Linux Distros Unpatched Vulnerability : CVE-2026-79095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098894 advisory. In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent access crashes GCC's GCOV instrumentation can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098774 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: bail out on template ct in get eval I noticed this issue while looking at a...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098853)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098853 advisory. In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to POWERPC spufs: Fix gang destroy leaks we used to hav...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098962 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irqwork can be queued in...

Linux Distros Unpatched Vulnerability : CVE-2026-79265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged soci...

SUSE SLES12 Security Update : vim (SUSE-SU-2026:3677-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3677-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON...

Linux Distros Unpatched Vulnerability : CVE-2026-79193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium securit...

Linux Distros Unpatched Vulnerability : CVE-2026-79286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside...

Linux Distros Unpatched Vulnerability : CVE-2026-74745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for the callback synchronously. bnxt takes the netdev...

CISA: A Tale of Two SOCs - Insights from Two Red Team Assessments

The Cybersecurity and Infrastructure Security Agency CISA conducted simultaneous red team assessments at two organizations and observed different defensive outcomes. In both environments, the red team achieved full domain compromise and accessed sensitive business systems SBSs and cloud resources...

A Hybrid Security Framework for Mini-Programs: Visual UI Compliance and Network Risk Assessment

With the continuous development of the WeChat ecosystem, WeChat Mini Programs, due to their advantages of not requiring installation, using little memory, and being ready to use instantly, have seen a surge in user numbers and have now become an indispensable service carrier in mobile internet...

PT-2026-82051

Name of the Vulnerable Software and Affected Versions OpenRGB affected versions not specified Description The network protocol in OpenRGB contains a flaw that allows an attacker to write controlled strings into arbitrary file system paths. This issue can lead to a full system compromise if the...

PT-2026-82329

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The binary lacks several critical, industry-standard hardening protections, which could allow an attacker to cause a stack-based buffer overflow. A stack-based buffer...

PT-2026-82216

Name of the Vulnerable Software and Affected Versions ZLMediaKit affected versions not specified Description The downloadFile API endpoint fails to properly validate directory boundaries when restricting file access to configured root directories. The system uses a prefix comparison that does not...

PT-2026-82205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the block subsystem. The disk release function fails to stop the q-timeout timer when releasing a disk whose probe failed before add disk. This occu...

PT-2026-82068

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

PT-2026-82228

Name of the Vulnerable Software and Affected Versions Bird Home Automation GmbH D1101V-F 000140 affected versions not specified Description Incorrect access control exists due to flaws in the key derivation process and the password validation process. Recommendations At the moment, there is no...

PT-2026-82326

SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite a different object outside that scope by calling PutObjectAcl on the key it is allowed to access. The handler...