PT-2026-126684

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.33.14 Description The Linux implementation of the networkStatsiface function fails to properly validate the iface variable when performing an fs.existsSync check and constructing paths under /sys/class/net...

CVE-2026-117507: Concurrent Execution using Shared Resource with Improper Synchronization

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the bttinit function within the drivers/nvdimm/btt.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Batadv Interface TX Buffer Overflow DoS

The vulnerability in the batadvinterfacetx function within the net/batman-adv/mesh-interface.c component of the Linux kernel system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

PT-2026-125650

A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the atta...

PT-2026-126358

REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex api package API function that lets non-admin backend users manage packages with only a valid CSRF token. Attackers holding a token, such as demoted admins with active sessions, can uninstall system addons like...

PT-2026-127185

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only possible with local access. The exploit has been made publi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146151 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146311 advisory. In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rdsfindbound looks up the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146321 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

CVE-2026-57201: Out-of-bounds Write

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146323 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

CVE-2026-104189: Missing Authentication for Critical Function

The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who knows a share token could read the shared file's contents...

Linux Distros Unpatched Vulnerability : CVE-2026-116195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after...

Linux Distros Unpatched Vulnerability : CVE-2026-116096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-98986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its...

Hitachi Energy RTU500 Missing Authentication for Critical Function (CVE-2014-9195)

Missing authentication vulnerability in a network service of Hitachi Energy RTU500 allows an unauthenticated remote attacker to execute arbitrary commands using protocol-compliant network traffic. Successful exploitation could result in unauthorized modification of the device or disruption of its...

CVE-2026-113775: Exposed Dangerous Method or Function

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this...

CVE-2026-116773: Allocation of Resources Without Limits or Throttling

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the client Session::processpacket path in russh/src/client/encrypted.rs accepts repeated packets encoded with russh's private msg::EXTINFO = 7 before authentication, while the...

TencentOS Server 3: expat (TSSA-2026:1212)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1212 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...