Linux Distros Unpatched Vulnerability : CVE-2026-108831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the...

Linux Distros Unpatched Vulnerability : CVE-2026-112934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user...

Linux Distros Unpatched Vulnerability : CVE-2026-105081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowin...

Automated Screening of Privacy Risks in Medical AI

Medical artificial intelligence AI models are often shared without their training data, assuming this protects the patients who contributed them. However, a model can reveal whether a patient's records were used in training, a privacy breach known as a membership inference attack. This risk is...

Linux Distros Unpatched Vulnerability : CVE-2026-109786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an on suffix after the host address. Because OpenSSH logs the...

Improper handling of exceptions in Apache bRPC

Versions of Apache bRPC prior to 1.18.0 contain an improper exception handling vulnerability. This vulnerability stems from an error in calculating the number of slots within the dynamic table’s circular buffer for HPACK header compression decoding; it fails to account for a minimum of 33 bytes p...

Linux Distros Unpatched Vulnerability : CVE-2026-112027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability ...

Linux Distros Unpatched Vulnerability : CVE-2026-112026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the...

Linux Distros Unpatched Vulnerability : CVE-2026-113082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2026-142298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142298 advisory. A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component...

Linux Distros Unpatched Vulnerability : CVE-2026-112941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the .r...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: emacs (UTSA-2026-142367)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142367 advisory. A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenate...

PT-2026-120438

A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get model meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The atta...

PT-2026-120796

A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The...

PT-2026-120782

A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argument security 5g causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publish...

PT-2026-120843

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer id/ticket id/payment id/id/document id/salary id/emp id/user id leads to sql injection. The attack can be initiated remotely...

VulnCheck KEV: CVE-2026-65600

Traefik versions = v3.6.0 = v3.7.0 = v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware. When ReplacePathRegex is configured with a regex that captures user-controlled path segments without a mandatory path separator e.g. regex "^/api.", replacement "/$1...

Linux Distros Unpatched Vulnerability : CVE-2026-109245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdphttprequest in libfreerdp/utils/http.c that completes TLS...

CVE-2026-113735 D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...

CVE-2026-113735 D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...