Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053221)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053221 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has...

PT-2026-86485

The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an administrator, and on...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053414 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit...

PT-2026-86529

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

PT-2026-86538

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: etcd (UTSA-2022-001270)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001270 advisory. In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include...

PT-2026-86518

h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack utility that fails to sanitize protocol-relative paths in the Referer header pathname. Attackers can craft a same-origin URL with a double-slash path segment that passes origin validation but produces a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053272 advisory. In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compress...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-073378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073378 advisory. In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute...

PT-2026-86473

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.29.13 Description An authentication bypass allows unauthenticated attackers to take over accounts. The issue occurs because the pre update value function lacks capability or ownership checks, an...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073359 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no regions If the first op of a transaction is a...

PT-2026-86502

A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.php of the component dmWidget. Such manipulation of the argument widget id leads to authorization bypass. The attack ma...

PT-2026-86511

A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the component AMF/MME. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The identifie...

PT-2026-86523

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the is same gym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other us...

PT-2026-86519

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedCookie and deleteChunkedCookie functions. Attackers can send a crafted cookie header with an extremely large chunk count to trigger an On² cleanup loop that hangs the server...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053199 advisory. In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: Use setbit and testbit at worker-flags Utilize setbit and testbit on worker-flags...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073374 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen a...

PT-2026-86525

wger before 2.6 affected versions = 2.5.0 contains an open redirect vulnerability in the trainer login view wger/core/views/user.py. After a trainer enters impersonation mode, the view redirects to the user-supplied 'next' GET parameter via HttpResponseRedirect without validating it with url has...

PT-2026-86533

MISP's UiBeta theme collection view app/View/Themed/UiBeta/Collections/view.ctp performed a secondary query of member events by UUID without applying the caller's access control list ACL. The CollectionsController::view action correctly resolved collection element UUIDs through...

PT-2026-86539

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...