PT-2026-109177

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

RHEL 10 : cjose (RHSA-2026:79122)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79122 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wr...

PT-2026-108974

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...

Oracle Linux 10 : cjose (ELSA-2026-79122)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-79122 advisory. 0.6.2.2-7.1 - Fix CVE-2026-53938: heap buffer overflow in AES key unwrap Resolves: RHEL-256962 Tenable has extracted the preceding description block directly...

ROS-20261009-73-0256

The vulnerability of the digiportinit function in the drivers/usb/serial/digiacceleport.c module of the Linux device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261009-73-0088

The vulnerability of the fs/buffer component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

AlmaLinux 9 : freerdp (ALSA-2026:76755)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76755 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

mod_auth_openidc:2.3 security update

cjose 0.6.1-5 - CVE-2026-53938 cjose: heap buffer overflow in AES key unwrap Resolves: RHEL-256961 modauthopenidc 2.4.9.4-9 - Resolves: RHEL-248080 CVE-2026-54789 Denial of Service via malformed state cookie parsing...

ROS-20261009-73-0454

The vulnerability of DRM/V3D components in the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...

CVE-2026-75350

The EIPStackGroup OpENer software (v2.3 / master commit 76b95cf) is vulnerable to a buffer overflow within the GetAttributeList() implementation. This flaw can be triggered by a remote attacker by sending specially crafted EtherNet/IP Get_Attribute_List service requests. Successful exploitation r...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel / etc Multiple Vulnerabilities (crlsa-2026_77369)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202677369 advisory. modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsing CVE-2026-54789 cjose: cjose: Heap buffer overflow in AES Key Wrap...

Cisco NX-OS Software NX-API RCE (cisco-sa-napi-rce-r2shwu2j)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A heap-based buffer overflow condition exists in the NX-API feature due to insufficient input validation of data sent to the NX-API. An unauthenticated, remote attacker can exploit this, by sending a...

SUSE SLES12 Security Update : fetchmail (SUSE-SU-2026:4567-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4567-1 advisory. This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote...

AlmaLinux 10 : glibc (ALSA-2026:76781)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76781 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791...

openSUSE 16 Security Update : busybox (openSUSE-SU-2026:22040-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22040-1 advisory. - CVE-2023-42366: heap-buffer-overflow in the nexttoken function bsc1217586. - CVE-2026-38752: Denial of Service via crafted AWK script...

AlmaLinux 10 : cjose (ALSA-2026:79122)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:79122 advisory. cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service CVE-2026-53938 Tenable has extracted the preceding description block...

MiracleLinux 8 : ghostscript-9.27-18.el8_10 (AXSA:2026-2006:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2006:02 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly fro...

AlmaLinux 10 : openssl (ALSA-2026:76918)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76918 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_76918)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676918 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...