EUVD-2026-113257

An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip...

PT-2026-132851

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as 100, ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the...

Important: nvidia-fabricmanager

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Important: nvidia-modprobe

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Important: cuda-drivers

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Important: nvidia-kmod-common

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Important: kmod-nvidia-open-dkms

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

Important: libnvidia-nscq

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

RHEL 9 : flatpak (RHSA-2026:90364)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90364 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-146980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146980 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcoremodule module. When asynchronous file I/O AIO is enabled in certain configurations, processin...

Rocky Linux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793285499)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793285499 advisory. - Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap...

MiracleLinux 8 : flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac (AXSA:2026-2174:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2174:01 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

RHEL 8 : osbuild-composer (RHSA-2026:90493)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90493 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

PT-2026-132785

Name of the Vulnerable Software and Affected Versions ServiceNow AI Platform affected versions not specified Description A sandbox escape issue exists in the ServiceNow AI Platform. An authenticated user with the admin role can bypass Rhino sandbox restrictions to execute arbitrary code on the...

EUVD-2026-113367

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the idservice.exe component...

CVE-2026-61645: docat-org docat: Docat is a tool for hosting versioned static documentation

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

CVE-2023-22793: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the…

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

EUVD-2026-113368

An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the idservice.exe component...

CVE-2026-92092: Red Hat: A flaw was found in openshift-ansible

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-51832

The IDrive IDrive Backup for Windows software (version 7.0.1.1 and below ) contains a vulnerability in the id_service.exe component. This issue allows a local attacker to perform arbitrary code execution . The vulnerability has been remediated in Version 7.0.1.2 . No specific exploit information ...