PT-2026-118293

Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core...

Linux Distros Unpatched Vulnerability : CVE-2026-70007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-96224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-96224 Note that Nessus relies on the presence of the packag...

Red Hat: CVE-2026-113496: cockpit-machines: VNC console password disclosure through virt-xml command-line arguments

A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross-user process inspection could read the...

Oracle E-Business Suite: CVE-2026-87403: Critical Patch Update

Vulnerability in the Applications DBA product of Oracle E-Business Suite component: AD Utilities. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Applications DBA executes to compromise...

PT-2026-118748

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in CSS allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version 156.0.8078....

PT-2026-118774

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the Core component on Mac allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update to version...

PT-2026-119022

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 156.0.8078.47 Description Memory corruption occurs in the SignIn component, which could allow a remote attacker to read memory within the sandbox by enticing a user to visit a specially crafted HTML page...

PT-2026-118727

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in the V8 engine allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script load...

PT-2026-118943

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 156.0.8078.47 Description Memory corruption in the iOSWebView component allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-118754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in ComputePressure allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from on...

PT-2026-118890

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in the V8 engine allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-118763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Fonts allows a remote attacker to read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version 156.0.8078.47 or late...

Google Chrome Vulnerability: CVE-2026-113128

Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Trust module OPNsense Privilege Escalation

The vulnerability of the Trust module in the OPNsense operating system is related to insufficient validation of entered data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information and increase their privileges...

PT-2026-119886

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Clean Content SDK. The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In...

CVE-2026-105453 IBM Sterling Connect:Direct for Unix Improper Privilege Management

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management...

SUSE CVE-2026-111392

SGLang through 0.5.21 trusts caller-supplied mmhashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or...

SUSE CVE-2026-112074

A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/matpixel.cpp of the component Conversion API. The manipulation results in integer overflow. The attack can be launched...

CVE-2026-98540

A flaw was found in the Linux kernel's function probe fprobe tracing component. This vulnerability can result in a Denial of Service DoS due to improper memory initialization. When tracing kernel functions, unused shadow stack space is left uncleared, causing return routines to parse leftover dat...