tomcat: Apache Tomcat: Denial of Service via HTTP/2 allocation leak

A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...

MiracleLinux 8 : kernel-4.18.0-553.151.1.el8_10 (AXSA:2026-1562:63)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1562:63 advisory. kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Tenable has extracted the preceding description block directly from the MiracleLinu...

Linux Distros Unpatched Vulnerability : CVE-2026-72164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes...

PT-2026-80382

Unbounded memory allocation in proto.UnencryptedMessage.Decode in github.com/gotd/td...

PT-2026-76902

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from raw dt align of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely...

PT-2026-77296

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

Security Bulletin: NVIDIA Triton Inference Server - August 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, update to NVIDIA Triton Inference Server version 26.06 or later. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update address...

AlmaLinux 10 : php (ALSA-2026:48170)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:48170 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.3.32 for...

Linux Distros Unpatched Vulnerability : CVE-2026-72465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The outnorqst exit in...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102120 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tbxdphandlerequest casts the...

Linux Distros Unpatched Vulnerability : CVE-2026-72231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This...

CVE-2026-47628: Allocation of Resources Without Limits or Throttling

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...

CVE-2026-50142: Integer Overflow or Wraparound

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heifcontextreadfrommemory with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seqboxes.cc, Boxstsz::parse applies maxsequenceframes only to...

CVE-2026-71139: Allocation of Resources Without Limits or Throttling

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

Linux Distros Unpatched Vulnerability : CVE-2026-72244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous...

Linux Distros Unpatched Vulnerability : CVE-2026-72058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered wit...

AlmaLinux 10 : php8.4 (ALSA-2026:49914)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:49914 advisory. php: PHP OpenSSL extension: Denial of Service due to buffer allocation flaw in AES-WRAP-PAD CVE-2026-14355 Bug Fixes and Enhancements: Rebase PHP to 8.4.23 for...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101995)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101995 advisory. In the Linux kernel, the following vulnerability has been resolved: ipmi:si: Return state to normal if message allocation fails There were places where nothing would...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102118 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode ...

Linux Distros Unpatched Vulnerability : CVE-2026-72343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero- sized buffer allocation mlx5ehvvhcastatscreate is called...