Linux Distros Unpatched Vulnerability : CVE-2026-101608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-106071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard --allow-fs-read or --allow-fs-write rule. When...

Linux Distros Unpatched Vulnerability : CVE-2026-101727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792751700)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792751700 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len =...

PT-2026-121990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where concurrent listener setups for Broadcast Isochronous Streams BIS can lead to a slab-use-after-free. This occurs because iso sock...

PT-2026-121732

A server-side request forgery SSRF vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form...

PT-2026-121738

Okta Access Gateway OAG does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console...

PT-2026-121788

Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86...

PT-2026-121790

Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through 1.5.3...

WordPress Knit Pay authorization issue vulnerability

WordPress Knit Pay versions 9.6.3.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, allowing attackers to exploit improperly configured access control security levels...

Node.js Node permissions and access control issues vulnerability

Node.js versions 22.23.3 and earlier, 24.22.0 and earlier, and 26.12.0 and earlier contain a permission and access control vulnerability. This vulnerability stems from incomplete enforcement of the Permission Model file system; fs.realpathSync lacks necessary read permission checks. As a result,...

Vulnerability related to CGM CLININET permission, authorization, and access control issues

CGM CLININET versions 2026.MS3 and earlier contain a vulnerability related to permission escalation and access control. This issue arises because multiple processes responsible for HL7 communication with external systems run as root when processing untrusted data. Compromised attackers on adjacen...

ROS-20261023-73-0024

The vulnerability in Jenkins is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261023-73-0036

The vulnerability in Jenkins is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261023-73-0064

The vulnerability in libheif is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261023-73-0034

The vulnerability in Jenkins is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261023-73-0231

The vulnerability in Grafana relates to bypassing the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Ilbers GmbH Isar permission and access control issues vulnerability

Versions 0.11 through 1.1 of Isar contain a permission and access control vulnerability. This issue arises because the /etc/apt/trusted.gpg.d directory is manually created during bootstrap setup to store local keys; as a result, this directory is owned by the user executing Isar rather than root...

Linux Distros Unpatched Vulnerability : CVE-2026-91484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Java plugin. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-114370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. T...