PT-2026-121560

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

PT-2026-121480

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.30.7 PhpSpreadsheet versions prior to 2.1.19 PhpSpreadsheet versions prior to 2.4.8 PhpSpreadsheet versions prior to 3.10.8 PhpSpreadsheet versions prior to 5.10.0 Description The XmlScanner::scan function in...

KLA91369 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain...

AlmaLinux 8 : perl-DBI:1.641 (ALSA-2026:85916)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85916 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...

RHEL 9 : httpd (RHSA-2026:88229)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88229 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-96636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek and DcxImageFile.seek reparse later MPO or DCX frames and replace self.size without...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4799-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4799-1 advisory. - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. -...

Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792704664)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792704664 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software...

Palo Alto GlobalProtect App 6.0.x < 6.0.15 / 6.2.x < 6.2.8-h15 / 6.3.x < 6.3.3-h16 Local DoS (CVE-2026-0314)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.15, 6.2.x prior to 6.2.8-h15, or 6.3.x prior to 6.3.3-h16. It is, therefore, affected by a denial of service vulnerability: - A type confusion vulnerability in Palo Alto Networks GlobalProtect ap...

IBM MQ 9.4.5.0 - 9.4.5.1 CD < 10.0.0.0 (7290859)

The version of IBM MQ installed on the remote host is 9.4.5.0 through 9.4.5.1 CD. It is, therefore, affected by a vulnerability as referenced in the 7290859 advisory. - IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-110354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked...

FreeRDP wprintKeyName RCE

The vulnerability of the wprintKeyName function in the RDP client FreeRDP relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Perception Simulation Service Privilege Escalation

The vulnerability of the Perception Simulation Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel TDFxfb Probe DoS

The vulnerability of the tdfxfbprobe function in the drivers/video/fbdev/tdfxfb.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Software Protection Platform Service Privilege Escalation

The vulnerability of the Software Protection Platform Service Sppsvc.exe on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Program Compatibility Assistant Service Privilege Escalation

The vulnerability of the Program Compatibility Assistant Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux kernel Resource Control DoS

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

AppX Deployment Service Disclosure

The vulnerability of the AppX Deployment Service AppXSVC for Windows operating systems stems from operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Linux GPU DoS

The vulnerability of the v3dgetcpuindirectcsdparams function in the drivers/gpu/drm/v3d/v3dsubmit.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

vvdec Coding Structure Buffer Overflow DoS

The vulnerability of the vvdec::CodingStructure::getColInfovvdec::Position decoder vvdecapp VVdeC function is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...