DEBIAN-CVE-2026-57227

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

CVE-2026-57224

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

UBUNTU-CVE-2026-57224

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

PT-2026-95249

Name of the Vulnerable Software and Affected Versions Really Simple Security WordPress plugin versions prior to 9.8.3 Description An issue exists where the software fails to validate a client-supplied address value before utilizing it as a storage key within its own options. This allows...

CVE-2026-69208

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47 , the DigestAuth server middleware contains an inverted stale-nonce comparison that removes fresh nonces and stops eviction at the first stale nonce. On any application protecting at least one route with DigestAuth, an ...

CVE-2026-82439

The Apache Storm DRPC server is vulnerable to unauthenticated unbounded memory growth because it maintains a map of function names to request queues. While requests are cleared, the map entries are never removed, persisting for the life of the process. Since function names are client-provided and...

Important: ruby3.4

Issue Overview: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey...

Linux Distros Unpatched Vulnerability : CVE-2026-89648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation...

DEBIAN-CVE-2026-89648

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

CVE-2026-89648

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

UBUNTU-CVE-2026-89648

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

EUVD-2026-76560

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

CVE-2026-89648

CVE-2026-89648 affects the Linux kernel Ceph client in the function ceph_parse_deleg_inos(). When decoding delegated-inode intervals from an MDS create-with-delegation reply, the 64-bit len field is fully attacker-controlled and was previously unbounded. A malicious or compromised Ceph MDS can se...

CVE-2026-89648 ceph: cap delegated inode count in ceph_parse_deleg_inos()

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in cephparsedeleginos cephparsedeleginos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

Linux Distros Unpatched Vulnerability : CVE-2026-45769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2...

CVE-2026-45769

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessi...

CVE-2026-16028

A flaw was found in Protocol::HTTP2 for Perl. A remote attacker could exploit this vulnerability by repeatedly opening and closing HTTP/2 streams. This action causes the system to retain residual entries for each closed stream, leading to an unbounded increase in memory usage. This memory...

CVE-2026-16028

The Protocol::HTTP2 Perl module (versions before 1.14 ) is vulnerable to memory exhaustion leading to a denial of service . The root cause is that the stream_state function fails to remove closed streams from the connection stream table, allowing a peer to indefinitely accumulate residual entries...

OESA-2026-3667 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass...

EUVD-2026-70782

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...