RHEL 8 : grafana-pcp (RHSA-2026:88394)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88394 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

RHEL 8 : grafana-pcp (RHSA-2026:88395)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88395 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

openSUSE 16 Security Update : grafana (openSUSE-SU-2026:22125-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22125-1 advisory. Changes in grafana: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource...

RHEL 8 : grafana (RHSA-2026:88340)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:88340 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang:...

Linux Distros Unpatched Vulnerability : CVE-2026-114724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcubesession::unserialize. A session key prefixed with ! was...

PT-2026-120956

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube session::unserialize. A session key prefixed with “!” was treated as having no value, and the reconstructed serialized string was emitted with a key but no corresponding value, desynchronizing t...

Linux Distros Unpatched Vulnerability : CVE-2026-111815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verifyclient...

CVE-2026-114439

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP stale worker-global state "php2shell",...

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114439 oretnom23 php-travel-agency-system Session session.php missing authentication

A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Handler. Executing a manipulation of the argument userid can lead to missing authentication. It is possible to launch t...

CVE-2026-114439

The oretnom23 php-travel-agency-system is vulnerable to missing authentication within the Session Handler component, specifically affecting the admin/session.php file. An attacker can perform a remote attack by manipulating the user_id argument. While the exploit has been publicly disclosed, the ...

CLSA-2026-1792615126 php: Fix of 2 CVEs

CVE-2026-109618, CVE-2026-109619: disable the session upload progress handler and harden request state after bailout - memorylimit and allocation overflow fatals now print to stderr and terminate the process no bailout, no shutdown functions...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-detect Defensive Detector + Bounded Offensive I...

DEBIAN-CVE-2026-111815

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verifyclient STRICT policy. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4,...

DEBIAN-CVE-2026-111814

Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present a different one. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0...

CVE-2026-111814

Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present a different one. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0...

CVE-2026-111815

Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verifyclient STRICT policy. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4,...

Exploit for CVE-2026-109618

php2shell - CVE-2026-109618 / CVE-2026-109619 Independe...

CLSA-2026-1792612051 php: Fix of 2 CVEs

CVE-2026-109618, CVE-2026-109619: disable the session upload progress handler and harden request state after bailout - memorylimit and allocation overflow fatals now print to stderr and terminate the process no bailout, no shutdown functions...