CVE-2026-14460: Missing Authorization

Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from = 1.0.4 before 1.0.5...

CVE-2026-58418: Server-Side Request Forgery (SSRF)

SSRF via HTTP Redirect in Repository Migration...

CVE-2026-8925: Double Free

The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free the same pointer twice...

CVE-2026-11564: Improper Certificate Validation

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA...

CVE-2026-8286: Improper Certificate Validation

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

Ubuntu 24.04 LTS / 25.10 : Linux kernel vulnerabilities (USN-8490-1)

"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8490-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...

GHSA-4JJ9-CGQC-X9H5 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

CVE-2025-66001 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner...

CVE-2025-53884 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

GHSA-8FF6-PC43-JWV3 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...

pme_security_scanner

No d...

CVE-2026-57359: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ReviewX = 2.3.10 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-53341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fhandle: fix UAF due to unlocked -mntns read in maydecodefh maydecodefh accesses mount::mntns without holding any locks; that means the mount can concurrently b...

CVE-2026-57270: Improper Validation of Array Index

GeoWebPlayer also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud is an addon that can be installed with various GeoVision software GV-VMS, GV-Cloud, .... It creates a websocket server that expands the capabilities of the various web-interfaces provided by the...

CVE-2026-57360: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in eCommerce Product Catalog = 3.5.4 versions...

CVE-2026-57690: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Werkstatt = 4.7.2 versions...

CVE-2026-54404: Improper Neutralization of Special Elements used in an SQL Command

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-54401: Server-Side Request Forgery (SSRF)

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery SSRF to escalate privileges within such UniFi OS devices or instances...