PT-2026-88121

🚨 CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

Linux Distros Unpatched Vulnerability : CVE-2026-63376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse in lib/compiler.js can be tricked by a table path such as a.b.y.proto.proto,...

NewStart CGSL MAIN 7.02 : cups Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has cups packages installed that are affected by multiple vulnerabilities: - libppd = 2.1b1 ppdCreatePPDFromIPP2 does not validate or sanitize the IPP attributes when writing them to a temporary PPD file, allowing the injection of attacker...

RockyLinux 8 : httpd:2.4 (RLSA-2026:64794)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64794 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-3349)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...

NewStart CGSL MAIN 7.02 : xorg-x11-server-Xwayland Vulnerability (NS-SA-2026-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server-Xwayland packages installed that are affected by a vulnerability: - A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer...

EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-3291)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an...

EulerOS 2.0 SP12 : mtr (EulerOS-SA-2026-3359)

According to the versions of the mtr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mtr is vulnerable to Out-of-bounds read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups ca...

Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow attackers to cause a service failure.

Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are vulnerable to pointer dereferencing when the pointer has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-87992

🚨 CVE-2026-78448 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

CVE-2026-52486

CVE-2026-52486 affects OpenDDS 3.33.x , where a local attacker with low privileges can cause a denial of service via the verify function in the SignedDocument module. The CVSS 3.1 score is 6.6 (Medium) , reflecting local attack vector, low complexity, and high availability impact alongside low co...

PT-2026-87904

🚨 CVE-2026-72994 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

EUVD-2026-72777

A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79376

CVE-2026-79376 affects the l2cap_handle_data() function in Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier. An attacker can trigger a Denial of Service by sending a crafted L2CAP packet. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent-network attack vector, no privileges requir...

PT-2026-87035

If a namespaced CR can mint cluster identity, that operator is a CA. If a namespaced CR can mint cluster identity, that operator is a CA. CVE-2026-78234, hawtio-operator. it reads the OpenShift Service CA private key, then issues a client cert with whatever CN you put on the Hawtio CR. the operat...

PT-2026-86949

SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...

PT-2026-88128

🚨 CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88120

🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

RHEL 9 : redis:7 (RHSA-2026:65120)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65120 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

PT-2026-88512

Impact The Git node's clone operation matched the destination path against the default N8N BLOCK FILE PATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...