PT-2026-110725

Name of the Vulnerable Software and Affected Versions Craft CMS versions 4.0.0 through 4.18.6 Craft CMS versions 5.0.0 through 5.10.13 Description Authenticated control panel users with the performUpdates permission or Updates-utility access can execute arbitrary code. The issue occurs because th...

PT-2026-110957

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1120.00 through FW1120.01 IBM Power Systems Firmware versions FW1110.00 through FW1110.31 IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A buffer overflow exists in the host...

PT-2026-111122

Name of the Vulnerable Software and Affected Versions IBM i version 7.3 IBM i version 7.4 IBM i version 7.5 IBM i version 7.6 Description Improper data sanitization within the HTTP Server Administration web application allows a remote authenticated attacker to execute arbitrary code or obtain...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791479721)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791479721 advisory. - GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...

EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4237)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2026-4342)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap...

TencentOS Server 3: ansible-core (TSSA-2026:1118)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1118 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-3191)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3191 advisory. A critical arbitrary code execution vulnerability CWE-94 found in the DBD::DBM database driver, which is a core component shipped within the Perl DBI Database Interface module. The flaw exists because...

Important: rpm

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

Important: python-pymongo

Issue Overview: A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacker who can submit oversized data to an application for encoding can trigger an...

Important: flatpak-builder

Issue Overview: When use-git-am: true is enabled for a patch source, flatpak-builder invokes git am without disabling git hooks. A malicious source can include a post-applypatch hook, which will be executed automatically when a patch with use-git-am: true is applied. Since git itself runs...

Important: emacs

Issue Overview: A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG Scalable Vector Graphics CSS Cascading Style Sheets data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may...

Important: rpm

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

CVE-2026-96262: Stack-based Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96264: Stack-based Buffer Overflow

IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowi...

CVE-2026-96263: Stack-based Buffer Overflow

IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted co...

PT-2026-110450

Name of the Vulnerable Software and Affected Versions libsamsungtts.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds write exists in the libsamsungtts.so library, which allows local attackers to execute arbitrary code. An out-of-bounds write occurs when a program writes da...

PT-2026-110448

Name of the Vulnerable Software and Affected Versions WSM service versions prior to SMR Oct-2026 Release 1 Description A use after free issue exists in the WSM service. This flaw allows local attackers to potentially execute arbitrary code with system privileges. Use after free is a memory...

Adobe Substance 3D Designer Buffer Overflow

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Adobe Substance 3D Designer Buffer Overflow

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...