Linux Distros Unpatched Vulnerability : CVE-2026-93484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper...

Rocky Linux 8 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_80817)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680817 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-196...

Oracle Linux 10 : rpcbind (ELSA-2026-83561)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-83561 advisory. 1.2.7-3.1 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics...

Rocky Linux 10.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2026_80512)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202680512 advisory. curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies CVE-2026-6253 curl: libcurl: Authentication bypass due to incorrect HT...

Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2026-130393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130393 advisory. An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : YAML-LibYAML vulnerabilities (USN-8925-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8925-1 advisory. Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection...

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

Multiple Atlassian products Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye contain a files or directories accessible to external parties vulnerability which could allow an...

PT-2026-115009

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.136.0 through 0.148.0 Description An unauthenticated remote client can trigger a deterministic nil-pointer panic during request validation. This occurs when an OpenAPI 3.1 array schema omits the items keyword, which is...

Important: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

Important: rpcbind security update

The rpcbind utility is a server that converts Remote Procedure Call RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine. Security Fixes: rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows...

Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...

AlmaLinux 8 : python36:3.6 (ALSA-2026:82858)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:82858 advisory. pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-88029 Tenable has extracted the preceding description...

Rocky Linux 10.2 [CIQ] Security Update: pcre2 / pcre2-debuginfo / pcre2-debugsource / pcre2-devel / etc Multiple Vulnerabilities (crlsa-2026_81522)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681522 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 PCRE2: PCRE2: Out-of-bounds read via...

MiracleLinux 9 : glibc-2.34-283.el9_8 (AXSA:2026-2040:13)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2040:13 advisory. glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791 glibc: glibc: Process abort due to invalid memory in worde...

rpcbind security update

1.2.5-11 - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows unauthenticated remote denial of service Resolves: RHEL-266668...

PT-2026-115004

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.136.0 through 0.143.0 Description A nil-pointer dereference in the openapi3filter component allows an unauthenticated remote client to cause a denial of service. This occurs when the software processes OpenAPI 3.1 array...

CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...

CVE-2026-110809

A security vulnerability exists in sgl-project SGLang versions up to 0.5.19 . The flaw is located in the Session Cleanup component, specifically within the Session.create_req function in the file python/sglang/srt/session/session_controller.py. Improper resource handling allows an attacker to per...

CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...

CVE-2026-110809

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...