Linux Distros Unpatched Vulnerability : CVE-2026-64505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: function: rndis: add length check for header Add a length check for the rndis header in rndisrmhdr, to ensure that MessageType, MessageLength,...

Linux Distros Unpatched Vulnerability : CVE-2026-16390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

Linux Distros Unpatched Vulnerability : CVE-2026-16404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153. CVE-2026-16404 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-16392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16392 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-16370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16370 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-64280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fpga: dfl-afu: validate DMA mapping length in afudmamapregion afuioctldmamap accepts a 64-bit length from userspace via DFLFPGAPORTDMAMAP ioctl without an upper...

Linux Distros Unpatched Vulnerability : CVE-2026-58264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - fluidsynth - None Ubuntu Linux - heap-based buffer overrun in command handler CVE-2026-58264 Note that Nessus relies on the presence of the packa...

Linux Distros Unpatched Vulnerability : CVE-2026-64318

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - partitions: aix: bound the ppcount scan to the ppe array aixpartition reads the physical volume descriptor into a fixed-size struct pvd and then scans its...

Linux Distros Unpatched Vulnerability : CVE-2026-16394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16394 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-64315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: caam - use printhexdumpdevel to guard key hex dumps Use printhexdumpdevel for dumping sensitive key material in setkey to avoid leaking secrets at runti...

Linux Distros Unpatched Vulnerability : CVE-2026-16382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16382 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2026-16406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16406 Note that Nessus relies on the...

CVE-2026-17107

A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes RHACM and multicluster-engine MCE. The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke...

CVE-2026-17059

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of...

PYSEC-2026-3504 PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

Summary praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native path lets callers configure allowed filesystem paths and network=False. On systems where the optional sandlock module imports but reports tha...

CVE-2026-52584

A flaw was found in libjxl. This buffer overflow vulnerability allows a local attacker to obtain sensitive information. The flaw occurs within the DecodeImageAPNG function, which can lead to unauthorized disclosure of data. Mitigation Mitigation for this issue is either not available or the...

CVE-2026-47059

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

CVE-2026-61114

...

CVE-2026-60502

...

CVE-2026-60342

The CVE-2026-60342 issue affects Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated remote attacker with network access via HTTP can read a subset of Oracle Access Manager data. Publicly provided connecte...