PT-2026-113606

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

PT-2026-113639

Improper neutralization of special elements in the NetBird client SSH configuration manager client/ssh/config/manager.go in NetBird versions 0.60.0 through 0.74.6 allows a malicious or compromised peer to execute arbitrary commands on other NetBird client hosts. The client writes a system-wide...

ROS-20261014-73-0112

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261014-73-0171

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20261014-73-0220

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-113652

Akamai GPA Guardicore Platform Agent client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, an attacker can use a spoofed JWT token to inject arbitrary parameters into the client software, resulting in...

ROS-20261014-73-0200

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20261014-73-0053

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Substance 3D Stager 3.0.0 < 3.1.9 Multiple Vulnerabilities (APSB26-170)

The version of Adobe Substance 3D Stager installed on the remote Windows host is prior to 3.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-170 advisory. - Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary cod...

Linux Distros Unpatched Vulnerability : CVE-2026-48212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in th...

Google Chrome < 155.0.8059.79 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 155.0.8059.79. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop01668083673 advisory. - Use after free in Media in Google Chrome prior to 155.0.8059.79...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130131)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130131 advisory. rsyncbefore 3.5.0contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : FFmpeg vulnerabilities (USN-8915-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8915-1 advisory. Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. A...

Adobe Dimension < 4.1.9 Multiple Vulnerabilities (APSB26-171) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 4.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-171 advisory. - Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio...

Adobe Dimension < 4.1.9 Multiple Vulnerabilities (APSB26-171)

The version of Adobe Dimension installed on the remote Windows host is prior to 4.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-171 advisory. - Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code...

RockyLinux 8 : pcre2 (RLSA-2026:81613)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:81613 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Out-of-bounds write via...

Ivanti Connect Secure 22.8R2.x < 22.8R2.5 / 25.1.0.x / 25.1.1.x < 25.1.1.2 / 25.1.2.x < 25.1.3.0 Authentication Bypass (CVE-2026-104935)

The Ivanti Connect Secure install on the remote host is 22.8R2.x prior to 22.8R2.5, 25.1.0.x or 25.1.1.x prior to 25.1.1.2, or 25.1.2.x prior to 25.1.3.0. It is, therefore, affected by an authentication bypass by spoofing vulnerability: - An authentication bypass by spoofing in Ivanti Connect...

VulnCheck KEV: CVE-2026-103671

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin for EC-CUBE 4 series "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained...

RockyLinux 9 : pcre2 (RLSA-2026:81532)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:81532 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 PCRE2: PCRE2: Out-of-bounds read via...

RHEL 9 : pcre2 (RHSA-2026:82875)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:82875 advisory. The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern...