CVE-2026-109681

The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142325 advisory. An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...

Apache bRPC buffer error vulnerability

Versions 1.11.0 through 1.17.0 of Apache bRPC contain a buffer error vulnerability. This vulnerability arises because the streaming RPC client fails to validate the size of the returned list of extrastreamids prior to processing StreamSettings responses. It then returns identifiers by using a loc...

Linux Distros Unpatched Vulnerability : CVE-2026-114046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142336)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142336 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142329 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1,...

Improper handling of exceptions in Apache bRPC

Versions of Apache bRPC prior to 1.18.0 contain an improper exception handling vulnerability. This vulnerability arises because the Thrift client fails to catch exceptions thrown by Apache Thrift when decoding malformed TException responses returned by the server. As a result, these exceptions ar...

PT-2026-120570

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check is full package, after which the parser reads the response ty...

Cisco AnyConnect: CVE-2026-76462: Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

Apache Pulsar authorization issue vulnerability

Versions of Apache Pulsar from 2.0.0-rc1-incubating up to 4.0.14 and from 4.1.0 up to 4.2.5 contain an authorization issue vulnerability. This vulnerability arises because the Functions Worker triggers function endpoints that fail to verify whether the caller has the necessary permissions to...

PT-2026-120545

An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC versions 1.11.0 through 1.17.0 on all platforms. A client that creates multiple streams in a single RPC expects the server response to carry exactly one extra stream id for every additional stream. The response...

PT-2026-120170

FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidated mappedWidth and mappedHeight values. Attackers can send a crafted RDPGFX MAP SURFACE TO WINDOW PDU with oversized...

PT-2026-120167

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client cli present gateway message that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

Vulnerability related to encryption issues in Apache Traffic Server

A cryptographic issue vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises when TLS sessions are restored via cross-SNI virtual hosts without revalidating client certificates as required by...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142335 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembl...

PT-2026-120790

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.0.0 through 9.2.15 Apache Traffic Server versions 10.0.0 through 10.1.4 Apache Traffic Server version 10.2.0 Description The default outbound session-sharing policy allows the reuse of a pooled TLS session...

PT-2026-120691

A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An...

Linux Distros Unpatched Vulnerability : CVE-2026-109251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in...

Unity Linux 20.1070a Security Update: libXfont2 (UTSA-2026-141782)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141782 advisory. fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slic...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-141779)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141779 advisory. An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers such as HTTP...