Linux Distros Unpatched Vulnerability : CVE-2026-68546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to an out-of-bounds write flaw in the RemoteIo::Impl::populateBlocks function. When Exiv2 processes network-hosted metadata via a...

Linux Distros Unpatched Vulnerability : CVE-2026-78221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to cause memory...

Linux Distros Unpatched Vulnerability : CVE-2026-86098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer...

PT-2026-86415

Name of the Vulnerable Software and Affected Versions AVideo affected versions not specified Description Broken access control in the 'videoViewsInfo' endpoint allows unauthenticated callers to retrieve complete user records when a hash parameter is provided. The exposed data includes password...

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

These are the workshop materials for "Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel", presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture and Evasion, C2 customization, and kernel-level techniques using Elastic...

PT-2026-86468

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A remote buffer overflow exists in the formURL function within the /boaform/admin/formURL endpoint. This issue occurs when the Keywd/urlFQDN argument is manipulated, potentially allowing a...

PT-2026-86315

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post content Custom HTML block inner HTML' parameter in all versions up to, and including, 2.4.30 due to insufficient input sanitization and output...

Linux Distros Unpatched Vulnerability : CVE-2026-80753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global...

Linux Distros Unpatched Vulnerability : CVE-2026-80745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: fp9931: Fix VPOS/VNEG voltage selector table The VPOSNEGtable mapping does not match the FP9931 datasheet. The datasheet defines the VPOS/VNEG voltag...

Linux Distros Unpatched Vulnerability : CVE-2026-80736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved...

Linux Distros Unpatched Vulnerability : CVE-2026-85522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-84256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary comman...

PT-2026-86440

Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.10.7 Description The BPF interpreter fails to validate the register index when loading or storing values from or to a scratch memory register. While the index is an unsigned 32-bit integer that should not exceed 15,...

Linux Distros Unpatched Vulnerability : CVE-2026-86143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a...

Linux Distros Unpatched Vulnerability : CVE-2026-78043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and...

Linux Distros Unpatched Vulnerability : CVE-2026-80746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix dispccmdssmdpclksrc RCG stall on Eliza EVK Eliza EVK...

Linux Distros Unpatched Vulnerability : CVE-2026-80735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this...

Linux Distros Unpatched Vulnerability : CVE-2026-82312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC...

Linux Distros Unpatched Vulnerability : CVE-2026-86137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-86095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4HDF5inqattname that copies HDF5 attribute names into a fixed 256-byte buffer...