EUVD-2026-62480

The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...

UBUNTU-CVE-2026-23938

An authenticated administrator is able to crash Zabbix server or proxy...

CVE-2026-50720

Ingenic T31 SoC boot ROM compares only one 32-bit word of RSA signature output against SHA-256 digest instead of full data, enabling SPL image forgery with ~2/3 success probability by attackers with physical boot-media access. Validated on Wyze Video Doorbell v2 (T31X). No patch or workaround det...

Linux Distros Unpatched Vulnerability : CVE-2026-70906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allo...

CVE-2026-74963

Same-origin policy bypass in the Networking: Cookies component. This v...

Oracle Database Server (August 2026 CSPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32,...

Linux Distros Unpatched Vulnerability : CVE-2026-18697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting...

CVE-2026-50719

Ingenic T41/T32/T40/A1 SoC boot ROMs execute an attacker-controlled init table from the SPL header before secure boot verification, using 32-bit writes to disable SRAM-resident secure boot state, allowing unsigned boot code. Hardware-validated on T41; ROM analysis confirms behavior on other chips...

Linux Distros Unpatched Vulnerability : CVE-2026-76014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOU...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

Linux Distros Unpatched Vulnerability : CVE-2026-18695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write...

ROS-20260819-73-0041

The vulnerability in Tomcat is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260819-73-0043

The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

UBUNTU-CVE-2026-74950

Privilege escalation in the Downloads API component. This vulnerabilit...

Oracle MySQL Cluster 9.x < 9.7.3 (August 2026 CSPU)

The versions of MySQL Cluster installed on the remote host are affected by a vulnerability as referenced in the August 2026 CSPU advisory. - Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11...

UBUNTU-CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-74966

Information disclosure in the Form Autofill component. This vulnerabil...

UBUNTU-CVE-2026-68939

Pyenv provides simple Python version management. Prior to 2.8.0, isve...

PT-2026-78345

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

PT-2026-78698

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes is secure string validation and is embedded into Redis keys at nine call sites in...