PT-2026-126411

A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the attack remotely. Upgrading to version 2.5.0 is recommended t...

VulnCheck KEV: CVE-2026-84999

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146321 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146267)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146267 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ipvsseq structs in ipvsconnnew Commit 9a05475cebdd ipvs: avoid kmemcachezalloc i...

Linux Distros Unpatched Vulnerability : CVE-2026-98986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - namespace: remove the fsnotify marks of a mount namespace in process context mntnsrelease drops the last passive reference of a mount namespace and removes its...

TencentOS Server 3: expat (TSSA-2026:1212)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1212 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-99018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp...

Linux Distros Unpatched Vulnerability : CVE-2026-65628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - josejwk:sharedsecret/2 exposed in Elixir as JOSE.JWK.sharedsecret/2 derives an ECDH shared secret from two JWKs. Its first function clause only matches when bot...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146144)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146144 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft AH6 rearranges routing-header addresses before...

Linux Distros Unpatched Vulnerability : CVE-2026-109088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the parsereplycallcallback function in libXtst before 1.2...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146260)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146260 advisory. In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function...

Linux Distros Unpatched Vulnerability : CVE-2026-116261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libimobiledevice up to 1.4.0. Impacted is the function afcfileopen of the file src/afc.c of the component AFC File...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146323 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses ...

CVE-2026-117509: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146281)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146281 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwgetwpaie rtwgetwpaie reads bytes at fixed offsets into a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...

PLANET WGS-804HPT and WGS-4215 Missing Authentication for Critical Function (CVE-2025-46275)

PLANET WGS-804HPT V2 and WGS-4215-8P2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2026:1793098806)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793098806 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destinati...

SUSE SLED15: cpp7 / cross-nvptx-gcc7 / cross-nvptx-newlib7-devel / gcc7 / etc (SUSE-SU-2026:4913-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4913-1 advisory. - CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. - CVE-2026-102010: UAF due to imprope...

TencentOS Server 4: expat (TSSA-2026:1196)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1196 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...