ROS-20260812-73-0028

The vulnerability in Wireshark is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

PT-2026-71137

Multiple Use-After-Free vulnerabilities were found in the add archive element function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root cause is that plugin maybe claim in ld/plugin.c frees the original BFD object via bfd close/ bfd delete bfd when entry-the bfd-my archive =...

PT-2026-71037

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

PT-2026-71347

Name of the Vulnerable Software and Affected Versions http4s-blaze-server versions prior to 0.23.18 http4s-blaze-server versions prior to 1.0.0-M42 Description The software aggregates fragments of incoming WebSocket messages without limiting the total size or the number of fragments. A client can...

PT-2026-71363

Name of the Vulnerable Software and Affected Versions OpenStack Designate versions prior to 22.0.1 Description An authenticated user can bypass zone creation checks by scheduling a zone to a different pool using the AttributeFilter scheduler. This occurs because the is subzone and is superzone...

PT-2026-71190

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can cause a denial of service due to improper neutralization of special elements in an OS command. This issue occurs when the system fails to properly sanitize input us...

PT-2026-71331

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio daemon allows a remote attacker on the same local network segment to cause a Denial of Service DoS. By sending a specially crafted Internet Control Message Protocol...

PT-2026-70976

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

PT-2026-71329

IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2026-15565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any...

RHEL 10 : grafana (RHSA-2026:54178)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54178 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana:...

F5 Networks BIG-IP : BIND vulnerability (K000162883)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162883 advisory. An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enablin...

Linux Distros Unpatched Vulnerability : CVE-2026-68208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: Fix the error code of devmkzalloc in vipprobeslice In vipprobeslice, the error check for devmkzalloc incorrectly uses PTRERRORZERO which returns...

AlmaLinux 8 : postgresql:12 (ALSA-2026:52396)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:52396 advisory. postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 Tenable has extracted the preceding description block...

AlmaLinux 8 : python-idna (ALSA-2026:54290)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:54290 advisory. python-idna: idna: Denial of Service via specially crafted long inputs CVE-2026-45409 Tenable has extracted the preceding description block directly from the...

PT-2026-71036

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in t...

RHEL 8 : python-idna (RHSA-2026:54290)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:54290 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

ALSA-2026:54178 Moderate: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default...

PT-2026-71087

RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/service account.rs accepts an attacker-controlled target user after only checking CreateServiceAccountAdminAction, passes it to new service account, and prepare service account auth...

Weaponized AI: The Commoditization of Cybercrime

Weaponized AI: The Commoditization of Cybercrime By Jambul Tologonov · August 12, 2026 Executive Summary The Trellix Advanced Research Center has been actively monitoring dark web forums and criminal communication channels for emerging threats tied to artificial intelligence AI. What we are...