PT-2026-81952

The Tutor LMS WordPress plugin before 4.0.6 does not validate values used to build a database query, and does not restrict which template file a request may load, allowing unauthenticated users to inject SQL and to read question and answer content belonging to courses that are not publicly...

PT-2026-82116

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls bpf: reject dev-bound programs bound to a different device cls bpf prog from efd obtained a SCHED CLS program via bpf prog get type dev but never verified that a device-bound offloaded program's bound netdev matche...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098843 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called two times in a row for...

Linux Distros Unpatched Vulnerability : CVE-2026-79779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over...

Linux Distros Unpatched Vulnerability : CVE-2026-74746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: publish GC-visible tuple last nfflowtableiterate only treats original-direction tuple nodes as owning entries. Publishing the original nod...

Linux Distros Unpatched Vulnerability : CVE-2026-80587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: avoid combining some incoming suboptions Some MPTCP suboptions are mutually exclusive according to the RFC8684, but also because in different places, the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104573 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at...

Linux Distros Unpatched Vulnerability : CVE-2026-79285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-79084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098918 advisory. In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the...

Linux Distros Unpatched Vulnerability : CVE-2026-80540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Fix UVD decode image min size calculation This needs to use pitch instead of width. Also reject pitch over 4096 to avoid overflow. cherry picked fro...

Linux Distros Unpatched Vulnerability : CVE-2026-80567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmif54bufferqueue waited for the worker thread to finish but ignored whether it...

Linux Distros Unpatched Vulnerability : CVE-2026-79238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin...

Linux Distros Unpatched Vulnerability : CVE-2026-78968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098674 advisory. In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-fre...

Linux Distros Unpatched Vulnerability : CVE-2026-79174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098903)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098903 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4allocstid publishes the new stid into...

Linux Distros Unpatched Vulnerability : CVE-2026-79201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-79125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-79045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a...