PT-2026-121516

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

Malav-MK Systrome-Validation-Certification security vulnerability

Version 1.0 of Malav-MK Systrome-Validation-Certification contains a security vulnerability. This vulnerability stems from improper handling of the t URL parameter in the qrcodeauth.html component, potentially enabling denial-of-service attacks...

Linux xt_cluster_mt Buffer Overflow DoS

The vulnerability of the xtclustermt function in the net/netfilter/xtcluster.c component of the Linux operating system is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 8 : openssh (RHSA-2026:88211)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88211 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

Oracle Linux 10 : expat (ELSA-2026-88248)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88248 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...

PT-2026-121546

Name of the Vulnerable Software and Affected Versions OpenBao versions 2.3.0 through 2.6.2 Description An improper authorization issue exists where privileged child-namespace tokens can modify plugin registrations. This occurs because the endpoint '/v1/sys/plugins/catalog/' is not restricted to t...

CentOS Linux 6 [TuxCare] Security Update: libxslt / libxslt-devel / libxslt-python Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792507096)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792507096 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even...

Linux Distros Unpatched Vulnerability : CVE-2026-110353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service worker- thread CPU exhaustion via a truncated HTTP/2 PING frame...

CVE-2026-107079

An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcodeauth.html component...

CVE-2026-107079

The software Systrome Validation & Certification 1.0 contains a vulnerability that allows an attacker to trigger a denial of service (DoS). The issue is located within the qrcode_auth.html component and is specifically triggered via the t URL parameter . No specific remediation steps, exploit lin...

Bytecode Alliance wasmtime input validation error vulnerability

The Bytecode Alliance WasmTime versions prior to 46.0.0 through 48.0.4 and 49.0.0 through 49.0.2 contain an input validation error vulnerability. This vulnerability arises because the Wasi: HTTP implementation allows a guest to set the “between-bytes-timeout” request option to 0 and then directly...

PT-2026-121565

Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the host via overflowing filesystem timestamps. Attackers can pass atim or mtim values whose sub-second field overflows the...

KiloView E3 Firmware authorization issue vulnerability

Versions of the KiloView E3 firmware prior to 1.30 contain an authorization issue vulnerability. This vulnerability arises because the ONVIF device service accepts write operations for hostname, DNS, and NTP configurations without authentication. Remote attackers who lack authentication can modif...

PT-2026-121544

Name of the Vulnerable Software and Affected Versions OpenBao versions prior to 2.6.3 Description A missing authorization check allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When the require request header setting is enabled, attackers can utilize server-side...

ALSA-2026:88280 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial o...

PT-2026-121659

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common...

RHEL 10 : expat (RHSA-2026:88248)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88248 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: expat: Denial of Service via integer overflow in expatrealloc...

RHEL 10 : golang-github-openprinting-ipp-usb (RHSA-2026:88280)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88280 advisory. HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-U...

RHEL 8 : grafana (RHSA-2026:88188)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88188 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http:...

RHEL 8 : grafana (RHSA-2026:88339)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88339 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang:...