PT-2026-30802

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GENESIS64 versions prior to 10.97.3 Mitsubishi Electric ICONICS Suite versions prior to 10.97.3 Mitsubishi Electric MobileHMI versions prior to 10.97.3 Mitsubishi Electric Hyper Historian versions prior to 10.97.3 Mitsubish...

Linux Distros Unpatched Vulnerability : CVE-2026-28389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary:...

Linux Distros Unpatched Vulnerability : CVE-2026-23459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iptunnel: adapt iptunnelxmitstats to NETDEVPCPUSTATDSTATS Blamed commits forgot that vxlan/geneve use udptunnel6xmitskb which call iptunnelxmitstats...

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6

CVE-2026-3731 affecting package libssh for versions less than 0.10.6-6. A patched version of the package is available...

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3

CVE-2026-23066 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...

CVE-2026-34043 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, sqlpad, tileserver-gl...

CVE-2026-33175 vulnerabilities

Vulnerabilities for packages: py3-oauthenticator...

CVE-2026-34052 vulnerabilities

Vulnerabilities for packages: py3-jupyterhub-ltiauthenticator...

CVE-2026-35582

Unknown description...

ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems

Existing research on LLM agent security mainly focuses on prompt injection and unsafe input/output behaviors. However, as agents increasingly rely on third-party tools and MCP servers, a new class of supply-chain threats has emerged, where malicious behaviors are embedded in seemingly benign tool...

Linux Distros Unpatched Vulnerability : CVE-2026-31406

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: Fix work re-schedule after cancel in xfrmnatkeepalivenetfini After canceldelayedworksync is called from xfrmnatkeepalivenetfini, xfrmstatefini flushes...

GHSA-F7GR-6P89-R883 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-27901 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-CRPF-4HRX-3JRP vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-PHWV-C562-GVMH vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-4636 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-22RM-WP4X-V5CX vulnerabilities

Vulnerabilities for packages: keycloak-fips...

Invisible Adversaries: A Systematic Study of Session Manipulation Attacks on VPNs

Virtual Private Networks VPNs are widely used for censorship evasion and traffic protection. VPN users expect to be provided with adequate security protection, and at the same time not be affected by other users connected to the same VPN server, which can be illustrated as the non-interference...

Linux Distros Unpatched Vulnerability : CVE-2026-34990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can...

Linux Distros Unpatched Vulnerability : CVE-2026-23452

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PM: runtime: Fix a race condition related to device removal The following code in pmruntimework may dereference the dev-parent pointer after the parent device...