PT-2026-118264

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution...

PT-2026-118273

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...

ALSA-2026:85959 Moderate: fetchmail security update

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

PT-2026-118291

A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

PT-2026-118281

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution...

PT-2026-118272

A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution...

ALSA-2026:85968 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmi...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420...

CVE-2025-60475

A buffer overflow in the gfac4parserbs function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

Linux Distros Unpatched Vulnerability : CVE-2026-112393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale- heap disclosure in tiffWriteProc when saving compresse...

Siemens APOGEE Controllers Stack-based Buffer Overflow (CVE-2026-102074)

The affected product FTP service does not properly validate the length of user-controllable input. This could allow an unauthenticated remote attacker to cause a denial of service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792508765)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792508765 advisory. - BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

Rocky Linux 9.6 [TuxCare] Security Update: lrzsz Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792503867)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792503867 advisory. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53183)

In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the window field in the TCP header refers to the MPTCP-level rcvnxt and it's right edge should not move backward. Such constraint is enforced at DSS option generation...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46294)

"In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31694)

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The existing logic only checks...

Oracle Linux 10 : kernel (ELSA-2026-77690)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-77690 advisory. - udp: fix potential use-after-free in tunnel segmentation Antoine Tenart RHEL-268127 CVE-2026-74705 - nfsd: defer vfree of compound ops to fix...

MiracleLinux 9 : kernel-5.14.0-687.49.1.el9_8 (AXSA:2026-2093:103)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2093:103 advisory. kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow CVE-2026-23172 kernel: xfrm: hold dev ref until after transportfinish...

RockyLinux 8 : libsoup (RLSA-2026:84586)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84586 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket...

AlmaLinux 9 : compat-openssl11 (ALSA-2026:80514)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:80514 advisory. openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offse...