Linux Distros Unpatched Vulnerability : CVE-2026-76035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox...

Linux Distros Unpatched Vulnerability : CVE-2026-76036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a...

CVE-2026-71694

CVE-2026-71694 is a vulnerability in the Berkeley Out-of-Order Machine (BOOM) / BoomTile RTL benchmark v1.2 (commit 2d08d0d8). The flaw resides in the CSR trap-return state restoration logic , specifically the MRET handling logic and the mstatus.MPRV update path within the CSRFile logic of the Pr...

PT-2026-78670

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can execute arbitrary code due to improper validation of network-supplied pointers. Recommendations At the moment, there is no information about a newer...

PT-2026-78669

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to execute arbitrary code. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is...

CVE-2026-51366

Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a SQL injection vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, low-privilege attacker can exploit this to achieve arbitrary code execution , resulting in full compromise of confidentiality, integrity, a...

PT-2026-78741

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user without admin or power roles can achieve Remote Code...

Linux Distros Unpatched Vulnerability : CVE-2026-76042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory...

ROS-20260819-73-0038

The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-78406

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1 Description The Gremlin query engine contains a flaw where the ArcadeGremlin.executeStatement function silently reverts to an insecure Groovy engine if a request includes any query parameter and the query fail...

PT-2026-78554

Name of the Vulnerable Software and Affected Versions Orval versions prior to 8.21.0 Description Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. A flaw exists where a $... expression or backtick in a header parameter default is emitted int...

PT-2026-78608

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a remote attacker to execute arbitrary code. A heap buffer overflow occurs when a program writes more data to a heap-allocated memor...

PT-2026-78581

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware version FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2...

PT-2026-78822

Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 6.0.0 Description A user with the "power" Splunk role can execute arbitrary code on the Splunk server by loading a model file containing crafted sparse matrix data. This occurs because a model codec...

OpenJDK 8 <= 8u502 / 11.0.0 <= 11.0.32 / 17.0.0 <= 17.0.20 / 21.0.0 <= 21.0.12 / 25.0.0 <= 25.0.4 / 26.0.0 <= 26.0.2 Multiple Vulnerabilities (2026-08-18)

The version of OpenJDK installed on the remote host is 8 prior to 8u502 / 11.0.0 prior to 11.0.32 / 17.0.0 prior to 17.0.20 / 21.0.0 prior to 21.0.12 / 25.0.0 prior to 25.0.4 / 26.0.0 prior to 26.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-08-18 advisory...

PT-2026-78545

Name of the Vulnerable Software and Affected Versions Orval versions prior to 8.21.0 Description An issue exists where unescaped backticks in an OpenAPI path are emitted into request URL template literals for axios, fetch, react-query, and SWR clients without safe encoding. This allows...

Linux Distros Unpatched Vulnerability : CVE-2026-63639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload th...

CVE-2026-71694

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

PT-2026-78671

Name of the Vulnerable Software and Affected Versions IBM OpenBMC versions FW1060.00 through FW1060.80 Description A flaw exists in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can execute arbitrary code under specific conditions, which may...

Linux Distros Unpatched Vulnerability : CVE-2026-76044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra...