulnerability in the buildkit is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

PT-2026-86737

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

Debian dsa-6487 : charon-cmd - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6487 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-18888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When a...

Linux Distros Unpatched Vulnerability : CVE-2026-86434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - league/commonmark versions = 2.0.0 and 2.8.4 patched in 2.9.0 contain a denial of service vulnerability in UniqueSlugNormalizer::normalize, which restarts its...

Linux Distros Unpatched Vulnerability : CVE-2026-86421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper...

Linux Distros Unpatched Vulnerability : CVE-2026-86420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such...

Linux Distros Unpatched Vulnerability : CVE-2026-86425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies ...