Linux Distros Unpatched Vulnerability : CVE-2026-46936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server:...

PT-2026-64618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ksmbd module, the smb2 query dir function stores a pointer to stack-allocated private data within the ksmbd file readdir data. When concurrent QUERY DIRECTORY requests use the sam...

PT-2026-64604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. The SMB2 flush function maintains response buffer bookkeeping across replay attempts. If a replayable flush response is received and the...

PT-2026-64601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client regarding the parsing of POSIX SID lengths. The function posix info sid size reads sid1 to determine the subauthority count, but the boundary check...

PT-2026-64600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the parse dacl function fails to mask the server-provided sub auth2 value from the NFS mode SID to 07777 when modefromsid is active. This value is...

PT-2026-64473

Name of the Vulnerable Software and Affected Versions Checkout Field Editor for WooCommerce Pro versions prior to 3.7.8 Description The plugin is subject to Directory Traversal, a flaw that allows an attacker to access files and directories that are stored outside the web root folder. Authenticat...

Linux Distros Unpatched Vulnerability : CVE-2026-11331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error conditio...

PT-2026-64478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB2 client where the smb2 calc size function clears data length during overlap handling. This behavior can cause an invalid response to be incorrectly identified ...

PT-2026-64609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Ownership and group modifications were ignored when mounting with SMB3 POSIX Extensions, unless CIFS MOUNT CIFS ACL or CIFS MOUNT MODE FROM SID were explicitly set. The issue occurs with...

Linux Distros Unpatched Vulnerability : CVE-2026-47012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-11605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not...

PT-2026-64605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free issue exists in the SMB client. A response-bearing attempt may return a replayable error and free its response buffer. If the SMB2 notify init function fails before the...

PT-2026-64619

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description An authenticated SMB client can bypass permission checks in the ksmbd module. The smb2 ioctl function fails to perform a per-handle access check when processing FSCTL SET ZERO DATA, relying on...

Linux Distros Unpatched Vulnerability : CVE-2026-64437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit...

Linux Distros Unpatched Vulnerability : CVE-2026-47064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-64388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership chown and group chgrp modifications were being ignored when mounting with SMB3 POSIX Extensions...

Linux Distros Unpatched Vulnerability : CVE-2026-64379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mod...

CVE-2026-66339

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials,...

CVE-2026-66339 Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels

A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials,...

aws-smithy-http-server-python (>=0.44.0, <=0.52.0) potentially affected by CVE-2026-16756 via aws-smithy-http-server (>=0.44.0, <=0.52.0)

aws-smithy-http-server CARGO version =0.44.0, =0.44.0, =0.52.0 Source cves: CVE-2026-16756 Source advisory: OSV:GHSA-JVXP-QMX7-GJPX...