PT-2026-79629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the netfilter nf conntrack component when TCP and SCTP conntrack paths emit invalid-packet logs while the ct-lock is still held. If invalid logging is routed to...

Linux Distros Unpatched Vulnerability : CVE-2026-74624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid...

CVE-2026-74696: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO maxqlen accounting across reuseport migration A listener's TCPFASTOPEN maxqlen stops being accurate and lets through far more pending Fast Open requests than it was configured for. This only shows up with SOREUSEPORT...

CVE-2026-68554

A flaw was found in Coturn, a free open source implementation of TURN and STUN Session Traversal Utilities for NAT Server. An on-path attacker can exploit this vulnerability on plain UDP or TCP by appending attributes after the MESSAGE-INTEGRITY field in an authenticated STUN request. This allows...

CVE-2026-73212

A flaw was found in Coturn. An authenticated client using the RFC 6062 TCP CONNECT relay path can bypass intended IPv4 denied-peer-ip range restrictions due to improper canonicalization of IPv4-compatible, 6to4, and NAT64 address forms. This vulnerability can lead to Server-Side Request Forgery...

Exploit for CVE-2026-100886

PoC - RLog debug server RCE CVE-2026-100886https://vuldb.c...

UltraViolet v1.0.11

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102028)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102028 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on...

USN-8630-4: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

EUVD-2026-63666

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

CVE-2026-64773

An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wai...

CVE-2026-64773

A vulnerability exists in container versions prior to 1.2.0 where an attacker reaching a published TCP port can trigger the host's forwarding process to buffer an unbounded amount of data in memory. The issue persists as long as the backend container connection takes to complete, as there is no c...

CVE-2026-74386

A flaw was found in the nvmet-tcp component of the Linux kernel. A remote attacker could repeatedly open and close connections, causing a page fragment cache leak. This vulnerability occurs when a connection is closed during the allocation process, leading to memory not being properly released...

CVE-2026-74385

A flaw was found in the nvmet-tcp component of the Linux kernel. This vulnerability arises from ignoring the return value of a function during the TLS handshake, specifically when the network socket is not in an established state. This oversight prevents proper cleanup, leading to the leakage of...

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

CVE-2026-18264

NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which...

CVE-2026-18264

CVE-2026-18264 is a command injection vulnerability in NoMachine , specifically in the getstat command handled by the web service (default TCP port 4000). The root cause is the lack of proper validation of a user-supplied string before it is passed to a system call, allowing a remote authenticate...