RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

RLSA-2026:77498 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – 5G NAS Message Buffer Overflow in gNodeB Program Code C simulation // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t iebufferMAXIESIZE; // Read IE...

nginx-cve-2026-42945-poc

CVE-2026-42945 — NGINX Rewrite Module Heap Buffer Overflow → RCE RCE confirmed successful — via heap overflow + GDB process injection, execute arbitrary commands in NGINX / OpenResty worker processes. Quick Start One-click build NGINX image + execute RCE test ./run.sh nginx One-click build...

CVE-2026-63292

⚠️ CVE-2026-63292 — Apache HTTP Server Security Vulnerability 🔐 --- 🔎 Overview CVE-2026-63292 is a stack-based buffer overflow vulnerability affecting the Apache HTTP Server modvhostalias module. The issue can be triggered under specific server configurations involving oversized HTTP Host headers...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-42945

CVE-2026-42945 Practical Risk Assessment Script A local risk assessment tool for CVE-2026-42945 Nginx Rift. Unlike simply telling you "version is affected so it's dangerous", this script checks the three conditions that truly determine risk layer by layer and gives a conclusion tailored to your...

imagemagick:encoder_inline_fuzzer: Heap-buffer-overflow in ReadBlob

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5979567836430336 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderinlinefuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

EUVD-2026-95474

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...

CVE-2026-7827

FalkorDB versions prior to 4.18.4 are vulnerable to a stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (located in src/serializers/decoders/*/decode_graph_entities.c). The root cause is an unbounded property count in a crafted RDB stream, where the count sizes ...

CLEANSTART-2026-OA19961 ap_escape_quotes() may write beyond the end of a buffer when given malicious input

Security vulnerability affects the apache2 package. apescapequotes may write beyond the end of a buffer when given malicious input...

CLEANSTART-2026-DN02833 carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)

Security vulnerability affects the apache2 package. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts...

CLEANSTART-2026-KG18431 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-IE69074 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop

CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...

EUVD-2026-95401

A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...

EUVD-2026-95323

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

EUVD-2026-95330

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or...