ROS-20261022-73-0029

The vulnerability in freerdp3 is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20261022-73-0025

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ALSA-2026:88211 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...

RockyLinux 9 : kernel (RLSA-2026:86033)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-5293...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_86033)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935...

ROS-20261022-73-0071

The vulnerability in the cache decoder functions of SCARDIOCTLREADCACHEA and SCARDIOCTLWRITECACHEA for the RDP client FreeRDP, related to the assignment of a null pointer, allows a malicious actor to trigger a service failure for the client application...

Red Hat: CVE-2026-114613: msgpack: msgpack: Denial of Service via memory leak during map deserialization

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

MessagePack resource management error vulnerability

Versions of MessagePack prior to 1.2.3 contain a resource management error vulnerability. This vulnerability arises because the C extension fails to deserialize values when strictmapkey is set to True; as a result, decoded map values are leaked. Repeated malformed inputs can lead to unbounded...

Bob Halley DNSPython resource management error vulnerability

Bob Halley: A resource management error vulnerability exists in dnspython versions prior to 2.9.0. This vulnerability arises because dns.name.fromwireparser fails to limit the number of jumps when processing DNS compressed pointer chains. Malicious DNS packets can force excessive pointer traversa...

Rocky Linux 10.2 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_85847)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685847 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorChec...

Rocky Linux 9 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_85958)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685958 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck...

RHEL 8 : openssh (RHSA-2026:88211)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88211 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

vvdecapp Decoder Heap Use-After-Free

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Red Hat: CVE-2026-114605: dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal

dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.fromwireparser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal during name decompression, causing high CPU use, application...

PT-2026-121568

Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call ref and try table catch paths. Malicious guests can reset consumed fuel after calls to run exponentially long on linear fuel, evading timeouts and periodic yields for denial of servic...

PT-2026-121560

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

PT-2026-121685

Name of the Vulnerable Software and Affected Versions Kiloview E3 NDI encoder affected versions not specified Description The ONVIF device service allows hostname, DNS, and NTP configuration write operations without authentication, ignoring the device's configured authentication settings. A remot...

ROS-20261022-73-0013

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-121400

Name of the Vulnerable Software and Affected Versions multer versions 2.0.0 through 2.4.9 Description A race condition exists in the multipart parser when configured with an asynchronous fileFilter function. If a request is aborted while an asynchronous fileFilter is still pending, the callback m...

ROS-20261022-73-0005

The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...