PT-2026-71353

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description A buffer overflow exists in the IXF IMPORT parser. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-71036

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The PROFINET service is affected by a buffer overflow, which occurs when a program writes more data to a block of memory than it can hold. This issue exists in t...

The vulnerability of the functions bitPutcs_aligned() and bitPutcs_unaligned() in the Linux kernel’s drivers/video/fbdev/core/bitblit.c file, which allows a hacker to cause a service failure.

The vulnerability of the functions bitPutcsaligned and bitPutcsunaligned in the Linux kernel’s drivers/video/fbdev/core/bitblit.c module lies in the fact that they allow data buffers to be read beyond their permitted limits. Exploiting this vulnerability could enable an attacker to cause a servic...

AlmaLinux 9 : firefox (ALSA-2026:47104)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47104 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue in the...

MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.2.ML.1 (AXSA:2026-1517:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1517:04 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-71266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p,...

Linux Distros Unpatched Vulnerability : CVE-2026-68339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: validate Realtek vendor event length btusbrecveventrealtek reads the event code at data0 and the Realtek subevent code at data2 before decidin...

perl-DBI:1.641 security update

perl-DBI 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 Resolves: RHEL-193298 1.641-5 - Fix stack overflow and buffer overflow in DBI.x...

Linux Distros Unpatched Vulnerability : CVE-2026-68431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2PROTONUMBER. A pack...

Linux Distros Unpatched Vulnerability : CVE-2026-68305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/vf: Add drmdev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction. In some cases, BOs may be destroyed...

Linux Distros Unpatched Vulnerability : CVE-2026-68316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size handling in the command stream validation which...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0281-1 Rating: critical References: 1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145...

Fortinet Fortigate Stack buffer overflow in WAD (FG-IR-26-161)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-161 advisory. - A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an...

RHEL 7 : firefox (RHSA-2026:54248)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54248 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: libaom:...

PT-2026-70993

The userspace syscall verifiers z vrfy zsock sendmsg and z vrfy zsock recvmsg in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net msghdr into a kernel-side copy with k usermode from copy, but then re-read the still-live user struct for subsequent decisions. The kernel iove...

PT-2026-70960

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw surface metadata::array size This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...

PT-2026-71343

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An unauthenticated SSH client can trigger a denial of service by sending an SSH MSG KEX ECDH INIT message containing a 32-byte all-zero Q C value. The Curve25519Kex::server dh function in...

Linux Distros Unpatched Vulnerability : CVE-2026-18724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - open-iscsi - None Red Hat Enterprise Linux - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing Ubuntu Linux - Unknown...

PT-2026-70947

In the Linux kernel, the following vulnerability has been resolved: libceph: bound get version reply decode to front len handle get version reply uses msg-front alloc len as the decode boundary for MON GET VERSION REPLY. That is the size of the reused reply buffer, not the number of bytes actuall...

The vulnerability of the fs/orangefs component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...