Linux Distros Unpatched Vulnerability : CVE-2026-19391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows...

PT-2026-70452

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

CVE-2026-62705: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-70883

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.5 Description A misinteraction between agent locking and the [email protected] extension in ssh-agent allows certain operations intended only for local use to be performed remotely. This occurs because a...

Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

MGASA-2026-0331 Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

SUSE-SU-2026:3554-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: cache...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

UBUNTU-CVE-2026-68264

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset currentop in xeptupdateopsinit xeptupdateopsinit fails to reset currentop to 0. On the vmbind path, opsexecute calls xeptupdateopsprepare inside the xevalidationguard / drmexecuntilalllocked loop. When that loop...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

EUVD-2026-55423

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...

Security Bulletin:Vulnerability in bind affects IBM Netezza Appliance

Summary The bind package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2026-1519, CVE-2025-40778 Vulnerability Details CVEID:CVE-2026-1519 DESCRIPTION: If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, th...

Security Bulletin:Vulnerability in BIND 9 affects IBM Netezza Appliance

Summary The BIND 9 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5946 Vulnerability Details CVEID:CVE-2026-5946 DESCRIPTION: Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet...

PT-2026-69664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the function xe pt update ops init fails to reset the current op variable to 0. During the vm bind path, the ops execute function calls xe pt...

EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-3113)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone...

EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-3058)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone...

CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering

Domoticz versions prior to 2026.3 contains a stored cross-site scripting vulnerability in the mobile dashboard that allows authenticated attackers to inject arbitrary HTML and JavaScript by updating Text or Alert subtype device values through the API. The mobile dashboard renders device data via...

Malicious Package

Overview @mrbenty8jf1p9y5/oidc-bind-canary is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DNS [CVE-2026-3039, CVE-2026-3592, CVE-2026-5946]

Summary BIND Domain Name System for IBM i is vulnerable to exessive memory consumption when receiving specially constructed packets CVE-2026-3039, amplified resource consumption when querying a specially crafted zone CVE-2026-3592, and flaws in handling of DNS messages whose CLASS is not Internet...