PT-2026-76651

Name of the Vulnerable Software and Affected Versions In Progress ShareFile Storage Zones Controller versions prior to 5.12.6 Description A party with valid zone credentials can perform path traversal via the resumable upload initiation endpoint. This allows the party to write arbitrary content t...

ALSA-2026:55857 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

ALSA-2026:55541 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

Important: pcp

Issue Overview: A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root. CVE-2026-16526 A signed integer overflow in the PCP pmGetPDU function can be...

unbound security update

1.16.2-5.14 - Add unit test for CVE-2026-44690 from upstream. 1.16.2-5.13 - Fix CVE-2026-44690 RHEL-212801...

VulnCheck KEV: CVE-2026-8452

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy or AAA virtual server...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:54574)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Deni...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cups-filters (UTSA-2026-100782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100782 advisory. A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the...

ALSA-2026:55859 Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

Important: gimp

Issue Overview: A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when...

Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record...

The vulnerability in the drivers/video/fbdev/core/fbcon.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/video/fbdev/core/fbcon.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/minix/inode.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/minix/inode.c component in the Linux operating system is related to insufficient checking of the type of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/staging/rtl8723bs/osdep/ioctlcfg80211.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the display_timing component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the displaytiming component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk-mdp component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mtk-mdp component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/server/transport_tcp.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/md/dm-verity-fec.c component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/iommu/intel/pasid.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/iommu/intel/pasid.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...