Linux Distros Unpatched Vulnerability : CVE-2026-77806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection...

Debian dsa-6459 : libnet-dns-perl - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6459 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6459-1 [email protected] https://www.debian.org/securit...

PT-2026-79589

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for unauthenticated attackers to inject a PH...

PT-2026-79643

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

Linux Distros Unpatched Vulnerability : CVE-2026-74638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. ...

Linux Distros Unpatched Vulnerability : CVE-2026-74704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if...

PT-2026-79733

In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b addr in xfs buf free When xfs buf alloc backing mem fails, xfs buf free is called with bp-b addr still NULL. The code falls through to the folio put path which calls virt to folioNULL, dereferencing an invalid...

PT-2026-79548

luci-lib-px5g LuCI contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1 add obj x509write.c when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length encoding of 255 bytes, but the payload...

PT-2026-79529

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A stack-based buffer overflow exists in the NTP Timezone Configuration Handler within the uci safe get function of the /cgi-bin/apply time.cgi endpoint. This issue occurs because the function...

PT-2026-79742

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A stack-based buffer overflow exists in the Web Management component. The issue occurs when the device processes input for NTP timezone settings via the /cgi-bin/mbox-config?method=SET&section=ntp...

PT-2026-79580

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik 4.7.3 - The PHP form element is vulnerable to the execution of user provided codes...

PT-2026-79637

In the Linux kernel, the following vulnerability has been resolved: mm/huge memory: fix huge zero pfn race Patch series "mm/huge memory: fix huge zero pfn race", v2. There is a subtle race in the reference-counted huge zero folio implementation. The fast path atomic logic fails to account for the...

Linux Distros Unpatched Vulnerability : CVE-2026-74721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to...

PT-2026-79570

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and grant types per client and documents both as client registration. token dispatche...

PT-2026-79726

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdna insert pages Two error paths in amdxdna insert pages called vma-vm ops-closevma before returning an error code to the caller. This is incorrect: amdxdna gem obj mmap registers an...

PT-2026-79691

In the Linux kernel, the following vulnerability has been resolved: rqspinlock: Reset tail when preserving queue on deadlock Currently, the destruction of the waiter queue is suppressed for rqspinlock in cases where a deadlock is detected. Deadlock checks happen relatively frequently on entry for...

Linux Distros Unpatched Vulnerability : CVE-2026-68766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...

Linux Distros Unpatched Vulnerability : CVE-2026-74598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both chec...

Linux Distros Unpatched Vulnerability : CVE-2026-74674

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: fix incorrect flush address in direct page table reclaim When zappterange reclaims a page table, it does: ptefreetlbtlb, pmdpgtablepmdval, addr %NASLMINLEV...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:3678-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3678-1 advisory. - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. -...