Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142506 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xthashlimit: validate hashtable supports XTHASHLIMITRATEMATCH The XTHASHLIMITRATEMATCH...

Oracle MySQL Connectors NET (October 2026 CPU)

The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. The supported version that is affected is 26.7.0...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142510 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Linux Distros Unpatched Vulnerability : CVE-2026-83387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JDBC. Supported versions tha...

Linux Distros Unpatched Vulnerability : CVE-2026-83381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1...

PT-2026-121507

Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in different execution contexts. This only poses a security issue if the IP address of the attacked executor is know and...

Oracle JDeveloper Multiple Vulnerabilities (October 2026 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware component: Security...

Linux Distros Unpatched Vulnerability : CVE-2026-91385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142762 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tungetuser uses tun-align both as skb headroom and when choosing...

KiloView E3 Firmware session mechanism vulnerability

Versions of the KiloView E3 firmware prior to 1.30 contain a vulnerability related to the session mechanism. This vulnerability arises because authentication tokens issued during login on the web management interface have an expiration time far exceeding the typical duration of a valid session. A...

ROS-20261022-73-0037

The vulnerability of the software for collecting information about the status and performance of applications running on the OpenShift platform, OpenShift Telemeter, involves bypassing authentication through phising techniques. Exploiting this vulnerability can allow a malicious actor to gain...

WatchGuard Agent permission and access control issue vulnerability

Versions of WatchGuard Agent prior to 1.25.14.0000 contain a privilege escalation and access control vulnerability. This vulnerability stems from improper permission allocation within the log directory, potentially allowing locally authenticated non-administrator users to create, modify, append, ...

PT-2026-121372

Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any organization by supplying its UUID. Self-registered attackers who know another organization's UUID can send a POST request to /app/switch organization...

PT-2026-121480

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.30.7 PhpSpreadsheet versions prior to 2.1.19 PhpSpreadsheet versions prior to 2.4.8 PhpSpreadsheet versions prior to 3.10.8 PhpSpreadsheet versions prior to 5.10.0 Description The XmlScanner::scan function in...

rdpecam module RDP Client Unauthorized Access

The vulnerability of the rdpecam module in the RDP client FreeRDP is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted request...

Microsoft Access Database Disclosure Protected Information

The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

PT-2026-121282

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

KB5125471 - Cumulative Update 10 for SQL Server 2025

KB5125471 - Cumulative Update 10 for SQL Server 2025 Release Date: October 22, 2026 Version: 17.0.5035.5 Summary This article describes Cumulative Update 10 CU10 for Microsoft SQL Server 2025. This update package contains 37 fixes that were issued after the release of SQL Server 2025 Cumulative...

ANGLE Library Protected Information Access

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142508)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142508 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offse...