PT-2026-115121

undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memory by a malicious or compromised WebSocket server. For...

Oracle Linux 9 : libsoup (ELSA-2026-83384)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83384 advisory. - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup: libsoup: Heap buffer...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130403 advisory. Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from...

AlmaLinux 9 : libsoup (ALSA-2026:83384)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:83384 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket...

Linux Distros Unpatched Vulnerability : CVE-2026-109855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is...

Oracle Linux 10 : libsoup3 (ELSA-2026-83618)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83618 advisory. - CVE-2026-102557 libsoup3: libsoup: Heap buffer overflow during WebSocket message reassembly - CVE-2026-102556 libsoup3: libsoup: Heap buffer overfl...

RHEL 9 : libsoup (RHSA-2026:83384)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83384 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from...

AlmaLinux 9 : nodejs:22 (ALSA-2026:76750)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76750 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequested...

undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake

A flaw was found in undici. A malicious remote server can cause a Denial of Service DoS by returning an invalid handshake response when a client attempts to establish a WebSocket connection over HTTP/2. The client mishandles the failed connection setup and leaves the underlying network stream ope...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.12 Vulnerability Details CVEID:CVE-2026-54463 DESCRIPTION: websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a...

CVE-2026-82026

Radar versions prior to 1.12.2 are vulnerable to a missing authorization flaw in the handleLocalTerminal WebSocket endpoint (/api/local_terminal/ ). The root cause is the system's reliance on a runtime-mode check instead of proper role-based access control . This allows both authenticated and una...

EUVD-2026-101018

Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint /api/local-terminal that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control...

USN-8927-1 curl vulnerabilities

It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-107928 Maksim discovered that curl did not correctly include the interface binding in connection...

USN-8927-1: curl vulnerabilities

It was discovered that curl, when built with GnuTLS support, had an out-of-bounds read in the WebSocket send path. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-107928 Maksim discovered that curl did not correctly include the interface binding in connection...

CVE-2026-39987-Marimo-Preauth-RCE

CVE-2026-39987 Marimo Pre-auth RCE Research Overview This project focuses on CVE-2026-39987, a pre-authentication Remote Code Execution vulnerability in Marimo related to the terminal WebSocket endpoint /terminal/ws. Marimo is an open-source reactive Python notebook that allows users to write and...

info leak uploading over WebSockets with GnuTLS

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

CVE-2026-107928

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

UBUNTU-CVE-2026-107928

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

CVE-2026-82026: Missing Authorization

Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint /api/local-terminal that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130102 advisory. Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from...