Linux Distros Unpatched Vulnerability : CVE-2026-68090

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat: WARNING: kernel/time/hrtimer.c:443 at stubtimer+0xa/0x20 stubtimer i...

PT-2026-70983

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability...

PT-2026-70119

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

PT-2026-70059

Name of the Vulnerable Software and Affected Versions Zephyr ARM port affected versions not specified Description On the ARM port, enabling the hardware FPU via CONFIG FPU forces a Floating point ABI choice, defaulting to CONFIG FP HARDABI. Both FP HARDABI and FP SOFTABI allow the compiler to emi...

PT-2026-70387

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

The vulnerability of the validate_network_url() function in the nltk.pathsec component of the NLTK library for symbolic and statistical processing of natural language allows a attacker to perform an SSRF attack.

The vulnerability of the validatenetworkurl function in the nltk.pathsec component of the NLTK library, a software library for symbolic and statistical processing of natural language, is related to insufficient validation of requests on the server side. Exploiting this vulnerability may allow a...

PT-2026-70982

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability...

PT-2026-70109

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

PT-2026-70984

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.5 - Revert 'x86/alternatives: Add altinstr.flags' Harshit Mogalapalli Orabug: 39859219 5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU...

PT-2026-70427

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70434

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70421

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free condition in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Use-after-fr...

PT-2026-70260

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

The vulnerability of the `strip_unsafe_prefix()` function in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure

The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a filename or file path. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Lib/html/parser.py component of the Python programming language allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

PT-2026-70118

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...

PT-2026-70120

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...

PT-2026-70124

An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authentication before resolving and returning...

PT-2026-70058

Name of the Vulnerable Software and Affected Versions Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x affected versions not specified Description The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers contains an issue where the bt bflb send function in drivers/bluetooth/hci/hci...