Linux Distros Unpatched Vulnerability : CVE-2026-98054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Memcached vulnerability (USN-8792-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8792-1 advisory. It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause...

Kibana Connectors SSRF

The vulnerability of the Kibana Connector request execution mechanism of the Kibana visualization service is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Kibana SSRF

The vulnerability of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Erlang/OTP Path Traversal Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Fleet Plugin Unauthorized Access

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Dashboard Bypass Security

The vulnerability of the dashboard management mechanism of the Kibana data visualization service is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

PHP-phpseclib Time Mismatch Unauthorized Access

The vulnerability of the PHP-phpseclib interpreter lies in manipulating an unknown input, which leads to a time mismatch vulnerability. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Fleet Plugin Bypass Security Restrictions

The vulnerability of the Fleet plugin of the Kibana data visualization service is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Erlang/OTP Unauthorized Access

The vulnerability of the Erlang/OTP software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Kibana APM Unauthorized Access

The vulnerability of the Application Performance Monitoring APM component of the Kibana data visualization service is related to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protecte...

Jenkins Permission Checking Unauthorized Access

The vulnerability of the permission checking mechanism when accessing data from Jenkins automation servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

Jenkins URL Redirection Phishing

The vulnerability of the URL redirection check mechanism after a Jenkins automation server is accessed involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...

Podman WORKDIR Security Restriction Bypass

The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...

OpenBao secret encryption management system Name Reference DoS

The vulnerability of the OpenBao encryption and secret management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Erlang/OTP Type of Man-in-the-Middle

The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

FreeRDP Buffer Overflow RCE

The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FreeRDP Zero Division DoS

The vulnerability of the RDP client FreeRDP is related to division by zero errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...