CVE-2026-116096

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...

PT-2026-123149

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func set nnabla version decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-good (CENTOS7:CLSA-2026:1792770102)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770102 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps functi...

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...

PT-2026-123437

A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor w...

Linux Distros Unpatched Vulnerability : CVE-2026-99089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: samsung: i2s: enable opclk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the iis bus clock...

PT-2026-125091

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privilege management. The attack may be performed from remote. The...

PT-2026-123148

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load param in txt of the file python/src/nnabla/utils/cli/encode decode param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to laun...

PT-2026-125466

A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function sub 402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT LENGTH results in stack-based buffer overflow. Remot...

CVE-2026-116124

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function oleinforeadmetabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The...

CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc (CENTOS7:CLSA-2026:1792785441)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792785441 advisory. - A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when...

CVE-2026-98944

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...

PT-2026-125479

Name of the Vulnerable Software and Affected Versions Furnace versions prior to 0.6.8.4 Description An out-of-bounds heap read occurs during the import of FamiTracker modules .ftm, .dnm, or 0CC/E-FamiTracker. The issue is triggered by an unbounded DPCM note count in the DivEngine::loadFTM functio...

UBUNTU-CVE-2026-98908

In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5tcflowerpsfpsetup allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources...

Linux Distros Unpatched Vulnerability : CVE-2026-116262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in libimobiledevice up to 1.4.0. The affected element is the function webinspectorreceivewithtimeout of the file src/webinspector.c...

UBUNTU-CVE-2026-116259

A security flaw has been discovered in libimobiledevice up to 1.4.0. This vulnerability affects the function afcgetdeviceinfokey of the file src/afc.c of the component Device Info Handler. Performing a manipulation of the argument Value results in memory corruption. The attack requires a local...

CVE-2026-98947

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix memory leak in vmcitransportrecvdgramcb During the closure of a datagram socket, the vmcitransportrecvdgramcb function may be called, which will add the packets to the socket's backlog; then, after the receive queue is...

PT-2026-125504

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image name results in path traversal. The attack is possible to be carried out remotely. The exploit is no...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the kvms390giscregister function within the arch/s390/kvm/pci.c file of the Linux kernel kernel is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Security update for python-nltk (important)

openSUSE Security Update: Security update for python-nltk Announcement ID: openSUSE-SU-2026:0359-1 Rating: important References: 1227174 1232448 1273256 1274590 1276252 1276253 Cross-References: CVE-2024-39705 CVE-2025-14009 CVE-2026-12075 CVE-2026-12252 CVE-2026-12372 CVE-2026-12841 CVE-2026-715...